Privacy Policy

Introduction

cloudshift Ltd ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our cloud migration platform and services.

As a company registered in Ireland (Registration Number: 582947), we comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws in the European Union.

Data Controller Information

cloudshift Ltd acts as the data controller for the personal data we process. Our contact details are:

Data We Collect

The data we collect depends on how you interact with our services. We collect and process the following categories of personal data:

Contact and Account Information

• Name, email address, phone number
• Company name and job title
• Billing and invoicing information
• Account credentials and authentication data

Technical and Usage Data

• IP address, browser type, and device information
• Platform usage patterns and performance metrics
• Log files and system access records
• Migration project data and configurations

Communication Data

• Messages sent through our contact forms
• Support tickets and correspondence
• Marketing preferences and consent records

How We Use Your Information

We process your personal data for the following purposes, based on legitimate legal grounds under GDPR:

Service Provision (Contract Performance)

• Providing cloud migration services and platform access
• Managing your account and processing payments
• Delivering technical support and customer service
• Monitoring system performance and security

Legal Compliance

• Meeting regulatory and compliance requirements
• Maintaining audit trails and security logs
• Responding to legal requests and investigations

Legitimate Business Interests

• Improving our services and platform functionality
• Conducting business analytics and research
• Protecting against fraud and security threats
• Marketing our services (with your consent where required)

Data Sharing and Transfers

We do not sell your personal data to third parties. We may share your data with:

• Service Providers: Trusted partners who help us deliver our services (cloud infrastructure, payment processing, analytics)
• Legal Authorities: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All data transfers outside the European Economic Area are protected by appropriate safeguards, including Standard Contractual Clauses or adequacy decisions.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Account Data: Retained during the active period of your account and for 7 years after closure for legal and tax purposes
• Technical Logs: Retained for 12 months for security and performance monitoring
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Support Records: Retained for 3 years for quality assurance and training purposes

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for specific processing activities

To exercise these rights, contact us at privacy@cloudshift.world. We will respond within one month of receiving your request.

Security Measures

We implement comprehensive technical and organisational measures to protect your personal data:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• ISO 27001 certified information security management
• Staff training on data protection and security practices
• Incident response procedures and breach notification protocols

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your experience and analyse usage patterns. For detailed information about our use of cookies, please refer to our Cookie Policy.

You can control cookie settings through your browser preferences or our cookie consent banner.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through our platform. The latest version will always be available on our website with the updated date clearly indicated.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data appropriately.