Privacy notice.

Who we are

Shift & Syntax is the trading name of a UK-based sole trader business. The sole trader trading as Shift & Syntax is the data controller for personal data collected through this website.

You can contact us about privacy, or anything in this notice, at hello@shiftsyntax.com. The owner’s name and a postal address are available on request by email.

The enquiry form

When you send an enquiry, we collect your name, email address and message, plus any business name, website or Website Machine design brief you choose to include, so we can reply and discuss your project. Our lawful basis is taking steps at your request before entering into a contract, and legitimate interests in replying to business enquiries.

Each enquiry is saved in a database hosted by Cloudflare and a copy is emailed to our business mailbox. The database copy is deleted automatically after 90 days. We delete enquiries that do not lead to work within 12 months of our last contact. If we work together, we keep client records, including correspondence and invoices, for 6 years after the end of the tax year they relate to, to meet our tax and accounting obligations, and then delete them.

We will not add you to a mailing list or share your details for marketing.

Security checks

To prevent spam and abuse, the form uses Cloudflare Turnstile, which processes technical information about your browser and connection. We also apply rate limits using a one-way hashed form of your IP address, which is deleted after about two days.

Emailing us

If you email hello@shiftsyntax.com instead, we use what you send only to reply, and keep it for the same periods as form enquiries. Please avoid sending sensitive personal information.

Cookies and analytics

This website does not set cookies. We use Cloudflare Web Analytics, a privacy-focused, cookie-free service that counts page views and basic technical details, such as browser, country and referring site, without using cookies or tracking you across other websites. We use it only to understand how this site is used.

Interactive demonstrations

The Website Machine, sample case studies, integration canvas and games use fictional data and run in your browser. If you choose to share a generated concept link, the link may include the design settings you selected. The demos do not send payments, appointments or messages.

Who processes data for us

The website is hosted by Cloudflare, which processes technical data such as IP addresses to deliver and protect the site, stores form enquiries, runs the Turnstile security check and Web Analytics, and routes and delivers our email (Cloudflare Email Routing). Our mailbox is provided by Zoho Mail. Some of these providers may process data outside the UK under appropriate safeguards.

Your rights

You have the right to access, correct or delete your personal data, to object to or restrict its use, and to data portability. To make a request, contact us using the details above. You can also complain to the Information Commissioner’s Office at ico.org.uk.