This Privacy Notice for Nimble Shift (a trading name of Beacon Gainer Group Limited, company no. 09991975) (‘we’, ‘us’, or ‘our’), describes how and why we might access, collect, store, use, and/or share (‘process’) your personal information when you use our services (‘Services’), including when you:
Visit our website at http://www.nimble-shift.com or any website of ours that links to this Privacy Notice.
Use the services of Nimble Shift, a digital and AI practice for UK businesses which need guidance on the adoption, implementation, staffing and business case for deploying AI.
Engage with us in other related ways, including any marketing or events.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@nimble-shift.com.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information? We do not intentionally collect or request special category personal data. Please do not include this information in enquiry messages.
Do we collect any information from third parties? We do not collect any information from third parties.
How do we process your information? We process your information to provide and administer our Services, communicate with you, operate and secure our website, manage cookie and marketing preferences, comply with law, maintain business records, and protect our legal rights. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information
How do we keep your information safe? We have adequate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.
TABLE OF CONTENTS
- WHAT INFORMATION DO WE COLLECT?
- HOW DO WE PROCESS YOUR INFORMATION?
- WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
- WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
- COOKIES POLICY
- HOW LONG DO WE KEEP YOUR INFORMATION?
- HOW DO WE KEEP YOUR INFORMATION SAFE?
- DO WE COLLECT INFORMATION FROM MINORS?
- WHAT ARE YOUR PRIVACY RIGHTS?
- CONTROLS FOR DO-NOT-TRACK FEATURES
- DO WE MAKE UPDATES TO THIS NOTICE?
- HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
- HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
1. What information do we collect?
Personal information you disclose to us
In short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our Services, when you participate in activities relating to our Services, or otherwise when you contact us.
Personal information provided by you. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the features you use. The personal information we collect may include the following: names, email addresses, phone number, organisation, role/job title, service interest, enquiry content, and any information voluntarily included in messages, contact preferences
Sensitive information. We do not intentionally collect or request special category personal data. Please do not include this information in enquiry messages.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In short: We automatically collect limited technical information when you visit our website, mainly to operate, protect, and maintain the website.
When you visit, use, or navigate our website, certain technical information may be collected automatically by our website systems. This may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, pages viewed, date and time of access, and similar technical information.
We use this information for security, troubleshooting, website operation, and basic technical administration. We do not currently use Google Analytics, LinkedIn advertising pixels, or other analytics or marketing cookies on our website.
We currently use one strictly necessary cookie to remember your cookie preference choices. You can find more information in the Cookies Policy section below.
The information we collect includes log and usage data. Log and usage data is technical information automatically collected when you access or use our website. This may include your IP address, browser type and settings, device information, operating system, referring URLs, pages viewed, and date and time of access. We use this information for website operation, security, troubleshooting, and basic technical administration.
2. How do we process your information?
In short: We process personal information for the purposes set out in the table in Section 3 below.
These purposes include responding to enquiries, providing and administering our services, communicating with you, operating and securing our website, managing cookie and marketing preferences, complying with legal obligations, maintaining business records, and protecting our legal rights.
The table in Section 3 explains the personal information used for each purpose, the lawful bases we rely on, and our usual retention periods.
