GDPR Compliance Statement

At ShiftLeft (theshiftleft.com), we value your privacy and are committed to protecting the personal data you share with us. This statement outlines how we comply with the European Union’s General Data Protection Regulation (GDPR) to ensure transparency, accountability, and security in handling your personal information.

1. Introduction

ShiftLeft is committed to maintaining your trust by ensuring the security and privacy of your data. This GDPR compliance statement explains our data handling practices and your rights.

2. Data We Collect

Personal Information: Name, email address, phone number, and any additional details provided voluntarily.
Usage Data: Data on how you use our app/website, including IP addresses, browser types, and session durations.
Communication Data: Messages, inquiries, and other interactions with our team.

3. How We Use Your Data

We use your data for purposes including:

Providing and maintaining our services.
Improving and personalizing your user experience.
Communicating with you regarding updates, offers, or inquiries.
Complying with legal obligations.

4. Legal Basis for Processing

Our legal grounds for processing your data include:

Consent: When you explicitly agree to our use of your data.
Contractual Necessity: When processing is required to deliver our services.
Legitimate Interests: For purposes that do not infringe upon your rights.
Legal Obligation: To comply with applicable laws and regulations.

5. Your Rights Under GDPR

You have the right to:

Access: Request access to the data we hold about you.
Rectification: Request corrections to inaccurate or incomplete information.
Erasure: Request deletion of your personal data under certain conditions.
Restriction: Request restricted processing of your data.
Portability: Obtain and reuse your data for your own purposes.
Objection: Object to our use of your data in certain situations.

6. Data Security

We implement robust security measures, including encryption, firewalls, and regular audits, to safeguard your data against unauthorized access.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, resolve disputes, and comply with legal requirements.

8. Third-Party Sharing

We do not sell or rent your data. Data may be shared with trusted third parties for essential services, such as hosting or payment processing, under GDPR compliance agreements.

9. Cookies and Tracking Technologies

Cookies are used to enhance user experience. For details about how we use cookies and your choices, please see our Cookie Policy.

10. Data Transfers

If personal data is transferred outside the EU, we ensure it is protected in compliance with GDPR requirements.

11. Children’s Data

We do not knowingly collect data from children under 16 years old. If you believe a child’s data has been collected, contact us immediately.

12. Right to Lodge a Complaint

You have the right to file a complaint with the supervisory authority if you feel your rights under GDPR have been violated.

13. How to Contact Us

For inquiries or to exercise your rights, contact us at:

Email: us@theshiftleft.com

14. Updates to this GDPR Compliance Statement

We may update this statement to reflect changes in legal requirements or our practices. Please check this page regularly for updates.