Privacy Policy

1. Who we are

Shift The Needle Ltd ("we", "us", "our") is a company registered in England and Wales (Company No. 11869907). Our registered office is Jubilee House, East Beach, Lytham St. Annes, England, FY8 5FT.

We are the data controller for personal data collected through this website. If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. What data we collect

We may collect the following personal data:

• Contact enquiries — your name, email address, phone number, company name, and the content of your message when you submit our contact form.
• Recommendations — your name, job title, company, email address, and the text of your recommendation when you submit our recommendations form.
• Usage data — anonymised analytics data about how visitors use our website (pages visited, time on site, browser type), collected only with your consent via our cookie banner.

3. How we use your data

We use your personal data to:

• Respond to your enquiries and provide the services you have requested.
• Review and, with your explicit consent, publish recommendations on our website.
• Improve our website and services using anonymised analytics data.
• Comply with our legal obligations.

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — responding to contact enquiries and managing our business relationships.
• Consent — publishing your recommendation on our website and placing analytics cookies. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with applicable law.

5. Cookies

Our website uses cookies. When you first visit, our cookie banner asks for your consent before any non-essential cookies are set. You can change your preferences at any time by clearing your browser cookies and revisiting the site.

We use analytics cookies (Google Analytics 4) only where you have given consent. These cookies collect anonymised data about how you use our site and help us improve it.

6. Data sharing

We do not sell your personal data. We may share it with:

• Service providers — third-party tools that help us operate our website and communicate with you (e.g. email delivery services), who are bound by data processing agreements.
• Legal authorities — where required by law or to protect our legal rights.

7. Data retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Contact enquiry data is retained for up to 3 years. Published recommendations are retained until you request their removal.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict our processing of your data.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at [email protected].

9. Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after any changes constitutes acceptance of the updated policy.