Shift ONE Privacy Policy

Last updated: 09 October 2026

We care about your privacy and the security of your information. This policy explains what personal data we collect, how we use it, and your rights under the EU’s General Data Protection Regulation (GDPR) and South Africa’s Protection of Personal Information Act (POPIA). In short:

  • We only collect the information we need.
  • We use it for specific purposes, like delivering our services or improving your experience.
  • We protect it with appropriate security measures.
  • We do not sell your data.
  • You have rights over your information, and you can contact us anytime to exercise them.
  • Cookies are used to improve your browsing experience, and you can control or opt out of non-essential cookies.

1. Who We Are

Shift ONE Digital (Pty) Ltd (“Shift ONE”, “we”, “us”, “our”) is the responsible party under POPIA and the data controller under GDPR.

Contact us:

Email: info@shiftone.co.za

Head Office Address: 

Unit 2 & 3 Eden on the Bay

Big Bay, Blouberg

Cape Town, South Africa

7441

2. Information We Collect

We collect personal data in order to provide services, improve your experience, and comply with legal obligations. Types of information include:

  • Contact details: Name, email, phone number, postal address.
  • Business details: Company name, job title, VAT number.
  • Account information: Login credentials if you use our platforms.
  • Marketing preferences: Your choices for receiving communications.
  • Website usage data: IP address, browser type, device info, cookies.

We collect this information directly from you, through your use of our website, or from publicly available sources.

3. Why We Collect Your Data 

We only process personal data when permitted by law. Our lawful bases include:

  • Consent – when you have agreed to specific processing.
  • Contract – to perform obligations under an agreement with you.
  • Legal obligation – when required by law.
  • Legitimate interests – such as improving services, provided this does not override your rights.

4. How We Use Your Data

We may use personal data to:

  • Provide and manage our services.
  • Respond to enquiries.
  • Send marketing communications you have opted into.
  • Improve and personalise our website and services.
  • Comply with legal and regulatory requirements.

Data used for direct marketing purposes will be managed in accordance with applicable National Consumer Commission (NCC) requirements.

5. Cookies and Tracking

Our website uses cookies to enhance your experience, analyse performance, and deliver relevant marketing. Types of cookies:

  • Essential cookies: Required for the website to function (e.g., login, session management).
  • Performance & statistics cookies: Help us understand site usage.
  • Functional cookies: Remember preferences like language or region.
  • Marketing cookies: Track browsing to deliver relevant ads and promotions.

Your choices:

  • Accept all cookies.
  • Reject non-essential cookies.
  • Manage preferences at any time via our cookie management tool or browser settings.

Third-party services (e.g., Google Analytics) may also set cookies on our site. We do not control these third parties’ privacy practices.

For a detailed list of cookies we use, please refer to our Cookie Policy.

6. Data Sharing

We do not sell your personal data. We may share it with:

  • Trusted service providers (e.g., IT, hosting, payment processing) under strict confidentiality.
  • Regulators, law enforcement, or legal advisors as required by law.

7. International Data Transfers

If personal data is transferred outside South Africa or the EU/EEA, we ensure appropriate safeguards such as:

  • Standard contractual clauses approved by the European Commission.
  • Adequacy decisions by regulators.
  • Binding corporate rules or equivalent legal protections.

8. Data Retention

We keep personal data only for as long as necessary for the purposes it was collected or as required by law.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data.
  • Object to or restrict our processing of your data.
  • Withdraw your consent where processing is based on consent.
  • Request data portability (GDPR only).

To exercise your rights, contact us using the details above.

10. Security Measures

We take appropriate technical and organisational steps to protect personal data against loss, theft, unauthorised access, disclosure, or destruction.

11. Complaints

If you believe we have not complied with applicable data protection laws, you may lodge a complaint with:

  • South Africa: Information Regulator
  • EU: Your local Data Protection Authority

12. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on our website, with the “Last updated” date shown at the top.