Privacy notice

Last updated 19 August 2026.

Who I am

Nightshift is a trading name of Certi Technologies Ltd, registered in England and Wales, company number 16956446. Registered office: 3rd Floor, 86-90 Paul Street, London EC2A 4NE. Certi Technologies Ltd is the data controller for the information described here and is registered with the Information Commissioner's Office, registration number ICO:00014520341.

Any questions, or to exercise any of the rights below, email privacy@nightshift.services.

What I collect

If you use the intake chat. The messages you send, and the replies you get back. If you give an email address, that too.

If you book a call. Your name, email address and anything you write in the booking questions. This is handled by Cal.com.

If you email me. Whatever you send, held in my mailbox.

Everyone who visits. Your IP address, briefly, so I can stop the chat being abused. Nothing else. There is no analytics, no advertising tracking and no cookies beyond what is needed to make the site work.

Please do not put personal information about your clients, staff or customers into the chat. It is a scoping tool and it does not need it. Describe the process, not the people.

Why I use it, and on what basis

I use your messages and email address to write you a scoping reply, to follow up occasionally about that enquiry, and to run and improve the service. The lawful basis is legitimate interests: you contacted a business about buying something, and replying and following up is what you would reasonably expect. My interest in doing so does not override your rights, and you can tell me to stop at any time.

I use IP addresses to rate limit the chat, on the basis of legitimate interests in preventing abuse of a free service.

If you become a client, I keep records to perform our contract and to meet legal obligations such as tax record keeping.

You can opt out of follow-up at any time by replying to any email and saying so, or by emailing privacy@nightshift.services. It takes one line and there is no hard feeling in it.

Who else sees it

I use a small number of suppliers to run the service. They process data on my instructions only and cannot use it for their own purposes.

• Vercel hosts the website.
• Supabase stores the database and handles admin login.
• Anthropic provides the model that powers the intake chat. Your messages are sent to Anthropic to generate a reply. They are not used to train models.
• Resend sends notification emails.
• Cal.com handles call bookings.
• Google Workspace hosts my email.

Some of these are based outside the UK, mainly in the United States. Where that is the case, transfers are covered by the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision.

I do not sell your data, and I do not share it with anyone for marketing.

How long I keep it

Intake transcripts and email addresses from enquiries that do not become work are deleted after 12 months.

If you become a client, I keep project records for six years after our last piece of work, which is the period HMRC requires for business records.

IP addresses used for rate limiting are deleted after two days.

Ask me to delete your data sooner and I will, unless I am legally required to keep it.

Your rights

Under UK GDPR you can ask me to give you a copy of your data, correct it, delete it, restrict how I use it, or send it to someone else. You can object to my use of legitimate interests as a basis, including for follow-up.

Email privacy@nightshift.services and I will respond within one month. There is no charge.

If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you told me first so I can put it right.

Changes

If this notice changes materially I will update the date at the top. This version applies from 19 August 2026.