Privacy notice
Last updated: 3 November 2026
This notice hasn't been reviewed by a lawyer. We wrote it to follow the Information Commissioner's Office guidance on what a privacy notice should say.
Who we are
ShiftLens is run by Jake Bailey (“we” or “us” in this notice). You can contact us about this notice, or anything else to do with your data, at jake.bailey@shiftlens.co.uk.
Your rota stays on your device
When you check a rota, ShiftLens reads the file and runs every check inside your web browser. Staff names, shifts, dates and any other rota details are never sent to us or to anyone else, and we don't store them. They're gone when you close the page. The part of the page that reads your rota is blocked from sending anything at all.
What we collect
There's no sign-up and no account, and we don't ask for your name or email address. What we do handle is described below: the technical information any website receives, anonymous visit counts, and emails you choose to send us.
Our web server
This website runs on a server in the UK that we rent from IONOS. Like any web server, it receives your IP address so it can send pages to your browser.
- Its access log records which pages were requested and when, but not your IP address or browser.
- Its error log records faults, such as broken or malicious requests, and can include the IP address involved.
We use these logs only to keep the website working and secure. That is our legitimate interest, and the reason the law allows us to keep them. Both logs are deleted automatically after about two weeks (15 days at most).
Visit counts
To see how people find and use ShiftLens, each page sends a short message to our own server when it opens. We count these with Umami, software we run ourselves on the same server, so no analytics company receives them. The message contains:
- the page's address and title
- the website that linked you here, such as a search engine (the site only, not the page or what you searched for)
- when you check a rota, the words “Rota checked” and whether it was your own file or one of our samples, and nothing from the rota itself.
Like every request, it also carries your IP address and the type of browser and device you use. Umami uses your IP address to work out roughly where you are (country, region and town) and to tell one visit from another for the rest of that day. It doesn't store your IP address, and the next day it can't link your visits together. We can't identify you from these counts.
We do this because of our legitimate interest in knowing how many people use ShiftLens and how they find it. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, no message is sent. The counts are deleted after 26 months.
If you email us
You don't have to email us to use ShiftLens. If you do, we use your email address and what you write to reply to you. That is our legitimate interest in answering your message. We delete each conversation within 12 months of the last message.
Who else handles your data
IONOS provides both our server and our email, under a data processing agreement with us. It handles your data only on our instructions, in the UK or the European Economic Area. UK law recognises the European Economic Area as protecting personal data to the same standard as the UK.
We don't sell or share data with anyone else, and we don't make automated decisions about you.
Cookies and tracking
ShiftLens doesn't set cookies or store anything on your device. Apart from the anonymous visit counts above, which stay on our own server, we don't use analytics, advertising or tracking tools.
Your rights
You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, or limit how we use it. In practice, unless you've emailed us, we hold nothing that identifies you. To use any of these rights, email jake.bailey@shiftlens.co.uk. We'll reply within one month.
Your right to object
We keep server logs, count visits and reply to emails because of our legitimate interests, so you have the right to object. To stop visit counts straight away, turn on “Do Not Track” or “Global Privacy Control” in your browser. Email us and we'll stop, unless we have a strong reason to carry on, such as dealing with an attack on the website.
Complaints
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first, so please contact us before going to the ICO.
Changes to this notice
If we change how we use your data, we'll update this notice and the date at the top.