Last updated 24 August 2026. How we handle your data on ShiftBuddy.
ShiftBuddy is operated by Ross & Sons Digital. We are the data controller for the information you share in the app. ShiftBuddy is an independent community platform and is not affiliated with, endorsed by, or operated by any public health body, hospital or employer.
Account details (name, email, date of birth, password); profile details you choose to add (role, department, trust, base site, bio, avatar and cover photos); shift preferences; content you post; messages, blocks, mutes and reports; verification data if you opt into photo ID checks; and technical data such as device and notification tokens.
To create and secure your account, confirm you are 18 or over, show your profile and posts to other members according to your privacy settings, deliver shift and service alerts you have asked for, keep the community safe through moderation, and improve the service.
Date of birth is required to confirm you are 18+. Photo ID verification is optional and only used to award the Verified badge. Verification documents are stored securely, restricted to verification staff, and are not shown to other members or used for advertising.
You choose who can see your role, department, trust, avatar, bio and daily status: everyone, verified members, connections, or only you. Sensitive fields such as your date of birth and verification documents are never visible to other members.
Advertising in the video feed is only personalised if you consent. Where UK and EEA rules apply, we ask for consent before any personalised ad is loaded, and you can withdraw it at any time. We never share verification data or private messages with advertisers.
Data is stored on secure, encrypted infrastructure. We share data with service providers who host the app, deliver notifications and serve advertising, under contract. We keep your data while your account is open, then delete or anonymise it, except where we must keep records for safety or legal reasons.
Under UK GDPR you can access, correct, delete, restrict or port your data, object to processing, and withdraw consent. Use account settings to update or delete most data, or contact us at rossandsonsdigital@gmail.com. You can also complain to the Information Commissioner's Office (ico.org.uk).
See also our terms and conditions.