1. Who we are

ShadeShift is the controller responsible for the personal data described in this notice. If you have questions about this policy, your data, or your rights, contact us at privacy@shadeshift.example. If you have appointed a formal company name, registered address, or data protection representative, replace this placeholder contact information before publishing.

2. Personal data we collect

We may collect identity and contact details such as your name, email address, country, enquiry details, waitlist preferences, and communications with us. We may also collect technical and usage data such as IP address, browser type, device information, approximate location, referral source, pages viewed, and cookie identifiers where these are enabled.

3. How we use personal data

We use personal data to operate the website, manage the waitlist, respond to enquiries, send launch updates where permitted, improve our product and website, prevent misuse, keep records, and comply with legal obligations. We only use personal data where we have a lawful basis under UK GDPR or GDPR, such as consent, contract steps, legitimate interests, or legal obligation.

4. Lawful bases

For waitlist signups and optional marketing, we rely on consent or soft opt-in rules where applicable. For responding to messages and managing potential customer relationships, we rely on legitimate interests or steps before a contract. For website security, fraud prevention, and record keeping, we rely on legitimate interests and legal obligations. You can withdraw consent or object to legitimate-interest processing at any time, subject to applicable exceptions.

5. Cookies and analytics

We may use essential cookies to make the website work and, only where required consent is obtained, analytics or marketing cookies to understand performance and improve the experience. Non-essential cookies should not be set until a visitor has given consent. You can manage cookies through the cookie banner, browser settings, or any cookie preference tools provided on the site.

6. Marketing communications

If you join the waitlist or request updates, we may send emails about ShadeShift, product development, launch availability, and related offers. Every marketing email should include a clear unsubscribe option. We do not sell your personal data for third-party marketing.

7. Sharing personal data

We may share personal data with trusted service providers that help us host the website, manage email communications, process forms, analyse site performance, provide customer support, or comply with legal obligations. These providers should process data only under our instructions and appropriate contractual safeguards.

8. International transfers

Some service providers may process personal data outside the UK or European Economic Area. Where this happens, we use appropriate safeguards, such as adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement, or other lawful transfer mechanisms.

9. Retention

We keep personal data only for as long as necessary for the purposes described in this notice. Waitlist and marketing records are normally retained until you unsubscribe or ask us to delete them, unless we need to keep limited records to respect your preferences, resolve disputes, or meet legal requirements.

10. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No online service is completely secure, so please avoid sending sensitive information unless specifically requested through a secure channel.

11. Your rights

Depending on your location and circumstances, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also withdraw consent at any time. To exercise these rights, contact privacy@shadeshift.example. We may need to verify your identity before responding.

12. UK complaints

If you are in the UK and are unhappy with how we handle your personal data, you can contact us first so we can try to help. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection matters, at ico.org.uk.

13. Children

Our website and waitlist are not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.

14. Changes to this notice

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, provide additional notice through the website or by email.