Privacy Policy

1. Who we are

MyShiftCalendar is operated by Software Cloud Limited, a company registered in England and Wales. Registered address: 148 Rose Bowl, Portland Crescent, Leeds, LS1 3HB. For privacy questions, email [email protected].

Software Cloud Limited is the data controller for any personal data processed through this site, as defined by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

2. Data we collect ourselves

We have no user database. Your shift pattern selection, anchor date, team designation, country setting, custom pattern, and any other preference is stored in your browser using localStorage. This data never leaves your device. We cannot see it, retrieve it, or sell it. If you clear your browser storage for this site, it is gone.

If you choose to sign in with Google (optional), Google passes us your name and email address. We use them only to label your session in the browser. We do not transmit them to any server or store them in any database. Signing out clears the data from the browser.

---

3. Cookies and similar technologies

Cookies are small files set by websites to remember things between visits. Some cookies are essential. Others, including advertising cookies, are optional and require your consent under the UK Privacy and Electronic Communications Regulations (PECR).

We use the following categories:

Strictly necessary. None at present. The site functions without setting any cookies of its own.

Analytics (cookieless). Cloudflare Web Analytics. Records aggregate page views, referrers, and country without using cookies, fingerprinting, or cross-site tracking. No individual visitor is identifiable. Cloudflare privacy policy.

Analytics (cookie-based). Google Analytics 4 (GA4), operated by Google Ireland Limited. We use it to understand which pages are useful, which devices visitors use, and how people find the site. GA4 sets first-party cookies (_ga, _ga_<id>) and processes a truncated IP address (we have anonymize_ip enabled, so the last octet is dropped before storage). We do not enable Google Signals, ad-personalisation, or audience sharing. Data is retained for 14 months. GA4 privacy information.

Advertising. Google AdSense. AdSense and its measurement partners may set cookies and similar identifiers to serve ads and measure performance. These are loaded only after you accept advertising cookies through our consent banner. See section 4 for the full advertising disclosure. Full details are in our Cookie Policy.

For a per-cookie breakdown, see the Cookie Policy.

---

4. Advertising (Google AdSense)

This site uses Google AdSense to display advertisements. AdSense is operated by Google Ireland Limited for users in the UK, EEA, and Switzerland.

Google and its advertising partners (including DoubleClick, AdMob, and certified third-party vendors) may:

• Set cookies and read existing cookies on your device.
• Use a unique identifier in your browser to recognise you across sites that use AdSense.
• Process information such as your IP address, browser type, the pages you visit, and the ads you see, to serve and measure advertising.
• Use this information to show you personalised advertising, subject to your consent.

We participate in the IAB Europe Transparency and Consent Framework (TCF v2.2) and use a Google-certified Consent Management Platform. The banner you see on first visit lets you accept all advertising cookies, reject non-essential cookies, or choose vendor by vendor. You can change your choice at any time using the "Cookie settings" link in the footer.

If you do not consent to personalised advertising, Google may still serve non-personalised ads. These rely on contextual signals (such as the content of the page) rather than your prior browsing.

To learn how Google uses data from sites that use its services, see policies.google.com/technologies/partner-sites.

To opt out of personalised advertising from Google across all sites: adssettings.google.com.

To opt out of personalised advertising from third-party vendors generally: youronlinechoices.com.

---

5. Affiliate links

Some outbound links on this site are affiliate links, clearly labelled with an "affiliate" marker. When you click an affiliate link and visit a third-party website, that third party may set its own cookies and process your data under its own privacy policy. We earn a small commission if you go on to buy something, at no extra cost to you. See our Affiliate Disclosure for the full list of affiliate relationships.

---

6. Legal bases for processing

Under UK GDPR Article 6, our legal bases are:

• Consent (Article 6(1)(a)) for advertising cookies and any other non-essential cookies. You give consent through the banner; you can withdraw it through the cookie settings link at any time.
• Legitimate interests (Article 6(1)(f)) for aggregate analytics that help us understand which pages are useful and which need work. This covers Cloudflare Web Analytics (cookieless, no identifiers) and Google Analytics 4 (first-party cookies, anonymised IP, no ad-personalisation, no Google Signals). The privacy impact is minimal: GA4 is configured so no individual can be identified and the data cannot be used to target advertising. You can object to this processing at any time (see your rights below).

We do not rely on consent for the local browser storage that holds your shift settings, because that storage is not personal data we control — it lives on your device.

---

7. Your rights

Under the UK GDPR you have the right to:

• Access any personal data we hold about you.
• Rectify inaccurate personal data.
• Erase personal data ("the right to be forgotten").
• Restrict processing of personal data.
• Object to processing based on legitimate interests.
• Withdraw consent for cookie-based processing at any time, with no effect on processing already carried out.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Because we hold almost no personal data ourselves, most access, rectification, and erasure requests can be fulfilled by you directly: clear localStorage for myshiftcalendar.app in your browser settings.

For data Google holds about your AdSense interactions, contact Google directly: policies.google.com/privacy.

For other requests, email [email protected]. We respond within one month, as required by UK GDPR Article 12(3).

---

8. Data transfers outside the UK

Some of our service providers process data outside the UK:

• Cloudflare (analytics, hosting, CDN) is a US company with global data centres. Cloudflare relies on the UK Extension to the EU–US Data Privacy Framework and on standard contractual clauses.
• Google (AdSense, Analytics 4, optional sign-in) is a US company. Google relies on the same framework and on standard contractual clauses for transfers to the US. GA4 traffic is processed by Google Ireland Limited for UK and EEA visitors.

In both cases, the providers are committed to safeguards equivalent to UK GDPR.

---

9. Retention

We do not retain personal data on our servers because we do not collect it on our servers. Cloudflare retains aggregate, non-identifying analytics for a rolling period defined in their policy. Google retains AdSense data under its own retention schedule.

Data you store locally remains until you clear it.

---

10. Children

MyShiftCalendar is a workplace tool intended for adults. The service is not directed at children under 13, and we do not knowingly collect any data from children under 13. If you believe a child has provided personal data through this site, email [email protected] and we will investigate.

---

11. Changes to this policy

We will update this policy if our data practices change. When we do, we update the "Last updated" date at the top of this page and, for material changes, post a notice on the homepage for 30 days. Continued use after a change constitutes acceptance.

---

12. Contact

For any question about this privacy policy or how we handle your data:

• Email: [email protected]
• Post: Privacy, Software Cloud Limited, 148 Rose Bowl, Portland Crescent, Leeds, LS1 3HB

If you are not satisfied with our response, you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.