Shift Transfer ("Shift", "we", "us", or "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our website, mobile applications, APIs, and remittance services (collectively, the "Services").

1. Scope of This Policy

This Privacy Policy applies to all users of Shift Transfer Services, including customers, agents, partners, and website visitors.

2. Information We Collect

2.1 Personal Information

We may collect personal data necessary to provide our Services and comply with legal obligations, including:

• Full name

• Date of birth

• Nationality

• Identification information (such as national ID, passport, or other KYC documents)

• Residential address, email address, and phone number

• Occupation and source of funds (where legally required)

2.2 Transaction Information

• Sender and receiver details

• Transaction amounts, currencies, and destinations

• Transaction references and history

• Agent or partner identifiers

2.3 Technical and Usage Information

• IP address

• Device, browser, and operating system information

• Access logs and timestamps

• Cookies and similar technologies

3. Purpose of Processing

We process personal data for the following purposes:

• To provide, operate, and manage remittance and payment services

• To verify identity and comply with KYC, AML, and counter-terrorism financing requirements

• To process and settle transactions

• To communicate with users regarding transactions, support, or service updates

• To improve system performance, security, and user experience

• To detect, prevent, and investigate fraud, misuse, or security incidents

4. Legal Basis for Processing (GDPR)

Where applicable, Shift Transfer processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR. Our legal bases for processing include:

• Performance of a contract

• Compliance with legal and regulatory obligations

• Legitimate business interests

• User consent, where required by law

5. Information Sharing and Disclosure

We may share personal data with:

• Licensed financial institutions, payment processors, and remittance partners

• Regulatory authorities, law enforcement agencies, or courts when legally required

• Technology providers, hosting services, and system vendors under contractual confidentiality obligations

• Authorized employees and agents on a need-to-know basis

Shift Transfer does not sell or rent personal data to third parties.

6. International Data Transfers

As a remittance aggregator, personal data may be transferred to and processed in countries outside the user’s country of residence. We apply appropriate safeguards to ensure data protection in accordance with applicable data protection laws.

7. Data Retention

We retain personal and transaction data only for as long as necessary to:

• Provide the Services

• Comply with legal, regulatory, accounting, and audit obligations

• Resolve disputes and enforce agreements

Retention periods are determined in line with applicable financial and regulatory requirements.

8. Cookies and Tracking Technologies

Shift Transfer uses cookies and similar technologies to:

• Enable essential website functionality

• Enhance performance and user experience

• Analyze usage patterns and traffic

Where required by law, we will obtain user consent before using non-essential cookies. Users may manage cookie preferences through browser settings or cookie consent tools.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest

• Role-based access controls

• Continuous monitoring, logging, and security assessments

While we take reasonable steps to protect data, no system can guarantee absolute security.

10. Your Data Protection Rights

Subject to applicable laws (including GDPR where applicable), individuals may have the right to:

• Access personal data held about them

• Request correction of inaccurate or incomplete data

• Request deletion of personal data, subject to legal retention requirements

• Object to or restrict certain processing activities

• Withdraw consent where processing is based on consent

Requests can be made using the contact details below.

11. Third-Party Services and Links

Our Services may include links to third-party websites or services. Shift Transfer is not responsible for the privacy practices or content of third parties.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on our website with a revised effective date. Continued use of the Services indicates acceptance of the updated policy.

13. Contact Information

For questions, concerns, or data protection requests, please contact:

Shift Transfer
Email: support@shifttransfer.com
Address: The Charter Plc Uxbridge UB8 1JG United Kingdom