Privacy Policy

Wedidit Limited, a company incorporated in Hong Kong, trading as “SOPO Shield+” (“Wedidit Limited”, “we”, “us” or “our”), provides a construction payment tracking, documentation and dispute-resolution platform. This Privacy Policy explains how we handle personal data of subcontractors, main contractors, adjudicators, regulators and website visitors. We are committed to protecting your privacy and complying with applicable data protection laws.

Wedidit Limited (trading as SOPO Shield+) is the data controller responsible for your personal data. For any privacy questions or to exercise your rights, contact our Data Protection Officer:

• Email: dpo@soposhield.com
• Contact form: /contact
• We aim to respond to privacy requests within 40 days, as required under the PDPO.

Depending on how you use the platform, we may collect:

• Account data: name, email, role, region and company details.
• Project and payment data: claims, responses, variations, evidence and documents you upload.
• Adjudicator and regulator data: professional credentials, bookings and access requests.
• Payment data: subscription and billing information processed by our payment provider.
• Technical data: IP address, device, browser and usage analytics.

• To provide, operate and improve the platform and its features.
• To track payment deadlines and generate documents on your behalf.
• To facilitate adjudicator bookings and regulator access to anonymized analytics.
• To process subscriptions and payments.
• To communicate with you about your account, security and service updates.
• To comply with legal obligations and prevent fraud or misuse.

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to deliver the services you sign up for.
• Legitimate interests — to secure, maintain and improve the platform.
• Legal obligation — to meet regulatory and accounting requirements.
• Consent — for optional communications and non-essential cookies, which you may withdraw at any time.

We handle personal data in accordance with the six Data Protection Principles of the PDPO: lawful and fair collection, limited use, accuracy and retention, security, transparency, and your right of access and correction. We collect only the data we need for clearly stated purposes.

We do not sell your personal data. We may share it with:

• Service providers who host, process or support the platform under confidentiality obligations.
• Adjudicators or counterparties strictly as needed to progress a dispute you initiate.
• Authorities where required by law or to protect our legal rights.

Regulators only ever receive anonymized, aggregated data — never identifiable individual records.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with legal and accounting obligations, and to resolve disputes. When data is no longer required, we securely delete or anonymize it.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure or restriction of processing (GDPR).
• Object to certain processing and withdraw consent (GDPR).
• Request data portability (GDPR).
• Lodge a complaint with a supervisory authority, including the Office of the Privacy Commissioner for Personal Data in Hong Kong.

To exercise any right, email dpo@soposhield.com or use our contact form.

We use essential cookies to operate the platform and optional cookies for analytics to understand usage. You can control non-essential cookies through your browser settings. Disabling essential cookies may affect core functionality.

Because we operate across Hong Kong and other regions, your data may be transferred to and processed in jurisdictions outside your own. Where we do so, we apply appropriate safeguards — such as contractual protections — consistent with the PDPO and GDPR.

The platform is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. The “last updated” date at the top reflects the latest revision.

For any privacy matter, reach us at:

• Email: dpo@soposhield.com
• Contact form: /contact