3. What legal bases do we rely on to process your information?
In short: We only process personal information where we have a lawful basis, and the table below explains our purposes, lawful bases, and usual retention periods.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
| Purpose | Personal information used | Lawful basis | Retention period |
| To respond to enquiries and requests | Name, email address, phone number, organisation, role, service interest, enquiry details, any information you choose to provide in your message | Legitimate interests, namely responding to enquiries and managing prospective client relationships; or steps prior to entering into a contract where your enquiry relates to our services | Up to 24 months after our last interaction with you, unless you become a client or we need to retain the information for legal or business record purposes |
| To provide our services and manage client relationships | Name, contact details, organisation, role, project information, correspondence, meeting notes, service requirements, contract details, related business information | Performance of a contract, or steps taken before entering into a contract; legitimate interests in managing our client relationships and delivering our services | For the duration of the client relationship and normally up to 6 years afterwards where needed for legal, accounting, tax, or business record purposes |
| To send administrative or service-related communications | Name, email address, organisation, role, service details, and relevant correspondence | Performance of a contract; legitimate interests in administering our services, keeping clients and prospective clients informed about relevant service matters | For as long as necessary to administer the relevant service or relationship, and normally up to 6 years where communications form part of our business records |
| To send marketing communications | Name, email address, organisation, role, contact preferences, and marketing engagement information | Consent where required by law; otherwise legitimate interests in promoting our services to business contacts in a proportionate way | Until you unsubscribe, withdraw consent, or object to marketing. We may keep a limited suppression record to make sure we do not contact you again |
| To operate, secure, and maintain our website | IP address, browser and device information, operating system, referring URLs, pages viewed, date and time of access, similar technical information | Legitimate interests in operating, maintaining, troubleshooting, and securing our website | Normally up to 12 months, unless we need to retain information for longer to investigate security issues or comply with legal obligations |
| To remember your cookie preferences | Cookie preference choice and consent status stored in the ns_cc_consent cookie | Legitimate interests in remembering your cookie choices and complying with cookie/privacy requirements | Approximately 6 months, unless you delete the cookie sooner |
| To comply with legal, regulatory, accounting, and tax obligations | Contact details, contracts, invoices, payment records, correspondence, and other records required by law | Legal obligations; legitimate interests in maintaining appropriate business records and protecting our legal position | Normally up to 6 years, or longer where required by law or where necessary in connection with a legal claim |
| To protect our legal rights and prevent misuse | Relevant contact details, correspondence, technical records, service records, and evidence connected with a dispute, claim, or security issue | Legitimate interests in protecting our business, enforcing our terms, preventing misuse, and establishing, exercising, or defending legal claims | For as long as necessary to deal with the issue, dispute, claim, or investigation, and in line with applicable limitation periods |
| To manage business changes | Relevant client, supplier, contact, contract, and business records | Legitimate interests in managing a merger, restructuring, sale, acquisition, financing, or similar transaction | For as long as necessary for the relevant transaction and subsequent record-keeping requirements |
Where we rely on legitimate interests, we have considered whether our interests are overridden by your rights and freedoms. You can object to processing based on legitimate interests in certain circumstances. Where we rely on consent, you can withdraw your consent at any time.
4. When and with whom do we share your personal information?
In short: We may share personal information with service providers who help us operate our website, communicate with you, and deliver our services.
Vendors, consultants, and other third-party service providers. We may share your data with third-party vendors, service providers, contractors, or agents (‘third parties’) who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.
The third parties we may share personal information with may include:
Website hosting and website administration: WordPress.com or our website hosting and administration providers
Email, communications, and direct marketing: Mailchimp, if you sign up to receive marketing emails from us or otherwise consent to receive marketing communications
Professional and operational support: Professional advisers, administrative support providers, and other business support providers where necessary for the operation of our business
Our current use of cookies and similar technologies is explained in Section 5.
We may also need to share personal information in the following situations:
Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, restructuring, or acquisition of all or part of our business.
Legal and regulatory requirements. We may disclose your information where required to comply with applicable law, regulatory obligations, legal processes, or enforceable governmental requests.
Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honour this Privacy Notice. Affiliates may include a parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Business partners. We may share your information with our business partners to offer you certain products, services, or promotions.
5. Cookies Policy
In short: Our website currently uses one strictly necessary cookie to remember your cookie preferences. We do not currently set analytics or marketing cookies.
This Cookies Policy explains how Nimble Shift uses cookies and similar technologies on www.nimble-shift.com. If you have questions about this site’s use of cookies, please contact us at hello@nimble-shift.com.
What cookies are
Cookies are small files placed on your device when you visit a website. They allow a website to recognise your device and remember certain information, such as choices you have made.
