Privacy Policy

STRATEGIC CHANGE CONSULTING SERVICES LTD ("Shiftwise", "we", "us") is the data controller for personal data processed through strchaconser.shop. We provide an online-only digital subscription that helps teams draft organizational change plans and communication material.

Registered office: 85 Hartfield Avenue Elstree, WD6 3JJ, United Kingdom. Contact: support@strchaconser.shop, +44 7510673887.

• Account data — name, email and password credentials when you register.
• Subscription & billing data — plan, billing status and the last four digits and card type of your payment method (from our payment processor). We never receive or store your full card number.
• Your inputs — the change descriptions, team size, timelines, outcomes and channels you type into the planner to generate a plan.
• Generated results — the change plans, visuals and change-story scripts produced for you.
• Support data — messages, contact details and enquiry context when you email us or use our forms.
• Technical data — IP address, device/browser type, and essential usage logs needed to run and secure the service.

Our collection sources are:

• Directly from you — registration, the change planner, our forms and support messages.
• Automatically from your device — essential cookies and server logs when you use the site.
• From our payment processor — subscription and limited billing status after you subscribe.

We do not buy personal data or build profiles from third-party data brokers.

• Provide the service (generate plans, run your account) — performance of a contract.
• Take payment and manage subscriptions — performance of a contract and legal obligation.
• Support and service communication — legitimate interests and contract.
• Security, fraud prevention and debugging — legitimate interests and legal obligation.
• Product analytics and improvement — legitimate interests, or consent where required for non-essential cookies.

This section explains how the AI parts of the service handle your data.

• User input — the change descriptions, team size, timeline, outcome, resistance notes and any example text or files you enter into the planner. Your user input is processed only to generate your plan, visuals and change-story scripts.
• Generated results — the plans, diagrams and scripts the service produces from your user input, stored in your account until you delete them or close your account.
• File uploads and example data — any material you paste or upload is used only for the generation you requested.

How the AI provider processes it: generation is carried out through a third-party AI provider that receives your user input solely to return results. The AI provider does not use your user input or generated results to train its models, and Shiftwise does not use your user input or generated results to train any AI model.

Retention and deletion: user input is cached only for as long as needed to run the generation and is then cleared from working memory. Saved projects and results remain in your account until you delete them; you can delete a project or your whole account at any time, or email us to request deletion.

Please do not enter employees' sensitive personal data. If you choose to include internal information, you are responsible for ensuring you have a lawful basis to process it. You retain ownership of your user input; see our Content License.

Payments are processed by our third-party payment provider (Stripe). Card details are entered directly with the provider on their secure infrastructure; Shiftwise does not receive or store full card numbers, CVC codes or full payment credentials. We receive confirmation of payment status and limited billing metadata to manage your subscription. The provider processes your data under its own privacy notice.

We share personal data only with processors that help us run the service, under data-processing agreements:

• Hosting & delivery — our cloud hosting and content-delivery provider.
• Payments — our payment processor (Stripe).
• Database, storage & authentication — our backend platform provider.
• AI provider — the third-party AI provider that powers plan and content generation, which processes your user input only to return results and does not train on it.
• Email — our transactional email provider for account and support messages.

We may also disclose data where required by law, or to protect our rights, users and the service.

Our providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision, so your data keeps an equivalent level of protection.

• Account & projects — while your account is active; deleted on request or after account closure.
• Planner inputs (working cache) — cleared shortly after generation.
• Billing records — retained as required by tax and accounting law (typically up to 6 years).
• Support messages — kept only as long as needed to resolve and evidence enquiries.

We use encryption in transit, access controls, secret management and least-privilege practices. Secret keys are held server-side and never exposed to browsers. No system is perfectly secure, but we work to protect your data and will notify you and regulators of a qualifying breach where the law requires.

Under UK and EU GDPR you can access, correct, delete, restrict or object to processing, request portability, and withdraw consent. To exercise any right, email support@strchaconser.shop.

If you are a California resident, the CCPA/CPRA gives you rights to know, delete, correct and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined, and we do not process it for cross-context behavioural advertising.

We use essential cookies to run the site and keep you signed in, and limited privacy-respecting analytics to improve the product. You can control non-essential cookies via your browser and our cookie controls. See our Cookie Policy for detail.

Generation is a drafting aid; we do not make decisions producing legal or similarly significant effects about you solely by automated means. The service is not for children: it may not be used by anyone under 13, and 13–17 year-olds may only use it with verifiable consent from a parent or guardian.

Email support@strchaconser.shop or write to us at 85 Hartfield Avenue Elstree, WD6 3JJ, United Kingdom. If you are in the UK/EEA and are unhappy with our response, you can complain to your data protection authority — in the UK, the Information Commissioner's Office (ICO).