Privacy policy
Last updated 1 September 2026. Template placeholder — have this reviewed for your business before launch.
Who we are
Midshift Software Ltd (company no. SC712408) is registered at 14 Constitution Street, Edinburgh EH6 7BT, United Kingdom. For this website we are the data controller. For the rota, timesheet and staff data our customers put into Midshift, we are a data processor acting on their instructions. Contact: hello@midshift.example.
What we collect on this website
When you use the contact form, start a trial or subscribe to our newsletter, we collect your name, work email, business name, team size and anything you write to us. We use one privacy-friendly analytics tool that sets no cookies and stores no personal data. We do not use advertising cookies or third-party trackers.
What we process in the app
Staff names, contact details, availability, shifts, clock-in times and, where a customer enables payroll, pay rates and hours. Location is used only at the moment of clocking in and only if the customer has switched geofencing on.
Where it is stored
In the United Kingdom, in two London data centres, encrypted in transit and at rest. Our sub-processors are listed in the data processing agreement that forms part of every plan.
How long we keep it
Account data for as long as you are a customer, then 90 days so you can export it, then it is deleted. Timesheet and payroll records are kept for six years where the customer's legal obligations require it. Newsletter subscriptions end the moment you unsubscribe.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by writing to hello@midshift.example. If you are a member of staff at one of our customers, we will pass your request to your employer. You can also complain to the Information Commissioner's Office.