Updated March 31, 2025
Privacy Policy
Looking for information on GDPR? Learn about Shiftboard’s compliance with GDPR here.
Shiftboard, Inc. (“Shiftboard,” “we,” “us,” “our,” or the “Company”) is committed to protecting the privacy of individuals who visit the Company’s Web sites (“Visitors”) and individuals who register to use the Services as defined below (“Customers). This Privacy Policy describes Shiftboard’s privacy practices in relation to the use of the Company’s applications and services offered by Shiftboard (collectively, the “Services”), as well as individuals’ choices regarding use, access and correction of personal information.
If you have questions or complaints regarding Shiftboard’s Privacy Statement or associated practices, please contact Shiftboard by mail at Shiftboard, Inc. PO Box 21329, Seattle, WA 98111. Or contact Shiftboard at privacy@shiftboard.com.
1. Applications and Services Covered
This Privacy Policy covers the information practices, including how the Company collects, uses, shares and secures the personal information you provide, of application and services that link to this Privacy Policy (collectively referred to as “Shiftboard’s Applications” or “the Company’s Applications”).
Shiftboard provides an application (a “forum”) with a variety of networking and productivity tools and opportunities for individuals and organizations. Networking and sharing personal information on Shiftboard are entirely voluntary and can only be the result of registration. When you use this application/website, we collect and store your personal information as provided by you or your employer. We may collect and store the following personal information- name, address, contact numbers, email address, physical contact information, photographs, and sometimes financial information (depending on the service used).
Shiftboard provides a website with a variety of educational tools and opportunities for individuals and organizations to engage and communicate with Shiftboard. Sharing personal information on Shiftboard can only be the result of visiting pages, registration, or an explicit request to communicate with the Shiftboard organization.
Shiftboard’s application and website may contain links to other Web sites. The information practices or the content of such other Web sites is governed by the privacy statements of such other Web sites. The Company encourages you to review the privacy statements of other Web sites to understand their information practices.
2. Shiftboard Data Contact Information
For the purpose of applicable data protection legislation, the data controller of your personal information is Shiftboard, Inc., located in Seattle, WA. Our Canadian Representative and Data Protection Officer can be reached at privacy@shiftboard.com.
In the context of the provision of our Services, we may also process your personal information as a processor on behalf of our customers, as your employer. In such cases, we recommend directing any privacy-related questions to them.
We do not process any sensitive personal information in a controller capacity (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) hence do not disclose any such information on or through the application or services or otherwise to us.
We may process sensitive categories of personal information if provided by our customers and in accordance with their instructions, as necessary to deliver our Services. In such cases, we will act in a processor capacity.
3. Types of Data Collected Directly from User
- Shiftboard collects and stores personal information when your employer purchases a Shiftboard account; employers will provide your personal information to Shiftboard.
- Shiftboard collects and stores personal information whenever you use Shiftboard applications and services that require information persistence, such as scheduling, messaging, task management, and other software program information.
- Shiftboard collects and stores personal information when you register for a Shiftboard demo, webinar or other activity, voluntarily provide personal information, or when you register for other Shiftboard activities
- Shiftboard collects and stores personal information whenever you use a Shiftboard website that requires information persistence, such as requesting a demo or requesting help from sales or support.
- When expressing an interest in obtaining additional information about the Services or registering for an event, Shiftboard requires you to provide the Company with personal contact information, such as name, company name, address, phone number, and email address (“Required Contact Information”).
- When purchasing the Services or registering for an event, Shiftboard may also require you to provide the Company with financial qualification and billing information, such as billing name and address, credit card number, and the number of employees within the organization that will be using the Services (“Billing Information”).
- Shiftboard may also ask you to provide additional information, such as company annual revenues, number of employees, or industry (“Optional Information”) when speaking to Shiftboard.
- When Visitors apply for a job with the Company, Shiftboard may also require you to submit additional personal information as well as a resume or curriculum vitae (“Applicant Information”).
- Required Contact Information, Billing Information, Applicant Information, Optional Information and any other information you submit to Shiftboard in any electronic or verbal communications are referred to collectively as “Data.”
4. Types of Data Collected Indirectly from User
- Shiftboard uses cookies and other technologies to provide your online experience and also to assess in aggregate, the ways in which people use our services.
- • Shiftboard servers store information when you visit a Shiftboard service, use our products, or otherwise access a Shiftboard URL. Stored information includes the URL, IP address, browser types and language, and also the date and time of your request.
