Privacy Policy

1 Who We Are

NextShift Digital is a digital marketing consultancy operated by Jhun Tupaz, based in the Philippines. We primarily serve clients in Australia and New Zealand, as well as clients worldwide.

This policy applies to all personal information collected through our website, booking forms, email communications, and service delivery.

We comply with the applicable privacy laws in all jurisdictions where we operate and serve clients.

2 Information We Collect

We collect personal information when you interact with our website and services. This includes:

Information you provide directly:

• Contact details — First name, last name, email address, phone number, business name, industry, primary business goal, and marketing challenge collected via our pre-booking form
• Business information — Details about your business shared during discovery calls and service delivery
• Communications — Emails, messages, and notes from our interactions with you
• Marketing consent — Whether you have opted in to receive marketing communications from us

Information collected automatically:

• reCAPTCHA data — Google reCAPTCHA v3 collects browser and interaction data to assess bot risk. This is subject to Google's Privacy Policy
• Website analytics — We may collect anonymised data about page visits and interactions to improve our website

3 How We Use Your Information

We use the personal information we collect for the following purposes:

• To confirm and manage your discovery call booking
• To communicate with you about your enquiry and our services
• To deliver the services you have engaged us for
• To send you appointment reminders, confirmations, and Zoom meeting links
• To send marketing communications if you have given consent (you can opt out at any time)
• To improve our website and service experience
• To comply with legal obligations

We will never sell your personal information to third parties. We do not use your data for any purpose beyond what is described in this policy without your explicit consent.

4 Third-Party Services We Use

In delivering our services, we use the following third-party platforms that may process your personal data:

• GoHighLevel (GHL) — Our CRM and marketing platform. Your contact details and booking information are stored in GHL. Privacy policy: gohighlevel.com/privacy
• Zoom — Used for video calls. Your name and email may be used to generate meeting invitations. Privacy policy: zoom.us/privacy
• Google reCAPTCHA — Used on our booking form to prevent spam. Subject to Google's Privacy Policy: policies.google.com/privacy
• Google Workspace — Used for internal email and document management

Each third-party service has its own privacy policy. We encourage you to review them if you have concerns about how they handle your data.

5 Data Retention

We retain your personal information for as long as is necessary to deliver our services and meet our legal obligations:

• Active clients — For the duration of the engagement plus 7 years (for financial and legal compliance)
• Enquiries that did not proceed — Up to 2 years from the date of initial contact
• Marketing subscribers — Until you unsubscribe or request deletion

After the applicable retention period, your personal data is securely deleted or anonymised.

6 Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Right to access — Request a copy of the personal information we hold about you
• Right to correction — Request that we correct inaccurate or incomplete information
• Right to deletion — Request that we delete your personal information (subject to legal obligations)
• Right to opt out — Unsubscribe from marketing communications at any time using the unsubscribe link in any email, or by contacting us directly
• Right to data portability — Request your data in a commonly used, machine-readable format
• Right to complain — Lodge a complaint with the relevant privacy authority in your jurisdiction

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Australian clients may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. New Zealand clients may contact the Office of the Privacy Commissioner at privacy.org.nz.

7 Security

We take reasonable steps to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Using reputable, secure third-party platforms (GHL, Google, Zoom) with their own robust security measures
• Limiting access to your personal data to only those who need it to deliver services
• Using encrypted communication channels (HTTPS) for all web-based interactions
• Google reCAPTCHA protection on our web forms to prevent automated spam submissions

No method of internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8 Cookies

Our website may use cookies and similar tracking technologies for the following purposes:

• Essential functionality — to make the website work correctly
• Analytics — to understand how visitors use our site (anonymised data only)
• reCAPTCHA — Google's bot detection service uses cookies to function

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

9 Children's Privacy

Our services are intended for business owners and professionals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will delete it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated version will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.