Privacy policy

Last updated: August 14, 2026

daarc, Inc., doing business as Shadow and Shield ("Shadow and Shield," "we," "us," or "our"), operates shadowandshield.com and the related store, products, customer accounts, forms, communications, and services (collectively, the "Services"). Shopify hosts our store and processes information needed to provide the Services. This Privacy Policy explains what personal information we collect, where it comes from, why we use it, how we disclose it, how long we retain it, and the privacy rights available to you.

This Policy applies when you visit or use the Services, make or consider a purchase, create an account, subscribe to updates, request a quote or capability, contact us, or otherwise interact with us. It does not apply to third-party sites or services that have their own privacy notices.

Notice at Collection

At or before collection, you can review our separate Privacy Notice at Collection, which provides a category-by-category summary of the information we collect, the purposes for collecting it, whether it is sold or shared, and our retention periods or criteria.

We do not sell personal information for money. We may "share" identifiers, commercial information, internet or other electronic activity, and related inferences with Shopify or advertising partners for cross-context behavioral advertising when those features are enabled. California and some other state laws may also call this a "sale" even when no money is exchanged. You can opt out through Your Privacy Choices or by using a browser that sends a recognized Global Privacy Control signal.

Personal Information Practices

The following describes the categories of personal information we have collected during the preceding 12 months and expect to continue collecting. The information we collect in a particular interaction depends on what you do and which features you use.

Identifiers and customer-record information

Examples: name, email address, telephone number, billing and shipping address, organization, customer or account identifier, IP address, and device identifiers.
Sources: directly from you; automatically from your browser or device; and from Shopify, service providers, or partners that support the Services.
Purposes: provide accounts and Services; respond to inquiries and quote requests; process, fulfill, and support orders; communicate with you; prevent fraud; secure the Services; perform analytics; and send requested marketing.
Disclosed to: Shopify; payment, security, analytics, hosting, customer-support, fulfillment, and shipping providers; professional advisers; and government authorities when legally required.
Sold or shared: Sold for money: No. Shared for cross-context behavioral advertising: Yes, where advertising features are enabled.
Retention: account information is generally retained while the account is open and for up to two years after closure; order-related identifiers are generally retained for seven years after the transaction; inquiry information is generally retained for three years after the last interaction; marketing contact information is retained until you unsubscribe or the purpose ends, with a suppression record retained as needed to honor your choice.

Commercial and financial information

Examples: products viewed, cart activity, purchases, returns, refunds, warranty or service history, transaction amount, payment method, and payment confirmation. Full payment-card credentials are processed by Shopify and payment providers; we do not intentionally store full card numbers.
Sources: directly from you and from Shopify, payment providers, fulfillment providers, and transaction partners.
Purposes: process payments and orders; arrange delivery; provide returns, refunds, warranties, training, software access, and support; prevent fraud; maintain tax and accounting records; and understand product demand.
Disclosed to: Shopify; payment and fraud-prevention providers; fulfillment and shipping providers; tax, accounting, and professional advisers; and authorities when legally required.
Sold or shared: Sold for money: No. Shared for cross-context behavioral advertising: Commercial interaction information may be shared where advertising features are enabled; payment credentials are not shared for advertising.
Retention: transaction, tax, accounting, refund, and warranty records are generally retained for seven years after the transaction, or longer while a warranty, dispute, legal hold, or other legal obligation remains active. Payment providers retain payment credentials under their own policies.

Internet or other electronic activity and approximate location

Examples: pages and products viewed, referring page, clicks, cart interactions, session information, browser and device type, cookie or similar identifiers, IP address, and approximate location inferred from an IP address.
Sources: automatically from your browser or device and from Shopify, analytics, security, and advertising technologies.
Purposes: operate and secure the Services; remember settings and carts; diagnose errors; prevent fraud; measure performance; understand use; improve the customer experience; and, where enabled, measure or personalize advertising.
Disclosed to: Shopify and providers of hosting, security, analytics, and advertising services.
Sold or shared: Sold for money: No. Shared for cross-context behavioral advertising: Yes, where advertising features are enabled.
Retention: cookie and similar identifiers are retained for the period shown in the applicable cookie or privacy controls or the provider's configured lifespan, generally no more than 24 months unless renewed; security and diagnostic records are generally retained for up to 24 months, or longer when needed to investigate an incident or comply with law.

