1. Introduction

Shift.mt ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce management platform.

We comply with the General Data Protection Regulation (GDPR) and the Data Protection Act of Malta. By using our platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, phone number, business name, and address
Profile Information: Job titles, qualifications, experience, and availability
Payment Information: Bank details, billing address, and invoice information
Communications: Messages, feedback, and support requests

2.2 Information Collected Automatically

GPS Location Data: For time tracking verification during active shifts
Device Information: Browser type, IP address, device identifiers
Usage Data: Pages visited, features used, time spent on platform

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our platform services
Match businesses with suitable workers and agencies
Verify worker attendance and location during shifts
Process payments and generate invoices
Send notifications about shifts, bookings, and platform updates
Respond to inquiries and provide customer support
Detect and prevent fraud or abuse
Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

Contract: Processing necessary to provide our services
Legitimate Interest: For platform improvement and fraud prevention
Legal Obligation: Compliance with tax and employment laws
Consent: For marketing communications and cookies

5. Data Sharing

We share your information with:

Other Users: Businesses see worker profiles; workers see business details for booked shifts
Service Providers: Payment processors, cloud hosting, analytics services
Legal Authorities: When required by law or legal process

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for legal, tax, and audit purposes for up to 7 years.

7. Your Rights (GDPR)

You have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a structured format
Object: Opt out of certain processing activities
Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@shift.mt.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication
Employee training on data protection

9. International Transfers

Your data is primarily stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

10. Cookies

We use cookies and similar technologies to improve your experience. See our Cookie Policy for more details on the cookies we use and how to manage your preferences.

11. Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Data Protection Officer: privacy@shift.mt
Address: Tower Road, Sliema SLM 1600, Malta
Phone: +356 2123 4567

You also have the right to lodge a complaint with the Information and Data Protection Commissioner of Malta.