Skip to main content
Legal

Privacy Policy

Last updated: December 6, 2025

ReadyShift (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform connecting workers with shift-based employment opportunities.

Information We Collect

Personal Information

  • Name, email address, phone number
  • Profile photo and work history
  • Skills, certifications, and qualifications
  • Location and work preferences
  • Bank account details for payment processing

Usage Information

  • Device information and browser type
  • IP address and location data
  • Pages visited and features used
  • Shift applications and work history

How We Use Your Information

Match you with relevant shift opportunities
Send notifications about shifts and updates
Process payments and verify identity
Improve our platform and services

Data Protection

We implement appropriate security measures to protect your personal information, including:

  • HTTPS encryption to secure data transmission
  • Secure password hashing and authentication controls
  • Rate limiting and account lockout protection against brute force attacks
  • Basic security event logging and monitoring
  • Compliance with PCI-DSS for payment processing

UK Data Protection & Procurement

ICO Registration

ReadyShift is registered with the Information Commissioner's Office (ICO) under registration number [ICO Registration Number].

Data Controller & Processor Roles

  • Employer Data: Employers are the data controller for HR and worker data they provide. ReadyShift acts as data processor under GDPR Article 28.
  • Platform Data: ReadyShift is the data controller for platform accounts, analytics, and service delivery data.
  • Worker Data: Workers control their own profile data; employers control shift and employment data.

Data Storage & Subprocessors

  • Primary Storage: Data is stored in the EU/EEA region (Frankfurt, Germany) on AWS infrastructure
  • Backup Storage: Encrypted backups maintained in the UK and Ireland
  • Subprocessors: AWS (cloud infrastructure), Stripe (payment processing), SendGrid (email delivery)
  • Data Transfers: All international transfers comply with UK GDPR and adequacy decisions

Your Rights

You have the right to:

  • Access and download your personal data
  • Correct inaccurate information
  • Request deletion of your account and data
  • Opt out of marketing communications
  • Withdraw consent at any time

Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

Email: privacy@readyshift.com

Address: ReadyShift Ltd, United Kingdom

ReadyShift is a UK-based company delivering workforce solutions to councils, NHS partners and multi-site employers.