What we do with your data
This notice is about this website: the application form on it, and the emails you send us about an application. It says what they collect and what happens to what you send. It is short because the site is small.
1 · Who we are
This website is operated by TechShifts Media Limited, trading as BusinessGPS, a company registered in England and Wales, company number 12622485. TechShifts Media Limited is the data controller for everything described here, and it is the party you would contract with.
For anything about your data, email help@techshifts.io.
2 · What we collect, and when
We collect personal data in three places on this site. They are the application form, an application or question you email to help@techshifts.io, and the conversations that follow.
When you apply (the form at /baseline/start), we collect your name, your role, your organisation and your work email address. We also collect what you tell us about your change. If you answer it, we collect whether your organisation has rules on installing software or using AI model services.
Your application is sent to AWeber when you press the button.
When you speak to us: we keep notes of our conversation, for the same period. We do not record or transcribe the call. If that changes, we tell you at the start of it and ask first.
When you pay: we hold the details we need to invoice you: your name, your organisation, your billing address and your purchase-order number. Your card details go to the payment provider, and not to us.
If you email your application to help@techshifts.io, we treat it as we treat one sent through the form. We use it only to reply to you about your application, and we keep it for the same period. It stays within BusinessGPS, and it is never used for marketing.
Please do not put confidential material into the form. The form is where you tell us about the change; it is not where the work is handed over. That happens later, under a separate signed agreement, and only if you decide to go ahead.
We do not ask for special category data, and have no use for it. That means health, ethnicity, political opinion, religion, trade union membership, genetic or biometric data, sex life or sexual orientation. Do not send it.
3 · Why we collect it, and our lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Your name, role, organisation, work email and what you tell us about a programme | To read your enquiry, decide whether we are the right people for it, reply to you, and take the conversation forward if you want to | Legitimate interests: you asked us to get in touch about a piece of work, and replying is the whole point of the form. Where it leads to an engagement, steps taken at your request before entering a contract |
| A paying customer’s name, organisation, billing address and payment records | To invoice you, take payment and keep our accounts | Contract; and legal obligation for the accounts and tax records. |
4 · What we do not do with it
One automatic receipt. No marketing, no series of emails, no selling your details.
In plain terms, applying does not subscribe you to any list we send to many people. When you apply, one automatic email tells you your application has arrived. It starts no series of emails. It does not get passed to anyone outside TechShifts Media Limited to sell to. Your application is held in a list at AWeber, the service that stores it for us. That list is used to find your application, answer it, and send you that one receipt. No other email is sent from it. We do not sell personal data, and we do not trade it. We do not use what you write in the enquiry form to train or improve any AI system.
5 · Who else touches it
A small number of providers handle data on our behalf. They do so on their standard data processing terms, and only to do the job we engage them for:
| Provider | What it does | What it sees |
|---|---|---|
| Netlify | Hosts this website, and runs the step that passes your application on to AWeber | Your IP address and request details, in server logs. Your application as it passes through; the step keeps no copy of it |
| AWeber | Holds your application on a list used to find it, answer it and send you one receipt | Your name, work email address, and everything you typed into the application |
| Microsoft | Hosts help@techshifts.io and the team’s mailboxes (Microsoft 365), runs the 30-minute conversation (Teams) and holds our notes of a conversation (OneNote) | The emails you send us; your name and email address and what is said and shown on the call as it runs; our notes |
| Stripe | Takes your card payment, only if you pay by card | Your card details and billing details. We never see your full card number |
These are all the providers that handle your application or your payment. There is no advertising network on this site and no tracking pixel. No payment is taken on this website. When you pay by card, Stripe handles your payment details under its own privacy notice.
6 · Where it goes outside the UK
Netlify, AWeber and Microsoft are US companies, so some of this data is handled outside the UK. We rely on the transfer safeguards in each provider’s standard data processing terms. These are the UK International Data Transfer Addendum and Standard Contractual Clauses. Where a provider is certified under the EU–US Data Privacy Framework, we may rely on the UK extension to it. Stripe’s own privacy notice sets out the safeguards it relies on for card payments.
7 · How long we keep it
| What | How long |
|---|---|
| An application we have not followed up | Deleted 2 years after you send it, so that we can come back to you if your change moves |
| An enquiry that does not become work, including an application once we have spoken | 12 months from our last exchange, then deleted |
| Your application at AWeber | Deleted from AWeber when it is deleted from our own records. Deleted means removed from the list, not only unsubscribed |
| Notes of a conversation | The same period as the enquiry they belong to |
| An enquiry that becomes work | It becomes part of the engagement record and is kept under that engagement’s own terms |
| A paying customer’s records | Kept for the period the law requires for accounts and tax (six years) |
| Server logs | As long as our host retains them for security and diagnostics |
8 · Your rights, and deletion on request
Under UK GDPR you can ask us for a copy of your data. You can ask us to correct it or to delete it. You can ask us to restrict or stop processing it. You can object to processing based on legitimate interests. You can ask for your data in a portable form. Where we rely on consent, you can withdraw it at any time.
You can ask us to delete your data at any time and we will. A person at TechShifts Media Limited receives the request and does it by hand. There is no self-service delete button on this website, and we are not going to imply there is one. Email help@techshifts.io and we will act within one month, as UK GDPR requires, and tell you when it is done.
9 · Cookies and analytics
See Cookies. The short version is on that page and it is short.
Counting visits. We count visits and key actions, such as opening a page or sending an application, with a counter on our own domain. It sets no cookie and stores nothing on your device. It keeps only daily totals for each action, and no IP address, identifier or anything about you. To deliver the page, our host handles your IP address and browser details for a moment. We do not keep them in the counter. We rely on our legitimate interest in knowing how the site is used.
10 · If you are unhappy with how we have handled your data
Tell us first, at help@techshifts.io, and we would rather fix it than not know. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, and nothing here takes that away.
11 · What this notice does not cover
This notice is about this website and how we handle applications. It is not the agreement for anything you buy. You run the Baseline on your own systems, and your documents do not come to us. If we ever agree another arrangement, it runs under a separate written agreement. Its terms are given to you in full before you send anything.
12 · Changes
If we change this notice we change the date at the top. The current version is always the one on this page.
Last updated: 2026-10-23