Upping DigitalPrivacy Policy
Last updated: 2026-07-30
This policy explains what personal data Upping Digital collects through this website, why we collect it, how long we keep it and what rights you have. It covers uppingdigital.com only — the systems we operate for clients (UppingShield console, Business Suite) are governed by the service agreement signed with each client.
The short version: we only collect what you type into a form plus basic technical data, we use it to reply to you and provide the service you asked for, we never sell it, and you can ask us to delete it at any time by writing to [email protected].
1. Who we are
Upping Digital, a managed service and cybersecurity provider based in Tampa, Florida, United States.
Contact for privacy matters: [email protected] · +1 (352) 667-2042
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, email, phone/WhatsApp, company | When you submit any form | To identify you and reply to your request |
| Your message, company size, industry, domain to be assessed | When provided in the form | To understand and answer your request |
| IP address, browser user-agent, country | Automatically on form submission | Security, anti-spam and abuse prevention |
| Page you submitted from, referring site, campaign parameters (UTM) | Automatically on form submission | To know which content brings enquiries |
We do not collect payment card data, government identifiers or special categories of personal data through this website.
3. Legal basis
- Your request / pre-contractual steps — when you ask for a quote, an assessment or contact.
- Legitimate interest — for security, anti-spam and understanding which pages generate enquiries, balanced against your rights.
- Consent — where you tick a box (for example the Academy sign-up); you can withdraw it at any time.
4. The free basic pentest
If you request the free basic assessment, you must confirm that you own the domain you submit or are authorised to request testing of it. We only assess assets you declare and authorise, and the assessment is external and non-intrusive. The resulting report is confidential and is sent only to you.
5. Who processes your data with us
We keep the number of third parties deliberately small. Each acts as a processor on our instructions:
- Cloudflare, Inc. — website hosting, the database where submissions are stored, and privacy-first analytics that use no cookies and do not fingerprint visitors.
- Resend — delivery of the notification email that reaches our team.
- Microsoft 365 — the mailbox where our team reads and answers your message.
We do not sell, rent or trade personal data, and we do not share it for advertising.
6. Cookies and tracking
This website sets no advertising or profiling cookies. Our analytics is Cloudflare Web Analytics, which is cookieless. We use your browser's temporary session storage to remember which campaign brought you to the site so that, if you submit a form, we know which content worked; it is cleared when you close the tab.
7. How long we keep it
Form submissions are kept for up to 24 months from the last contact, so we can follow up on an enquiry and keep a record of consent, and are then deleted. If you ask us to delete your data earlier, we do so promptly unless we must keep it to comply with a legal obligation.
8. Where your data goes
Our providers are based in the United States and process data on globally distributed infrastructure. If you contact us from Brazil or the European Union, your data is transferred to the United States under the safeguards offered by those providers' data-processing terms.
9. Your rights
Under the GDPR (EU), the LGPD (Brazil) and applicable US state privacy laws, you may request: access to your data, correction, deletion, a copy in portable form, restriction of processing, and to object to processing based on legitimate interest. Write to [email protected] and we will respond within 30 days. You also have the right to complain to your local data protection authority (in Brazil, the ANPD).
10. Security
Data is transmitted over HTTPS and stored on access-controlled infrastructure. The internal panel used to read submissions requires authentication. We apply the same practices we recommend to our clients.
11. Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.
12. Changes
If we change this policy we will update the date at the top of this page. Material changes will be highlighted on the website.
Questions about your data? Write to [email protected] or call +1 (352) 667-2042.
← Back to the website