Shift AI Events Ltd
How we handle your personal information in the Shift AI event app.
The Shift AI app is provided by Shift AI Events Ltd, a company registered in England and Wales under company number 17176236, with its registered office at 7 Buckingham Road, Broadstairs, England, CT10 1QR.
We are the data controller for the personal information described in this policy. That means we decide what is collected and why, and we are responsible to you for how it is handled.
For anything to do with your data, contact us at info@shiftai.events.
This policy covers the Shift AI mobile app for iOS and Android, and the attendee networking features inside it. The app is built and operated for us by Personatech, Inc., which acts as our service provider and processes your data on our instructions and on our behalf.
Personatech publishes its own privacy policy describing its wider business. Where the two differ in respect of the Shift AI app, this policy is the one that governs, because we are the controller.
The app asks your permission before using any of the following, and you can withdraw permission at any time in your device settings.
Where we rely on consent you can withdraw it at any time, and where we rely on legitimate interests you can object — see section 11.
Your profile in the app includes a personal QR code. When you show or send that code to someone and they scan it, they receive your contact details straight away — your name, job title, employer and the email address on your registration. This is how people swap details with each other at our events, and it is also how sponsors and exhibitors collect contacts at their stands.
Two things follow from that, and we would rather you knew them beforehand.
There is no separate confirmation step. The details above transfer as soon as your code is scanned, in the same way that handing over a business card hands over what is printed on it. If you would rather not share with someone, do not show them your code — and nobody can scan you without it.
Whoever scanned you — another attendee, a sponsor, an exhibitor — becomes a separate controller of that copy and uses it under their own privacy policy rather than this one. We cannot recall or delete it for you. You would need to ask them directly, and we can tell you who scanned your code so that you know who to ask.
We do not sell your personal information, and the only way a sponsor gets your details for its own marketing is if you have shown it your QR code.
The company that builds and runs the app for us, Personatech, Inc., is based in the United States and has a group company in India. Using the app therefore involves your data being handled outside the UK and the European Economic Area.
We only allow that where the transfer is covered by safeguards recognised under UK and EU data protection law, and we require our provider to keep to them. You can ask us what applies to your data using the contact details in section 1.
We keep your app profile, your connections and your messages while your account is open, and for no more than 12 months after the event you attended. If you ask us to delete your account sooner, we will.
The fact that you registered for or attended an event, and the contact details you gave us when you did, are kept for longer than the app data above. They are our record of having done business with you, and we keep them for six years — the period UK tax and accounting rules require for records of transactions. Where you have asked to hear about future events, we keep your contact details for that purpose until you tell us to stop.
Technical and diagnostic logs are kept for a short period only, long enough to investigate faults and security incidents. When a retention period ends we delete the data or strip out anything that identifies you, keeping only anonymous statistics about how the event went.
The app may suggest people, sessions or exhibitors based on the profile and interests you enter. These are suggestions only. Nothing in them affects your access to the event or any decision we make about you, and you can ignore them or ask us to stop making them.
Under UK and EU data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider. You can object to processing we base on legitimate interests, and withdraw any consent you have given.
Write to us at info@shiftai.events and we will reply within one month. There is no charge.
If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk. If you are in the EEA you may complain to your national data protection authority instead.
We require Personatech to hold your data under appropriate technical and organisational security measures, including encryption in transit and at rest, access controls and logging, and to tell us without undue delay if anything goes wrong so we can notify you and the regulator where we must.
Shift AI is a professional event for people aged 18 and over. The app is not intended for children and we do not knowingly collect their data. If you believe a child has given us information, tell us and we will delete it.
If we change this policy we will post the new version here and update the date at the top. Where a change materially affects you we will tell you in the app or by email.
Questions to info@shiftai.events, or write to us at our registered office.