5. Cookie Policy
Shiftboard uses cookies to make interactions with the Company’s Web sites easy and meaningful. When you visit one of the Company’s Web sites, Shiftboard’s servers send a cookie to your computer. Standing alone, cookies do not personally identify you; they merely recognize your Web browser. Unless you choose to identify yourself to Shiftboard, either by responding to a promotional offer, opening an account, or filling out a Web form (such as a “Request a Demo”), you remain anonymous to the Company.
Shiftboard uses cookies that are session-based and persistent-based. Session cookies exist only during one session. They disappear from your computer when you close your browser software or turn off your computer. Persistent cookies remain on your computer after you close your browser or turn off your computer. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our Web sites or Services.
- The following sets out how shiftboard.com uses different categories of cookies and your options for managing cookies’ settings:
|
Type of cookies |
Purpose |
|
Essential Cookies |
These cookies are essential to provide you with services and features available through Shiftboard. For example, they allow you to watch videos hosted on the website, register for online webinars, and ensure that your form submissions are processed accordingly. They also allow you to login to secure areas of Shiftboard and help the content of the pages you request load quickly. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services. |
|
Analytics and Performance Cookies |
These cookies are used to collect website traffic information and how users interact with the Shiftboard website. The information gathered does not identify any individual visitor. Instead, the information is aggregated and made anonymous. Examples of the information includes the number of visitors to Shiftboard.com, the websites or traffic sources that referred users to the website, pages they visited on Shiftboard.com, what time of day they visited Shiftboard, whether they have visited Shiftboard before, and other similar information. We use this information to help operate Shiftboard more efficiently, to gather broad demographic information and to monitor the level of activity on Shiftboard. The services we use include: Google Analytics: |
|
Targeted and advertising cookies |
These cookies track your browsing habits to enable Shiftboard to show advertising which is more likely to be of interest to you. These cookies use information about your browsing history to group you with other users who have similar interests. Based on that information, and with our permission, third party advertisers can place cookies to enable them to show advertisements which we think will be relevant to your interests while you are on third party websites. You can disable cookies which remember your browsing habits and target advertising at you by visiting http://www.youronlinechoices.com/uk/your-ad-choices. If you choose to remove targeted or advertising cookies, you will still see advertisements but they may not be relevant to you. Even if you do choose to remove cookies by the companies listed at the above link, not all companies that serve online behavioral cookies are included in this list, and so you may still receive some cookies and tailored advertisements from companies that are not listed. |
|
Social Media Cookies |
These cookies are used when you share information using a social media sharing button or “like” button on shiftboard.com or you link your account or engage with our content on or through a social networking website such as Facebook, Twitter, or Google+. The social network will record that you have done this. |
6. Data Processing Rules
- Shiftboard will only process your personal information in accordance with applicable data protection and privacy laws. We need certain personal information in order to provide you with access to Shiftboard website and product.
- If you created a request for a demo or registered for a webinar, event or requested collateral, you will have been asked to check a tick box indicating your agreement to provide this data in order to access our services, purchase our products, view our content.
- If you created an account with us, you will have been asked to check a tick box indicating your agreement to provide this data in order to access our services, purchase our products, view our content. This consent provides us with the legal basis we require under applicable law to process your data.
- You maintain the right to withdraw such consent at any time. If you do not agree to our use of your personal information in line with this Policy, please do not use our website, application or provide us personal information either over the phone, in email, through web forms or in any other way.
- Shiftboard posts a list of Customers and case studies on the Company’s Web sites that contain information such as Customer names and titles. Shiftboard obtains the consent of each Customer prior to posting case studies or posting testimonials.
7. Sharing of Information Collected
We may share your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection.
Service Providers
Shiftboard may share Data about Shiftboard Customers with the Company’s contracted service providers so that these service providers can provide services on our behalf. These service providers are authorized to use your personal information only as necessary to provide the requested services to us. Without limiting the foregoing, Shiftboard may also share Data about Customers with the Company’s service providers to ensure the quality of information provided, and with third–party social networking and media Web sites, such as Facebook, for marketing and advertising on those Web sites. Unless described in this Privacy Policy, Shiftboard does not share, sell, rent, or trade any information with third parties for their promotional purposes.
