Get Shifts
LEGAL

Privacy policy.

What we collect, why we collect it, how long we keep it, and the choices you have.

Last updated · 14 July 2026 Questions? Contact us

1. Who we are

This policy explains how NXT Digital Ltd (trading as Get Shifts), Unit 5, Christie Fields Office Park, Christie Way, Manchester M21 7QY, handles personal data across the Get Shifts website, web platform and mobile apps. Contact us at support@getshifts.co.uk or 0330 808 3871.

2. Our two roles

For data about our own website visitors and account holders, we act as the data controller. For Workforce Data that agencies enter about their staff, the agency is the controller and we act as the data processor, handling that data only on the agency's instructions — see our GDPR compliance page for detail.

3. What we collect

Account data — name, work email, phone number, organisation, role and login records.
Workforce data (entered by your agency) — profiles, job roles, shifts, availability, timesheets, clock-in locations at the moment of clocking, earnings, and compliance documents such as right-to-work, DBS and training records.
Technical data — device, browser, IP address, app version and diagnostic logs.
Communications — support conversations, and message delivery records for notifications sent through the platform.

4. How we use it

to run the platform: publish rotas, verify attendance, build timesheets, generate invoices and send the notifications your team relies on;
to secure the service: authentication, fraud and abuse prevention, audit trails;
to support you: answering questions and diagnosing issues;
to improve the product, using aggregated and de-identified usage data;
to meet legal obligations, such as accounting and tax records.

5. Location data

GPS and geofence checks run only when a Worker clocks in or out, to verify they are at the right site. We do not track anyone's continuous movement or location in the background.

6. Lawful bases

We rely on contract (providing the service you signed up for), legitimate interests (security, service improvement), consent (marketing and optional analytics) and legal obligation (statutory records). Where we process Workforce Data as a processor, the controller agency is responsible for its lawful basis.

7. Sharing

We share personal data only with the sub-processors that host and operate the service — UK-based hosting, email and SMS delivery, and payment processing — under written data processing terms, and with authorities where the law requires it. We never sell personal data, and we never use Workforce Data to advertise to your staff.

8. Where data lives

Customer data is hosted in UK data centres and encrypted in transit and at rest. Backups remain within the UK. Any transfer outside the UK would only occur with appropriate safeguards under UK GDPR.

9. Retention

Account and Workforce Data — kept while your account is active, and for 12 months after closure, then deleted.
Invoices and billing records — kept 6 years to meet accounting law.
Support conversations — kept 24 months.
You can request earlier deletion at any time, subject to legal retention duties.

10. Your rights

Under UK GDPR you can:

access a copy of your personal data;
correct inaccurate data;
request erasure;
receive your data in a portable format;
object to, or ask us to restrict, certain processing;
withdraw consent at any time where consent is the basis.

Workers can raise requests in the app or via support@getshifts.co.uk; where we act as processor we pass requests to your agency without undue delay. We respond within 30 days.

11. Children

Get Shifts is a workplace tool and is not directed at children. Customers must not use the platform to process data about anyone below the legal working age.

12. Complaints & changes

If you're unhappy with how we handle your data, contact us first and we'll try to put it right. You can also complain to the Information Commissioner's Office (ico.org.uk). We'll post any changes to this policy here and notify account holders of material changes by email.

Run your agency the better way.

Join 1,000+ agencies automating scheduling, timesheets and invoicing.