SHIFT's Privacy Policy

Introduction 

The Shift Community (“We”) are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. 

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting shiftopenfinance.com (the “Website”) you are accepting and consenting to the practices described in this policy as well as consenting to our use of cookies in accordance with the terms of this policy. 

You may contact us by emailing info@woodhurst.com. 

GDPR 

The General Data Protection Regulations, (GDPR), creates consistent data protection rules across Europe. It applies to companies that are based in the EU and global companies that process personal data about individuals who are based in the EU. We ensure we adopt the GDPR principles of transparency, control and accountability for all our members and users. 

GDPR gives our members and users certain rights when using our services, which include the right to: 

• be informed 

• access 
• rectification  
• erasure 
• withdraw consent  
• restrict processing  

• data portability 
• object 

Our commitments to you 

We promise we will:  

• process your data lawfully, fairly and in a transparent manner  

• collect data for specified, explicit and legitimate purposes  
• never sell your data onto anyone else  
• ensure your data is processed and stored securely and is kept up-to-date  
• constantly review and update our processes to ensure we’re always protecting your data. 

You will always: 
 

• have access to the data stored on you  
• be able to correct any inaccuracies in the data  
• know we will erase any data no longer required, even if you haven’t asked. 

Processing your personal data: necessary for the performance of a contract  

The processing of your personal data by The Shift Community will be undertaken to fulfil the services agreed to complete our contractual obligations to you. This is such communication as emails related to on-boarding, billing, details of the membership and services we provide. The majority of our emails are from the team, direct to members relating to the services we are providing them.  

Processing your personal data: legitimate interest  

The processing of your personal data by The Shift Community or a third party may be undertaken if we have a legitimate interest to do so. In our case this includes:  

1. for the purposes of providing our members with information about our services and to monitor usage in order to improve those services from time to time  

1. sharing your personal information as part of a business sale, reorganisation or similar transaction.  

Processing your personal data: by consent  

Where we process your personal data by relying on your consent to do so, we shall ensure that such consent is:  

1. freely given by you 

1. specific with regards to what processing we wish to undertake so that you are fully informed 

1. unambiguous and given by a clear affirmative action.  

For The Shift Community, this directly relates to email capture lists we have on our website and being clear if you’d like to hear from us again.  

Information we collect from you  

We will collect and process the following data about you. 

• The information you give us. This is information about you that you give us. This could be by filling in any forms on the Website or by corresponding with us by phone, email or any other forms.  
• Information we collect about you. Regarding each of your visits to our Website we will automatically collect the following information: 
• technical information which may include: the Internet protocol (IP) address used to connect your computer to the Internet; browser type and version; time zone setting; browser plug-in types and versions and the operating system and platform.  

• information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our Website (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any name, email address or phone number used to contact us.  

The legal basis for this processing is our legitimate interests, namely monitoring and improving our Website and enabling you to communicate with us and for us to send you material by request. 
 

Cookies 

Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and utilise all of its features.  

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Generally, cookies work by assigning to your computer a unique number that has no meaning outside of the Website. The cookies do not contain any personal information and cannot be used to identify you. They simply help us to provide you with a personalised user experience and also allows us to improve our website and advertising. 
 

Uses made of the information  

The information you give to us, we will use in the following ways:  

• to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information and services that you request from us;  
• for internal use and operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;  
• to communicate with you including to notify you about our services and any changes to our service;  

• to ensure that content from our Website is presented in the most effective manner for you and for your computer.  

Disclosure of your information 

You agree that we have the right to share your personal information with: 

• Selected third parties including: 
• business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;  

• analytics and search engine providers that assist us in the improvement and optimisation of the Website;  
• advertising platforms in order to assist us in the improvement and optimisation of our content and attract new members.  
• We will disclose your personal information to third parties: 
• if we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.  
• if we are under a duty to disclose or share your personal data to comply with any legal obligation or to enforce or apply our Terms of Use.  

Where we store your personal data  

The data that we collect from you will be transferred to, and stored at, a destination inside the European Economic Area (“EEA”) by preference and wherever possible. From time to time personal data may be transferred, viewed and processed outside of the EEA. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.  

All cloud services we use internally for The Shift Community and our subsidiary platforms use industry-standard TLS (Transport Layer Security) and have up-to-date security measures and protocols.  

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website or via email; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.  

Retaining and deleting your personal data  

Anyone also has the right to request deletion of all their personal data a business holds, or modification of their data if it’s inaccurate or incomplete. GDPR requires the permanent removal or modification of any personal data. If you’d like your data permanently deleted or modified you can request to do so by emailing info@woodhurst.com we will respond to your request within 30 days.  

Your personal data shall not be kept for longer than is necessary, although it is not possible for us to always specify in advance how long this may be for. We may have to continue to store and process your data if it is necessary for our compliance with certain legal obligations.  

Your rights 

You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes. We will never disclose your information to any third party for such purposes. 

Our Website may, from time to time, contain links to and from the Website of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. 

Access to information 

The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act and you can request access to the personal data we hold on you and verify the lawfulness of processing. 

You can request access to your personal data we hold by emailing info@woodhurst.com.  We will respond to your request within 30 days. 

Changes to our privacy policy 

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy. 

Contact 

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to info@woodhurst.com.