Privacy Policy and Data Protection

The personal data requested from you will be processed in accordance with the rules set out in this Privacy Policy.

1. Data Controller and Mandatory Nature of Data Collection

This privacy notice aims to inform you about the automated processing activities of personal data carried out by SHIFTYOU Lda., a legal entity with corporate and tax identification number 514223960 and registered office at Rua Major Neutel Abreu 13C, 1500-409 Lisbon, hereinafter referred to as SHIFT YOU, regarding the personal data provided, for the purposes described below.

Unless expressly stated otherwise, it is essential that you provide the requested personal data in order to process your registration and provide you with our products and services. If we are unable to collect such personal data, we may be unable to process your registration or provide you with our products and services. Personal data will be used exclusively for the purposes expressly described in clause 2 of this Privacy Policy.

By accepting this Privacy Policy, you guarantee and declare that the personal data you have provided belongs to you and is true, accurate, and up to date. You must inform us immediately of any changes to your personal data, in accordance with the procedure set out in section 3. Data Subject Rights.

2. Legal Basis and Purposes of Data Processing Operations

Your personal data will be processed based on the legal grounds listed below and for the respective purposes described:

2.1. Based on the legal ground “Performance of a contract”, your data will be processed for:

a. Management and activation of your application to become a client, which requires verification of your identity and collection of your contact details.
b. Provision of contracted or freely available products and services, and for the management, maintenance, and control of our relationship with you, including sending communications related to such products and services, handling queries and complaints, dispatching products, and billing for services, where applicable;
c. As part of your membership with SHIFT YOU, and as a result of the contractual relationship established with SHIFT YOU, you will receive communications, which may be sent electronically, regarding discounts, opportunities, negotiated benefits, and relevant information about SHIFT YOU products and services.

2.2. Based on the legal ground “Legitimate interest of the data controller”, your data will be processed for the following purposes:

a. Verifying your identity for fraud prevention purposes;
b. Conducting satisfaction surveys regarding the products and services you access as a client;
c. Allowing us to better understand you as a client, free of charge, including defining preferences you have declared as a user of our services, resulting from the analysis of your use of our products and services, your preferred contact methods, and other aspects related to the development of the contractual relationship. This profiling is not carried out based on automated decision-making and is intended solely to provide you with a personalized service that meets your interests and preferences. Our profiling activities are always conducted in a moderate manner, with a careful balance between your right to privacy and SHIFT YOU’s mission. To this end, SHIFT YOU has implemented mechanisms to protect your rights and prevent potentially abusive activities. You may, at any time, object to this processing through the mechanism established in section 3. Data Subject Rights.

3. Data Subject Rights

When we process your personal data based on your consent, you have the right to withdraw that consent at any time. Under applicable data protection legislation, you may withdraw your consent and exercise your rights of access, rectification, erasure, restriction, objection, and portability by sending us an email to info@shiftyou.pt or a letter addressed to SHIFT YOU, Lda., Rua Major Neutel Abreu 13C, 1500-409 Lisbon.

In order to provide you with access to your personal data and to prevent disclosure to unauthorized third parties, SHIFT YOU may require proof of your identity through the presentation of a valid identification document.

Please also note that withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

To contact us regarding the use of your personal data, you may reach our Data Protection Officer by sending an email to info@shiftyou.pt.

SHIFT YOU ensures your right to be informed, as soon as possible and within legal deadlines, of any security breach that compromises your data.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the National Data Protection Authority.

4. Third Parties

In accordance with the terms described in section 2, SHIFT YOU does not share your data with third parties.

Notwithstanding the above, SHIFT YOU works with certain service providers operating in the following sectors: conventional therapies, non-conventional therapies, legal advisory services, technology service providers, and IT service providers. Within the scope of these outsourced services, such “processors” may have access to your personal data, but they will only process such data on behalf of and in representation of SHIFT YOU, strictly in accordance with SHIFT YOU’s instructions and the contract entered into with such service providers.

SHIFT YOU follows strict criteria in selecting service providers to ensure compliance with its data protection obligations and undertakes to enter into data processing agreements with them, which include, among others, the following obligations: implementing appropriate technical and organizational measures; processing personal data for the agreed purposes and strictly in accordance with SHIFT YOU’s documented instructions; and deleting or returning the data to SHIFT YOU upon completion of the services.

5. Data Retention Period

For the sole purpose of ensuring pre-contractual steps, if the registration process is not completed, your data will be retained for 48 hours after the start of the process, after which it will be removed from any database under SHIFT YOU’s responsibility.

If the registration process is successfully completed, your personal data will be retained for the duration of your contractual relationship with SHIFT YOU. Once this relationship ends, without prejudice to the following paragraph, your personal data will be deleted once all necessary actions to manage and complete any outstanding obligations between the parties have been carried out, including all required administrative procedures.

Your personal data will be stored in a restricted manner to address liabilities arising from the contractual relationship and other legal obligations of SHIFT YOU. In such cases, SHIFT YOU guarantees that it will not process your personal data unless strictly necessary for the establishment, exercise, or defense of legal claims, or when required by Public Authorities, Judges, and Courts, during the applicable limitation periods.

6. Advertisements

Like other websites, we collect and use information contained in advertisements. The information contained in advertisements includes your IP address (Internet Protocol), your ISP (Internet Service Provider, such as Sapo, Clix, or others), the browser you used when visiting our website (such as Edge or Firefox), the time of your visit, and the pages you visited within our website.

7. Cookies and Web Beacons

We use cookies to store information such as your personal preferences when you visit our website. This may include a simple popup or links to various services we provide, such as forums.

In addition, we also use third-party advertising on our website. Some of these advertisers may use technologies such as cookies and/or web beacons when advertising on our website, which will result in these advertisers (such as Google through Google AdSense) also receiving your personal information, such as your IP address, your ISP, your browser, etc. This function is generally used for geotargeting (for example, showing Lisbon-based advertisements only to readers from Lisbon) or presenting advertising directed to a specific type of user (such as showing restaurant advertisements to a user who regularly visits cooking websites).

You have the power to disable cookies through your browser settings or by making changes in Anti-Virus software tools, such as Norton Internet Security. However, this may affect how you interact with our website or other websites. This may affect or prevent you from logging into programs, websites, or forums from our and other networks.

8. Links to Third-Party Websites

The SHIFT YOU website contains links to other websites which, in our view, may contain useful information/tools for our visitors. Our Privacy Policy does not apply to third-party websites, and therefore, if you visit another website from ours, you should read its privacy policy.

We are not responsible for the privacy policy or content present on those websites.

9. Changes to the Privacy Policy

SHIFT YOU reserves the right to amend this Privacy Policy at any time. In the event of modification, the date of the latest update, available at the bottom of this page, will also be updated. If the change is substantial, a notice will be posted on the Website.

10. Applicable Law and Jurisdiction

This Privacy Policy, as well as the collection, processing, and transmission of User Data, is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and by the applicable legislation and regulations in Portugal.

Any disputes arising from the validity, interpretation, or enforcement of this Privacy Policy, or related to the collection, processing, or transmission of User Data, shall be submitted exclusively to the jurisdiction of the judicial courts of the Lisbon district, without prejudice to applicable mandatory legal provisions.

Last updated: 04/05/2026