top of page

Privacy Policy

Last updated: [09.04.2026]

Identity Shift (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data with the highest level of confidentiality, discretion, and security. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

 

1. Data Controller

The data controller responsible for your personal data is:
Identity Shift OÜ
[Insert registered address if applicable]
Email: info@identityshift.eu

 

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification data (name, date of birth, nationality)

  • Contact information (email address, phone number)

  • Application and profile data (responses provided in forms, preferences, personal goals)

  • Health and psychological information (only where voluntarily provided and necessary for the experience)

  • Communication data (emails, messages, consultation notes)

We collect data directly from you through forms, correspondence, or consultations.

 

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent (Article 6(1)(a) GDPR) – for application data and sensitive personal information

  • Contractual necessity (Article 6(1)(b)) – to provide the requested services

  • Legitimate interest (Article 6(1)(f)) – to manage and improve our services

  • Explicit consent for special category data (Article 9(2)(a)) – where psychological or health-related information is involved

You may withdraw your consent at any time without affecting the lawfulness of prior processing.

 

4. Purpose of Processing

Your personal data is processed solely for the following purposes:

  • Evaluating your application and suitability

  • Designing and delivering your personalized experience

  • Ensuring your safety, well-being, and appropriate experience design

  • Communicating with you before, during, and after the experience

  • Complying with legal obligations

We do not sell, rent, or share your personal data for marketing purposes.

 

5. Confidentiality and Discretion

All personal data and experience-related information are treated as strictly confidential. Due to the nature of our services, we apply enhanced discretion protocols. Your identity, participation, and experience details will not be disclosed to any third party without your explicit consent, unless required by law.

 

6. Data Sharing

We may share your data only with:

  • Internal team members directly involved in your experience

  • Trusted service providers (e.g. logistics, accommodation) strictly on a need-to-know basis

  • Legal or regulatory authorities when required by law

All third parties are contractually bound to confidentiality and data protection obligations.

 

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Restricted access to sensitive information

  • Secure data storage systems

  • Confidential handling procedures for all client-related data

 

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. You may request deletion of your personal data at any time, subject to legal retention requirements.

 

9. Your Rights Under GDPR

You have the right to:

  • Access your personal data (Article 15)

  • Rectify inaccurate data (Article 16)

  • Request erasure (“right to be forgotten”) (Article 17)

  • Restrict processing (Article 18)

  • Data portability (Article 20)

  • Object to processing (Article 21)

  • Withdraw consent at any time

 

To exercise your rights, contact us at: info@identityshift.eu

 

10. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

 

11. Cookies and Tracking

If applicable, our website may use cookies or similar technologies for functionality and analytics. You can manage your preferences through your browser settings.

 

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Updates will be posted on this page with the revised date.

 

13. Contact & Complaints

If you have concerns about how your data is handled, you may contact us at: info@identityshift.eu

You also have the right to lodge a complaint with your local data protection authority.

bottom of page