Shiftboard may share Data about Shiftboard’s Visitors, Customers and Attendees with the Company’s contracted service providers so that these service providers can provide services on our behalf. These service providers are authorized to use your personal information only as necessary to provide the requested services to us. Shiftboard stores your information for sales and marketing purposes in HubSpot, Salesforce and Google Analytics. Shiftboard uses third party tools for webinars and hosting videos such as Brighttalk, GotoWebinar, JoinMe, Zoom, and Consensus. Without limiting the foregoing, Shiftboard may also share Data about Shiftboard Visitors, Customers and Attendees with the Company’s service providers to ensure the quality of information provided, and with third–party social networking and media Web sites, such as Facebook, LinkedIn, CrazyEgg, for marketing and advertising on those Web sites. Unless described in this Privacy Policy, Shiftboard does not share, sell, rent, or trade any information with third parties for their promotional purposes.
Shiftboard may share Data about Shiftboard’s Customers and users with the Company’s contracted service providers so that these service providers can provide services on our behalf. These service providers are authorized to use your personal information only as necessary to provide the requested services to us. Shiftboard stores your personal information for product use in AWS, Application Insights, Azure, Salesforce, Pendo, Twilio, Klipfolio, and Droppoint. Shiftboard uses third party tools for messaging such as Twilio. Shiftboard uses third parties for billing, email, and credit card processing such as Intuit, Stripe, Mailgun, Sendgrid, and Chargify.
Affiliates
Our corporate parent, subsidiaries, and affiliates.
Third parties designated by you
We may share your personal information with third parties where you have instructed us or provided your consent to do so. We will share personal information that is needed for these other companies to provide the services that you have requested.
Business and marketing partners.
Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.
Professional advisors.
Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
Authorities and Law enforcement, government authorities, as we believe in good faith to be necessary or appropriate for compliance with applicable laws.
Business transferees.
We may disclose personal information in the context of actual or prospective business transactions (e.g., investments, financing, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Shiftboard as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.
8. International Transfer of Information Collected
Your data, including personal information that we collect from you, may be transferred to, stored at and processed by US parties and our affiliates and other third parties outside the country in which you reside, including, but not limited to the United States, Canada and the European Union, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. The data in another jurisdiction may be accessed by the courts, law enforcement and national security authorities. By using our product, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.
9. Communications Preferences, Opt Out and Unsubscribe Information
Shiftboard offers Visitors, Customers, and Attendees who provide contact information a means to choose how the Company uses the information provided. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of the Company’s marketing emails. Additionally, you may unsubscribe here or by contacting us using the information in the “Contacting Us” section below.
10. Data Retention
We will only retain your personal information as long as reasonably required for you to use the Application(s) and/or in providing you with the service, unless a longer retention period is required or permitted by law (for example, for regulatory purposes).
11. Automatic Decision Making
We do not use your personal information for the purposes of automated decision-making. However, we may do so in order to fulfill obligations imposed by law, in which case we will inform you of any such processing and provide you with an opportunity to object.
12. Rights to Your Personal Data
Depending on your location and home jurisdiction, you may have additional rights, including rights under the California Consumer Privacy Act of 2018 (“CCPA”). Such rights may include the following:
- Opt-out (Right to Restrict Processing). You may have the right to opt-out of: (i) certain communications; (ii) automated decision-making and/or profiling; (iii) our collection of sensitive personal information; (iv) any new processing of your personal information that we may carry out beyond the original purpose; or (v) the transfer of your personal information outside the European Economic Area (EEA). Please note that your use of some of the Shiftboard website and product may be ineffective upon opt-out.
- Access (Right to be informed, Right of Access). You may have the right to access the data we hold about you, request further details about how we collect, use or disclose your information and to update or correct any inaccuracies in this data. Registered users of Shiftboard products may review, update, correct or delete their information in their User account by contacting their employer. In some cases, users can update some of their personal information in the Shiftboard product. If you have contacted Shiftboard for sales or marketing purposes and you need your personal information updated, you can contact us to change or delete your information.
- Move (Right to Data Portability). You may have the right to request that we provide you with your data in a portable format– i.e. you to have the flexibility to move your data to other service providers as you wish.
- Erase and forget (Right to Erasure). In certain situations, for example when the data we hold about you is no longer relevant or is incorrect, you can request that we erase your data and request that parties to whom we disclosed your data to the same.
