Shift & Stream Privacy Notice 

Last updated: 17 January 2026 

Shift & Stream (“we”, “us”, “our”) is committed to protecting your personal data and being transparent about how we collect, use, and safeguard your information. This Privacy Notice explains what personal data we collect through our website and services, why we collect it, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.
 

1. Who We Are

Shift & Stream is an operational efficiency consultancy based in Melrose, Scottish Borders, United Kingdom. We are represented by Melanie Macvicar, Founder & Consultant. 

Contact: Melanie Macvicar
 

2. What Personal Data We Collect

• Website enquiry details (name, email address, business name, tel no & enquiry details)
• Client engagement data (documents, operational information shared for consulting)
• Technical data (IP address, browser type, analytics)

3. How We Collect Personal Data

We collect data when you: 

• Submit a form on our website 
• Contact us via email or phone
• Become a client
• Attend workshops, interviews, or consultations
• Provide documents or information during a project

4. How We Use Your Personal Data (Purposes & Lawful Bases)

• Responding to enquiries – Legitimate interests
• Delivering consulting services – Contract
• Improving our services – Legitimate interests
• Sending updates or resources – Consent
• Website analytics – Consent (non-essential cookies)

5. Who We Share Your Data With

We share data only with essential service providers such as IT systems, email providers, storage, CRM tools, or subcontractors supporting project delivery. We never sell your personal data.  

6. International Transfers

If any provider stores data outside the UK, contractual safeguards such as Standard Contractual Clauses are used. 

7. Data Retention

• Enquiry emails: 12 months
• Client project files: 7 years
• Analytics: up to 14 months

After these periods, data is securely deleted or anonymised.  

8. Your Data Rights

You have the right to access, correct, erase, restrict, object, and request portability of your data. You may withdraw consent at any time. 

9. Security

We use encryption, access controls, secure storage, and data minimisation to protect personal data.

10. Complaints

You may lodge a complaint with the Information Commissioner’s Office (ICO) if you have concerns about our data handling. 

11. Updates

We may update this notice from time to time. The latest version will always be available on our website.