Communications, quote requests, and submitted content

Examples: support messages, contact-form content, capability requests, configuration selections, organization information, procurement notes, reviews, and other information you choose to provide.
Sources: directly from you or your organization.
Purposes: respond to you; provide support; prepare quotes, configurations, and procurement documents; evaluate product needs; improve products and Services; maintain business records; and establish, exercise, or defend legal claims.
Disclosed to: Shopify and customer-support, communications, professional-adviser, and business-service providers that need the information to perform services for us.
Sold or shared: Sold for money: No. Shared for cross-context behavioral advertising: No.
Retention: generally three years after the last interaction, or longer when connected to an order, contract, active business relationship, dispute, legal hold, or legal requirement.

Account credentials and other sensitive personal information

Examples: account login credentials and payment information treated as sensitive under applicable law. Authentication and full payment-card credentials are processed by Shopify or payment providers.
Sources: directly from you and from Shopify or payment providers.
Purposes: authenticate and secure accounts; process payments; prevent fraud; and provide the Services you request.
Disclosed to: Shopify, payment processors, and security or fraud-prevention providers as needed to perform those functions.
Sold or shared: Sold: No. Shared for cross-context behavioral advertising: No.
Retention: account-authentication information is retained for the life of the account and a reasonable security period afterward under Shopify's applicable settings and policies; payment credentials are retained by payment providers under their policies. We retain payment confirmations and transaction records as described above.

Inferences

Examples: product interests or preferences inferred from browsing, cart, purchase, or communication activity.
Sources: generated from the information described above by us, Shopify, or analytics and advertising providers.
Purposes: understand demand, improve the Services, recommend relevant products, and measure or personalize advertising where enabled.
Disclosed to: Shopify and analytics or advertising providers where those features are enabled.
Sold or shared: Sold for money: No. Shared for cross-context behavioral advertising: Yes, where advertising features are enabled.
Retention: generally up to 24 months after the underlying activity, subject to opt-out choices and provider settings.

We do not use or disclose sensitive personal information to infer characteristics about you. We use it only for purposes reasonably necessary to provide requested goods or services, process payments, authenticate accounts, prevent fraud, maintain security, and comply with law. Because of those limited uses, we do not currently offer a separate right to limit the use of sensitive personal information.

We may retain information longer than the periods above when reasonably necessary to complete a transaction, honor a warranty, maintain a suppression record, comply with law, resolve a dispute, enforce an agreement, investigate abuse, or preserve information subject to a legal hold. We may retain de-identified information that cannot reasonably be linked to you.

How We Use Personal Information

Provide and improve the Services: operate the website and store; create and manage accounts; process payments; fulfill orders; arrange shipping; provide returns, refunds, warranties, training, software access, and support; remember preferences; and improve products and Services.
Communicate with you: respond to requests; provide order, account, service, safety, and policy notices; prepare quotes and procurement information; and maintain our business relationship.
Marketing and advertising: send marketing you request or otherwise permit, measure campaigns, and, where enabled and permitted, personalize advertising. You can unsubscribe from promotional email at any time.
Security and fraud prevention: authenticate accounts, secure payments and systems, detect and investigate suspicious or unlawful activity, and protect customers, the public, and our business.
Legal and business operations: maintain records; comply with law and valid legal process; enforce agreements; establish, exercise, or defend claims; conduct audits; and support a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.

How We Disclose Personal Information

We may disclose personal information to:

Shopify, service providers, and contractors that support hosting, ecommerce, payment processing, fraud prevention, analytics, customer support, communications, cloud storage, fulfillment, shipping, accounting, and professional services.
Advertising and marketing partners where those features are enabled and permitted. These disclosures may constitute "sharing," "sale," or targeted advertising under some state laws even though we do not sell information for money.
Parties you direct or authorize, such as carriers, payment methods, social-media services, or integrations you choose to use.
Government authorities, professional advisers, counterparties, or other parties when reasonably necessary to comply with law, respond to valid legal process, enforce agreements, protect rights or safety, investigate fraud or abuse, or complete a business transaction.

