GDPR & CCPA

Millennial Shift Technologies, LLC (“mShift,” “Company,” “we,” “us,” or “our”) respects your privacy rights. This page explains your rights under the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and similar applicable privacy laws.

This notice supplements our Privacy Policy.

1. GDPR & UK GDPR Rights (European Economic Area & United Kingdom)

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, you may have the following rights under applicable data protection laws:

Right to Access

You may request confirmation of whether we process your personal data and request access to the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your personal data, subject to certain legal exceptions.

Right to Restrict Processing

You may request that we restrict how we process your personal data under certain circumstances.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests, including direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority.

Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

• Performance of a contract
• Legitimate business interests
• Legal obligations
• Your consent

2. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights:

Right to Know

You have the right to request:

• The categories of personal information we collect
• The categories of sources from which information is collected
• The business or commercial purpose for collecting, selling, or sharing personal information
• The categories of third parties with whom we share information
• The specific pieces of personal information we hold about you

Right to Delete

You may request that we delete personal information we have collected about you, subject to certain legal exceptions.

Right to Correct

You may request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing

California residents have the right to opt out of the “sale” or “sharing” of personal information as defined under California law.

Millennial Shift Technologies, LLC does not sell personal information in the traditional sense. If our use of cookies or advertising technologies qualifies as “sharing” under California law, you may exercise your opt-out rights as described below.

Right to Limit Use of Sensitive Personal Information

If we collect sensitive personal information as defined by California law, you may have the right to limit its use.

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

3. Categories of Personal Information We Collect

In the past 12 months, we may have collected the following categories of personal information:

• Identifiers (name, email address, phone number, IP address)
• Commercial information (services requested or purchased)
• Internet or network activity (website usage data)
• Professional or employment-related information (company name, job title)
• Inferences drawn from usage data

We collect this information for business purposes including operating our services, communicating with users, marketing, analytics, security, and legal compliance.

4. How to Exercise Your Rights

To exercise any applicable privacy rights, please contact us:

Millennial Shift Technologies, LLC
2801 East Camelback Road
Suite 200
Phoenix, Arizona 85016

You may also contact us through our website contact form.

Please include:

• Your full name
• Email address
• State or country of residence
• The specific right you wish to exercise

We may need to verify your identity before processing your request.

Authorized agents may submit requests on your behalf where permitted by law.

5. Data Retention

We retain personal information only as long as reasonably necessary for:

• Providing services
• Legal compliance
• Resolving disputes
• Enforcing agreements

Retention periods vary depending on the nature of the data.

6. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States. Where required, we implement appropriate safeguards for cross-border data transfers.

7. Updates to This Notice

We may update this GDPR & CCPA Notice from time to time. Updates will be reflected by revising the “Last Updated” date above.