Cookies used on this site
At the date this Privacy Notice was last updated, our website uses the following cookie:
| Cookie | Provider | Purpose | Category | Duration |
| ns_cc_consent | Nimble Shift | Stores your cookie preference choice, including whether optional cookie categories have been accepted or rejected. | Strictly necessary | Approximately 6 months |
This cookie is required so that the website can remember your cookie choice and avoid asking you to make the same choice each time you visit. Because it is strictly necessary, it is always active.
Analytics and marketing cookies
The Cookie Preferences panel includes options for analytics and marketing cookies. However, this website does not currently set analytics or marketing cookies.
Future analytics or marketing cookies will be off by default and will only be set if you accept them through the Cookie Preferences panel, unless the law allows a different approach. We will also update this Cookies Policy to explain what those cookies are, who provides them, what they do, and how long they last.
Managing your cookie choices
When you visit the website, you can choose whether to accept all cookies, reject optional cookies, or save your preferences by category. You can change your choice at any time by selecting Cookie Preferences in the website footer. You can also set your browser to block or delete cookies. If you delete cookies, the website may ask you to confirm your cookie preferences again.
6. How long do we keep your information?
In short: We keep personal information only for as long as necessary, unless a longer retention period is required or permitted by law.
Our usual retention periods for different processing purposes are set out in the table in Section 3 above. When we no longer have a lawful reason to keep personal information, we will delete or anonymise it. If deletion or anonymisation is not immediately possible, for example because the information is stored in backup archives, we will securely store it and limit any further processing until deletion or anonymisation is possible.
7. How do we keep your information safe?
In short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
8. Do we collect information from minors?
In short: Our Services are intended for business users aged 18 and over, and we do not knowingly collect personal information from children.
We do not knowingly collect personal information from, solicit personal information from, or market to children under 18 years of age. If we become aware that we have collected personal information from a child under 18, we will take reasonable steps to delete that information unless we are legally required to retain it. If you believe we may have collected personal information from a child under 18, please contact us at hello@nimble-shift.com.
9. What are your privacy rights?
In short: In some regions, such as the United Kingdom, European Economic Area, and Switzerland, you have rights that allow you to access and control certain personal information we hold about you.
In some regions, such as the United Kingdom, European Economic Area, and Switzerland, you have certain rights under applicable data protection laws. Depending on the circumstances, these may include the right to request access to your personal information, obtain a copy of it, ask us to correct inaccurate or incomplete information, ask us to delete your information, restrict or object to certain processing, request portability of your information, and not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
You can exercise these rights by contacting us using the contact details provided in the section ‘HOW CAN YOU CONTACT US ABOUT THIS NOTICE?‘ below. We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority. UK individuals can complain to the Information Commissioner’s Office.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section ‘HOW CAN YOU CONTACT US ABOUT THIS NOTICE?‘ below. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section ‘HOW CAN YOU CONTACT US ABOUT THIS NOTICE?‘ below. You will then be removed from the marketing lists. However, we may still send you non-marketing communications, for example to respond to your enquiries, administer our relationship with you or your organisation, provide requested services, send service-related information, or comply with legal or regulatory obligations.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. For further information, please see our Cookies Policy.
If you have questions or comments about your privacy rights, you may email us at hello@nimble-shift.com.
10. Controls for do-not-track features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (‘DNT’) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
11. Do we make updates to this notice?
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by a ‘Last updated’ date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
12. How can you contact us about this notice?
If you have any questions or comments about this notice, please contact us at hello@nimble-shift.com or by post at:
Beacon Gainer Group Limited (trading as Nimble Shift)
167–169 Great Portland Street
5th Floor
London W1W 5PF
United Kingdom
For UK residents, Nimble Shift is the data controller of your personal information. You can contact us about how we process your information using the details above or via www.nimble-shift.com.
13. How can you review, update, or delete the data we collect from you?
You can exercise your privacy rights by contacting us using the contact details in Section 12. More information about your privacy rights is set out in Section 9 above.