Legal
Privacy Policy
1. Who we are
ShiftS2P ("we", "us", "our") is an AI-native procurement platform. This policy explains how we collect, use, and protect your personal data when you visit shifts2p.com or submit an enquiry through our forms.
2. What data we collect
When you submit a form on our site, we collect:
- Full name
- Work email address
- Company or organisation name
- Your current ERP or S2P platform (where provided)
- Approximate annual indirect spend band (where provided)
We do not collect payment information, sensitive personal data, or data from third-party tracking without your consent.
3. How we use your data
We use the information you provide solely to:
- Respond to your enquiry about a Pulse Diagnostic engagement
- Send you the sample Lost Money Report you requested
- Follow up with relevant information about ShiftS2P's services
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal basis for processing
We process your data on the basis of legitimate interest (responding to an enquiry you initiated) and, where applicable, your consent. You may withdraw consent at any time by contacting us at the address below.
5. How long we keep your data
We retain enquiry data for up to 24 months from the date of submission, unless you request earlier deletion or we enter a commercial relationship that requires longer retention under applicable law.
6. Your rights
Under UK GDPR and applicable data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
To exercise any of these rights, contact us using the details below. We will respond within 30 days.
7. Cookies and analytics
Our website may use essential cookies to function correctly. We do not currently use third-party analytics or advertising cookies. If this changes, we will update this policy and seek your consent where required.
8. Third-party services
We use Web3Forms to process form submissions. Submitted data is transmitted securely to our team. Web3Forms operates in accordance with GDPR. We do not permit them to use your data for any other purpose.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data transmissions are encrypted via HTTPS.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be noted by updating the date at the top of this page. Continued use of our site constitutes acceptance of any updates.