Privacy Policy
Last updated: 3 September 2026
This policy explains what personal information B shift collects, why we collect it, what we do with it and what rights you have. It applies to this website and to the work we do with clients.
Who we are
Bshift Limited, trading as B shift, is the data controller for the information described in this policy. A data controller is the organisation that decides why and how your information is used.
- Registered in England and Wales, company number 16097834
- Registered office: Air House, Station Path, Somerton, Somerset, TA11 7PX
- Email: mariahellyer@bshift.co.uk
- Telephone: 07359 782544
- Information Commissioner’s Office registration number: ZC231652
What we collect
When you make an enquiry
If you complete the enquiry form or contact us by email or telephone, we collect your name, your business name, your email address, your telephone number if you give it, the stage your business has reached, and anything else you choose to tell us.
When you become a client
During an engagement we hold information about your business and, where it is necessary for the work, information about the people in it. That can include employment policies, pay and benefits data, supplier information, environmental data and governance documents. Some of this is personal data belonging to your employees rather than to you.
Where we handle personal data belonging to your staff, we do so on your instructions and as your processor rather than as a controller in our own right. The engagement letter sets out what that covers.
When you visit this website
Our hosting provider records standard technical information including your IP address, browser type and the pages you visit. This is used to keep the site running and secure. We do not use website analytics.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and carry out a gap analysis | Legitimate interests, namely responding to someone who has approached us about our services |
| Deliver the work you have engaged us for | Performance of a contract |
| Send invoices and keep accounting records | Legal obligation |
| Keep the website running and secure | Legitimate interests |
| Send you a newsletter or updates, if you ask for them | Consent, which you can withdraw at any time |
We do not sell your information, and we do not use it to build advertising profiles.
Who we share it with
We use a small number of service providers who process information on our behalf. Each one is bound by contract to keep it confidential and to use it only for the purpose we have given them.
- Microsoft, for email and document storage through Microsoft 365
- Google, for email, documents and calendar through Google Workspace
- Krystal Hosting, who host this website
- Fluent Forms, which delivers and stores enquiry form submissions
- Xero, for invoicing and accounts
We may also disclose information where the law requires it, for example to HMRC or to a regulator.
We never pass your details to another consultant, a marketing list or any other third party for their own purposes.
Where your information is held
Some of our providers store data outside the United Kingdom. Where that happens, the transfer is covered by the UK government’s adequacy decisions or by the International Data Transfer Agreement, which are the mechanisms UK law recognises for protecting information sent abroad.
How long we keep it
- Enquiries that do not become work: up to 12 months, then deleted
- Client records: for the duration of the engagement and six years afterwards, which is the period we may need them for tax and for any claim
- Accounting records: six years from the end of the relevant accounting period, as required by law
- Newsletter subscribers: until you unsubscribe
Your rights
Under UK data protection law you can ask us to:
- Tell you what personal data we hold about you and give you a copy
- Correct anything that is wrong or incomplete
- Delete information where we no longer have a good reason to keep it
- Restrict how we use it while a question about it is resolved
- Provide it in a portable format, or send it to someone else
- Stop using it where we rely on legitimate interests and you object
- Withdraw consent, where consent is what we relied on
To exercise any of these, email mariahellyer@bshift.co.uk. We will respond within one month. There is no charge unless a request is clearly unfounded or excessive.
Cookies
This website uses only the cookies necessary to make it work, for example remembering that you have submitted a form. Essential cookies do not require your consent. We do not use analytics, advertising or social media cookies.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, by telephone on 0303 123 1113, or in writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this policy
If we change how we handle personal information we will update this page and change the date at the top. Where a change is significant we will tell clients directly.