Privacy Policy

Career Shift is operated by Evgenii Chak, sole trader, based in Portugal. We act as the data controller for personal data we collect.

For any privacy-related questions, contact us at: info@career-shift.uk

We collect the following categories of personal data:

Information you provide directly:

• Email address (when you join our waitlist or create an account)
• Survey answers about your career situation, experience, motivation, and preferences
• Career profile data including skills, work history, and goals
• Communications you send to us

Information collected automatically:

• Technical data: IP address, browser type, device type, operating system, time zone
• Usage data: pages viewed, time spent, links clicked, referral source
• Approximate location based on IP address (country/city level only)
• Cookie identifiers (see our Cookie Policy)

Information we may collect in the future:

• Payment information (processed by our payment provider — we do not store card details)
• Career assessment results generated by our AI-powered system

Under UK GDPR, we process your personal data on the following lawful bases:

Consent (Article 6(1)(a)): for marketing communications, optional analytics cookies, and the soft-ask survey questions where participation is voluntary.

Contract (Article 6(1)(b)): to provide the services you requested, including delivering your career plan and account access.

Legitimate interests (Article 6(1)(f)): to improve our service, prevent fraud, ensure security, and conduct internal analytics. We balance our interests against your privacy rights and you have the right to object.

Legal obligation (Article 6(1)(c)): to comply with applicable laws, including tax and consumer protection requirements.

We use your personal data to:

• Provide and operate the Career Shift service
• Generate personalised career recommendations and roadmaps
• Send you account-related emails (registration confirmation, sign-in codes, service updates)
• Send you marketing emails about Career Shift (only with your consent — you can unsubscribe at any time)
• Improve our product through analytics and user research
• Respond to your questions and provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal data. We share it only with the following categories of third parties:

Service providers who help us operate the service:

• Hosting and infrastructure providers
• Email delivery services (for transactional and marketing emails)
• Analytics services (Google Analytics, Amplitude) — anonymised where possible
• Advertising platforms (Meta, Google) — for measuring ad performance via pixels and conversion tracking
• AI service providers (such as OpenAI, Anthropic) — used to generate personalised content. We do not send identifiable personal data to AI providers beyond what's necessary for the requested output
• Payment processors (such as Lava.top, Stripe) when payment functionality is enabled

Legal and regulatory authorities: when required by law, court order, or to protect our legal rights.

Business transfers: if Career Shift is involved in a merger, acquisition, or sale of assets, your data may be transferred. You will be notified before this happens.

All our service providers are bound by data processing agreements and may only use your data for the purposes we instruct.

Some of our service providers are based outside the UK and EEA, including in the United States. When we transfer your data internationally, we use appropriate safeguards required by UK GDPR, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or the European Commission.

We retain your data only as long as necessary:

• Waitlist emails: until you unsubscribe or for up to 24 months from your last interaction
• Account data: for as long as you have an active account, plus 12 months after deletion request
• Survey responses: for up to 36 months for product analytics (anonymised after 12 months where possible)
• Payment records: 7 years (required by UK and EU tax law)
• Marketing data: until you withdraw consent
• Technical logs: up to 12 months

After these periods, we delete or anonymise your data.

Under UK GDPR, you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restriction: limit how we process your data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to processing based on legitimate interests or for marketing
• Right to withdraw consent: at any time, where processing is based on consent
• Rights related to automated decision-making: request human review of significant automated decisions

To exercise any of these rights, email info@career-shift.uk. We will respond within one month.

We send marketing emails only with your explicit consent. Every marketing email contains an unsubscribe link. You can also withdraw consent by emailing info@career-shift.uk.

Account-related emails (sign-in codes, service updates, security alerts) are not marketing and you cannot opt out of them while you have an active account.

We use cookies and similar technologies to operate our service, analyse usage, and (with your consent) measure advertising performance. For full details, see our Cookie Policy.

We implement reasonable technical and organisational measures to protect your data, including HTTPS encryption for data in transit, access controls limiting who can access personal data, regular security reviews, and secure third-party providers compliant with industry standards.

No system is completely secure. If we become aware of a data breach affecting your rights, we will notify you and the ICO as required by law (within 72 hours where applicable).

Career Shift is not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected data from someone under 18, contact us and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated via email or prominent notice on our website at least 30 days before they take effect.

If you have concerns about how we handle your data, please contact us first at info@career-shift.uk— we'll do our best to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

For any privacy-related questions or to exercise your rights:

Email: info@career-shift.uk

Data Controller: Evgenii Chak (sole trader), Portugal

Service: Career Shift — career-shift.uk