- Non-Discrimination. You may have the right not to receive discriminatory treatment from us based on your exercising of any other of your consumer rights under applicable laws.
To obtain more information about exercising your rights, including how to designate an authorized agent to make a data request for you, please send an email to privacy@shiftboard.com.
Please be advised that upon the receipt of your request, we may ask you to provide additional information so that we can verify your identity and process your request. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
For the purposes of the CCPA, we do not sell your personal information, except where you explicitly consent to such sale, in which case we will present you with further information about how your information may be sold and your ability to opt-out of such sale at the time of collection.
13. Changes to This Privacy Policy
Shiftboard may update this Privacy Policy from time to time by posting a new version online. You should check this page occasionally to review any changes. If we make any material changes we will notify you by posting the revised Privacy Policy on our Websites. This helps you to always be aware of what information we collect, how we use it and under what circumstances, if any, it is disclosed. Your continued use of the Websites, the Subscription Service, and/or continued provision of Personal Information to us will be subject to the terms of the then-current Privacy Policy.
14. Domicile
Shiftboard referenced in this Privacy Policy includes Shiftboard Inc located in the United States and all subsidiaries worldwide.
15. Contacting Us
Questions regarding this Privacy Policy or the information practices of the Company’s Web sites and Services should be directed to Shiftboard Privacy by emailing us at privacy@shiftboard.com or by mailing us at: Shiftboard, Inc. P.O. Box 21329, Seattle, WA 98111.
Notice to European users
General
Where this Notice to European users applies. The information provided in this “Notice to European users” section applies only to individuals in the United Kingdom and the European Economic Area.
- Personal information. References to “personal information” in this Privacy Policy should be understood to include a reference to “personal data” (as defined in the GDPR) – i.e., information about individuals from they are either directly identified or can be identified.
- Controller. Shiftboard is the controller in respect of the processing of your personal information covered by this Privacy Policy for purposes of European data protection legislation (i.e., the EU GDPR and the so-called ‘UK GDPR’ (as and where applicable, the “GDPR”)). See “Contacting us” section above for our contact details.
- Our GDPR Representatives.
- Our EU representative appointed under the EU GDPR is European Data Protection Office (EDPO). You can contact EDPO regarding matters pertaining to the GDPR:
- by using EDPO’s online request form: https://edpo.com/gdpr-data-request/
- by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium
- Our UK representative appointed under the UK GDPR is Ian Herbert-Jones and can be contacted at privacy@shiftboard.com
Our legal bases for processing
In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a “legal basis” for that use.
Our legal bases for processing your personal information described in this Privacy Policy are listed below.
- Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).
- Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
- Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
- Where we have your specific consent to carry out the processing for the Purpose in question (“Consent”).
Other info
- No sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the services, or otherwise to us. If you provide us with any sensitive personal information to us when you use the services, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our services.
Your rights
- European data protection laws give you certain rights regarding your personal information. If you are located in Europe, you may ask us to take the following actions in relation to your personal information that we hold:
- Access. Provide you with information about our processing of your personal information and give you access to your personal information.
- Correct. Update or correct inaccuracies in your personal information.
- Delete. Delete your personal information where there is no good reason for us continuing to process it – you also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
- Restrict. Restrict the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it.
- Object. Object to our processing of your personal information where we are relying on Legitimate Interests – you also have the right to object where we are processing your personal information for direct marketing purposes.
- Withdraw Consent. When we use your personal information based on your consent, you have the right to withdraw that consent at any time.
- Exercising These Rights. You may submit these requests by email to privacy@shiftboard.com or our postal address provided above. We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.
- Your Right to Lodge a Complaint with your Supervisory Authority. In addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.
- For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
- For users in the UK – the contact information for the UK data protection regulator is below:
The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
Tel. +44 303 123 1113
Website: https://ico.org.uk/make-a-complaint/
Cross-border data transfer
Many of our service providers, advisers, partners or other recipients of data are based outside of Europe. This means that, if you use the Service, your personal information will likely be accessed and processed outside of Europe. In such circumstances, those parties’ processing of your personal information will involve a transfer of your personal information outside of Europe where privacy laws may not be as protective as those in your state, province, or country. Where we share your personal information with third parties who are based outside Europe, we will take steps to transfer your personal information in accordance with applicable law.
You can obtain further information or a copy of or access safeguards under which your personal information is transferred outside of Europe by contacting us at privacy@shiftboard.com.