Privacy policy

Who we are

Midshift Software Ltd (company no. SC712408) is registered at 14 Constitution Street, Edinburgh EH6 7BT, United Kingdom. For this website we are the data controller. For the rota, timesheet and staff data our customers put into Midshift, we are a data processor acting on their instructions. Contact: [email protected].

What we collect on this website

When you use the contact form, start a trial or subscribe to our newsletter, we collect your name, work email, business name, team size and anything you write to us. We use one privacy-friendly analytics tool that sets no cookies and stores no personal data. We do not use advertising cookies or third-party trackers.

What we process in the app

Staff names, contact details, availability, shifts, clock-in times and, where a customer enables payroll, pay rates and hours. Location is used only at the moment of clocking in and only if the customer has switched geofencing on.

Where it is stored

In the United Kingdom, in two London data centres, encrypted in transit and at rest. Our sub-processors are listed in the data processing agreement that forms part of every plan.

How long we keep it

Account data for as long as you are a customer, then 90 days so you can export it, then it is deleted. Timesheet and payroll records are kept for six years where the customer's legal obligations require it. Newsletter subscriptions end the moment you unsubscribe.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by writing to [email protected]. If you are a member of staff at one of our customers, we will pass your request to your employer. You can also complain to the Information Commissioner's Office.