This policy explains what personal data Key Shift London collects, why, who we share it with, and the rights you have over it.
Who we are
Key Shift London CIC ("we", "us") is the data controller for the personal data described here. We are a Community Interest Company registered in England and Wales (company no. 15685849), based in South London. You can reach us about anything in this policy at hello@keyshiftlondon.org.
What we collect and why
We only collect what we need to respond to you, deliver our training and coaching, and run our organisation.
- Enquiries. When you use our enquiry form we collect your name, email, organisation (if given) and your message. Purpose: to respond and, where relevant, to prepare a quote or invoice. Lawful basis: our legitimate interest in responding to you, and steps toward a contract.
- Training sign-up and payment. When you sign up for Precision Training we collect your name, email, organisation, role, the levels and number of seats. Payment card details are entered directly with our payment processor (Stripe), not us, so we never see or store your card number. Purpose: to take payment and provision your training access and certificate. Lawful basis: performance of a contract.
- Team seat activation. When you activate a team seat we collect your name and email to create your individual access. Lawful basis: performance of a contract.
- Coaching bookings. If you book a session we collect the booking details you provide (via Cal.com). Lawful basis: performance of a contract.
- Operational records. We keep records of purchases, access grants and support issues so we can run the service, evidence outcomes and meet our legal and accounting obligations. Lawful basis: legitimate interests and legal obligation.
We do not knowingly collect data directly from children through this website; our services are arranged with the adults and organisations who work with young people.
Who we share it with
We use a small number of trusted service providers (processors) who handle data on our instructions. We do not sell your personal data.
- Stripe — payment processing and checkout.
- Notion — our secure record of enquiries, purchases and access.
- Resend — sending transactional emails (welcome, access and activation links).
- Cal.com — coaching bookings.
- Render — hosting our application/backend.
- GitHub Pages — hosting this website; Google Fonts serves the site's typefaces.
Some of these providers may process data outside the UK/EEA. Where they do, appropriate safeguards (such as UK/EU standard contractual clauses) are relied upon.
How long we keep it
We keep personal data only as long as needed for the purpose it was collected, and to meet legal, accounting and safeguarding obligations. Enquiry and marketing data is reviewed periodically and removed when no longer needed; purchase and access records are retained for as long as we are required to keep financial records.
Your rights
Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. To exercise any of these, email hello@keyshiftlondon.org and we will respond within one month.
Cookies and third-party sites
This website does not use tracking or advertising cookies. When you proceed to payment (Stripe) or book coaching (Cal.com) you move to those providers' own pages, which have their own cookies and privacy policies. We link to third-party sites for your convenience but are not responsible for their content or privacy practices.
Changes to this policy
We may update this policy from time to time. The "last updated" date above shows when it last changed.
Complaints
If you have a concern about how we handle your data, please contact us first at hello@keyshiftlondon.org. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.