Privacy Policy

WE TAKE YOUR PRIVACY SERIOUSLY.

This policy explains what personal data we collect, why we collect it, how we use it and what your rights are. It applies to all personal data collected through our website, booking forms, email enquiries and social media. 

We are committed to being transparent and keeping your data safe. This policy complies with the UK GDPR and the Data Protection Act 2018, updated in line with the Data (Use and Access) Act 2025. 

WHO WE ARE

The Shift Studio is operated by Nurtured Shift Studio Ltd (Company Registration No. 17147738), registered in England and Wales.

Our registered address is: 56 Newstead Road, Bournemouth, BH6 3HL.

Our trading address is: Ground Floor Unit, 63 Southbourne Grove, Bournemouth, BH6 3QU.

For all data protection queries, please contact us at: info@theshiftstudiosobo.co.uk

We are the data controller for the personal data we collect through this website and our booking process.

WHAT PERSONAL DATA WE COLLECT

We only collect the data we genuinely need to run our business and serve you well. This includes:

• Name - collected through booking forms, email, and enquiry forms, to confirm your booking and communicate with you.
  
• Email address - collected via booking forms, email, enquiry forms, and social media, to confirm bookings, send policies, and keep in touch.
  
• Phone number - collected through booking forms and WhatsApp enquiries, to contact you about your booking if needed.
  
• Business name - collected through booking forms and enquiry forms, to understand how the space will be used.
  
• Payment information - collected via our payment platform (we do not store card details), to process deposits and hire fees.
  
• Enquiry details - collected through email, contact forms, and WhatsApp, to respond to your questions and tailor our service.
  
• Website usage data - collected through cookies and analytics tools, to understand how visitors use our website.

We never collect sensitive personal data such as health information, financial details beyond what is needed to process payment, or data relating to children without explicit parental consent.

OUR LAWFUL BASIS FOR PROCESSING YOUR DATA

Under UK GDPR we must have a lawful basis to process your personal data. We rely on the following:

• Contract - when you make a booking, we need your data to fulfil that booking and manage our hire agreement with you.
  
• Legitimate interests - we may use your contact details to follow up on an enquiry you have made, or to send relevant information about The Shift Studio where we believe you have a genuine interest in hearing from us.
  
• Consent - where you have opted in to receive our newsletter or marketing emails, we will process your data on the basis of your consent. You can withdraw this consent at any time.
  
• Legal obligation - we may need to process certain data to comply with our legal and financial obligations, for example in relation to tax records 

HOW WE USE YOUR DATA

We use your personal data only for the purposes for which it was collected. This includes:

• Confirming, managing and administering your space hire booking. 
• Sending booking confirmations, receipts and our cancellation policy
• Responding to your enquiries and questions
• Processing payments securely via our payment platform
• Sending information about upcoming sessions, events and community news at The Shift Studio -  only where you have opted in or where we have a legitimate interest in contacting you
• Improving our website and services using anonymised analytics data
• Complying with our legal and financial obligations

We will never sell your personal data to third parties or use it for any purpose other than those listed above. We do not use your data for automated decision-making or profiling. 

WHO WE SHARE YOUR DATA WITH

We only share your data with trusted third parties where it is necessary to run our business. These include:

• Payment processors to securely process hire fee payments and deposits. We do not store your card details ourselves.
• Booking platform providers such as Eventbrite, to manage session bookings and registrations.
• Email and communication tools such as Google Workspace, to manage our email communications with you.
• Website analytics we may use tools such as Google Analytics to understand how visitors use our website. This data is anonymised and aggregated.
• Legal and financial advisors where required, we may share relevant data with our accountant or legal advisors under strict confidentiality obligations.

All third parties we work with are required to handle your data securely and in accordance with UK GDPR. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.

We only keep your personal data for as long as is necessary for the purpose it was collected, or as required by law. 

Our general retention periods are:

• Booking records we retain these for 6 years after your hire date in line with HMRC financial record keeping requirements.
• General enquiries if your enquiry did not lead to a booking, we will delete your data within 12 months of your last contact with us.
• Marketing communications we will retain your details for marketing purposes until you unsubscribe or ask us to stop.
• Website analytics anonymised analytics data may be retained for up to 26 months 

YOUR RIGHTS

Under UK GDPR you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at info@theshiftstudio.co.uk - we will respond within one month.

• Right to Access - you can request a copy of the personal data we hold about you at any time.
• Right to Rectification - you can ask us to correct any inaccurate or incomplete data we hold about you.
• Right to Erasure - you can ask us to delete your personal data where we no longer have a lawful reason to hold it.
• Right to Restriction - you can ask us to restrict how we process your data in certain circumstances.
• Right to Portability - you can ask us to provide your data in a portable format so you can transfer it elsewhere.
• Right to Object - you can object to us processing your data for marketing purposes at any time - we will always respect this.
• Right to Withdraw Consent - where we process your data based on consent, you can withdraw that consent at any time by contacting us.
• Right to Complain - if you are unhappy with how we handle your data, you have the right to complain to the ICO at ico.org.uk or call 0303 123 1113. 

Our website uses cookies - small text files stored on your device,  to help the site function properly and to understand how visitors use it.

We use the following types of cookies:

• Essential cookies - these are necessary for the website to function and cannot be switched off. They do not store any personally identifiable information.
• Analytics cookies - we may use tools such as Google Analytics to collect anonymised information about how visitors use our website, helping us to improve it over time. These cookies are only set with your consent.

You can manage your cookie preferences at any time through your browser settings. Disabling certain cookies may affect the functionality of our website.

HOW WE PROTECT YOUR DATA

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, loss or misuse. 

These include:

• Secure, password-protected email accounts and systems
• Secure payment processing - we never store your card details directly
• Limiting access to personal data to only those who need it to carry out their role
• Regular review of our data handling practices

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you as soon as reasonably practicable.

LINKS TO OTHER WEBSITES

Our website may contain links to third party websites such as our booking platform or social media pages. 

Once you leave our website we are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before submitting any personal data.

CHANGES TO THIS POLICY

We may update this privacy policy from time to time to reflect changes in our business or in data protection law. The most recent version will always be available on our website with the date it was last updated clearly shown at the top.

We recommend checking this page periodically. Where changes are significant, we will notify you by email if we hold your contact details.

CONTACT US & COMPLAINTS

If you have any questions about this privacy policy, wish to exercise any of your rights, or have a complaint about how we have handled your data, please get in touch. We will always do our best to resolve any concerns directly.

GET IN TOUCH

Email info@theshiftstudiosobo.co.uk

Company Nurtured Shift Studio Ltd · Registration No. 17147738

Address Ground Floor Unit, 63 Southbourne Grove, Bournemouth, BH6 3QU

ICO complaints If we are unable to resolve your concern, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.