We do not sell personal information for money. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Cookies, Analytics, Advertising, and Privacy Signals

We and Shopify use cookies and similar technologies to operate the store, remember choices and carts, secure accounts and payments, analyze use, and, where enabled, support advertising. Some technologies are necessary for the Services to work; others may be controlled through the privacy or cookie controls presented on the site, subject to applicable law.

You can opt out of disclosures used for targeted or cross-context behavioral advertising through Your Privacy Choices. Where required by law, we treat a recognized Global Privacy Control signal as a request to opt out for the browser or device sending the signal and, when Shopify can associate the signal with an account, for that account. We do not currently respond to other browser "Do Not Track" signals because there is no generally accepted standard for them.

Third parties may collect information about your activity over time and across different websites or services when their technologies are enabled. Their processing is governed by their own privacy notices as well as our contractual arrangements and applicable law.

Relationship with Shopify

Shopify hosts the Services and processes information about your access to and use of the Services so it can provide and improve ecommerce, payment, security, analytics, and related features. Information you submit through the Services is transmitted to Shopify and may be processed in countries other than your own. When Shopify processes personal information for its own purposes, including certain enhanced services, Shopify is responsible for that processing. Review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal for more information.

Your Privacy Rights and Choices

Depending on where you live and subject to legal exceptions, you may have the right to:

know whether we process your personal information and access or obtain a portable copy of it;
request the categories and specific pieces of personal information we collected, the sources, purposes, and categories of recipients;
correct inaccurate personal information;
delete personal information;
opt out of sale, sharing, targeted advertising, or certain profiling;
limit certain uses or disclosures of sensitive personal information when applicable;
withdraw consent where processing is based on consent;
appeal a decision on a privacy request; and
receive equal service and not be discriminated against for exercising a privacy right.

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently offer a financial-incentive or price-difference program in exchange for personal information.

To exercise a privacy right, use Your Privacy Choices, email hello@shadowandshield.com, call +1 (949) 436-7464, or write to the address below. Describe the right you want to exercise and provide enough information for us to identify the relevant records. We may verify your identity and authority before completing a request. We will use information submitted with a request only to verify and fulfill it.

You may use an authorized agent where applicable. We may require proof that the agent is authorized and may ask you to verify your identity directly. If we deny a request, you may appeal by replying to the decision or emailing us with the subject "Privacy Appeal." We will respond within the period required by applicable law.

Reviewing and Updating Your Information

You can review or update certain account and address information by signing in to your customer account. You may also contact us to request correction of information we maintain. To stop promotional email, use the unsubscribe link in the message. We may still send non-promotional communications about your account, orders, safety, or our legal obligations.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No security measure or transmission method is completely secure, and we cannot guarantee absolute security. Do not send source drives, evidence media, passwords, payment-card data, or other highly sensitive or confidential information through general website contact forms or unsecured email.

Children's Privacy

The Services are intended for adults and organizations and are not directed to children under 13. We do not knowingly collect personal information from children under 13, and we do not have actual knowledge that we sell or share personal information of anyone under 16. A parent or guardian who believes a child provided personal information may contact us to request deletion.

International Users and Transfers

We and our providers may process personal information in the United States and other countries. Those countries may have privacy laws different from the laws where you live. Where applicable law requires a transfer mechanism, we rely on an adequacy decision, contractual safeguards, or another legally recognized mechanism.

Third-Party Links

The Services may link to third-party websites or services. We do not control their privacy or security practices. Review the privacy notice of any third party before providing information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, Services, or legal obligations. We will post the updated Policy, revise the "Last updated" date, and provide additional notice when required by law.

Contact Us

For privacy questions, requests, or complaints, contact:

daarc, Inc. d/b/a Shadow and Shield
260 1st Ave S, Suite 37
Saint Petersburg, FL 33701
United States
Email: hello@shadowandshield.com
Phone: +1 (949) 436-7464

If you are not satisfied with our response, you may have the right to appeal as described above or complain to the privacy or data-protection authority where you live.