Privacy Policy.
Effective May 27, 2026
Who we are
This Privacy Policy describes how SH Digital Group, a Delaware limited liability company with its principal office in Florida (“SH Digital Group,” “we,” “us”), handles information collected through shdigitalgroup.com (the “Site”).
This policy governs the marketing Site only. If you become a client and sign our Master Service Agreement (“MSA”), the data-protection terms in that agreement govern data we process on your behalf in connection with the services. Nothing here modifies the MSA.
What we collect
We collect only what we need to respond to inquiries, prevent abuse of this Site, and understand aggregate traffic.
- Contact form submissions. First name, last name, business name, email address, current website (if you provide one), and any notes you include.
- Technical metadata. IP address, user agent, and request timestamps. We use these briefly to rate-limit submissions and verify that requests come from real users, not automated traffic.
- Aggregate analytics. We use Vercel Analytics, which is cookieless and does not track you across sites. We see counts and patterns, not identities.
We do not use advertising cookies, third-party tracking pixels, session-replay tools, or cross-site identifiers on this Site.
Why we collect it
- To respond to your inquiry and follow up about working together.
- To protect the Site from spam, abuse, and automated attacks.
- To understand which pages and sections are useful so we can improve them.
Our legal bases under the GDPR (where it applies) are your consent in submitting the form, our legitimate interest in operating a secure marketing site, and our legitimate interest in evaluating prospective business relationships.
Who processes data on our behalf
We use a small set of well-known providers as processors. Each is bound by contract to handle data only on our instructions.
- Vercel — hosting, request logging, and cookieless analytics for the Site.
- Resend — delivery of contact-form submissions to our inbox.
- Upstash — short-term storage of IP addresses (about ten minutes) used to rate-limit form submissions.
How long we keep it
- Contact submissions are kept in our inbox for as long as is reasonably needed to evaluate or serve the inquiry, and are then deleted on request or in our normal review cycle.
- Rate-limit records expire automatically within about ten minutes.
- Server logs are retained by Vercel under their standard log-retention policy.
Cookies & tracking
We do not set marketing or advertising cookies on this Site. Vercel Analytics, which we use to measure aggregate traffic, is cookieless. Our hosting provider may set strictly necessary cookies for security purposes.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, email support@shdigitalgroup.com. We respond within 30 days.
California residents. Under the CCPA/CPRA, you have the right to know what we collect, request deletion, correct inaccurate information, and opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for inferring characteristics.
EU/UK residents. Personal data submitted through this Site is processed in the United States. You may lodge a complaint with your local supervisory authority.
Marketing use of client identity
If you become a client and sign the MSA, we may identify you as a customer and use your name, logo, and high-level descriptions of the work in our marketing materials and case studies, as described in the MSA. You can opt out by written notice; opt-out is prospective only.
Children
This Site is not directed to children under 16 and we do not knowingly collect personal information from them.
Security
We use commercially reasonable administrative and technical safeguards to protect information submitted through the Site, including TLS for transit, scoped access controls for our inbox, and platform-level protections from our hosting and email providers. No method of transmission or storage is perfectly secure.
Changes to this policy
We may update this policy from time to time. The “Effective” date at the top of the page shows when it last changed. Material changes will be highlighted on the Site.
Contact
Questions about this policy, or requests under it, go to support@shdigitalgroup.com.

