Privacy Policy

How Sovereign Shift collects, uses, and protects your personal data. No cookies, no tracking, GDPR compliant.

Last updated: 22 May 2026

Sovereign Shift (“we”, “us”, “our”) operates the website sovereignshift.eu. We take privacy seriously and are committed to protecting the personal data of everyone who visits our website or engages with our services.

This policy explains what data we collect, why we collect it, how we process it, and what rights you have.

1. Data controller

Sovereign Shift Utrecht, The Netherlands Email: hello@sovereignshift.eu

2. What data we collect

When you visit our website, we do not collect any personal data. We do not use cookies, tracking pixels, fingerprinting, or analytics services that identify individual visitors.

When you submit our contact form, we collect:

  • Your name
  • Your work email address
  • Your company name (optional)
  • Your message

When you subscribe to our newsletter, we collect your email address.

When you email us directly, we collect whatever information you choose to include in your message.

We process the data you submit through our contact form or by email on the basis of legitimate interest (Article 6(1)(f) GDPR): to respond to your enquiry and, where relevant, to discuss whether our services are a good fit for your organisation.

We process your email address for newsletter delivery on the basis of consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by clicking the unsubscribe link in any newsletter or by emailing us.

4. How we process it

Contact form submissions are handled by Formspark (Formspark SRL, Belgium), a European form backend service. Formspark stores submission data within the EU. Their privacy policy is available at formspark.io/legal/privacy-policy.

Form submissions are protected by Cloudflare Turnstile, a privacy-preserving security service that verifies visitors without using cookies and without collecting personal data. Cloudflare’s privacy policy is available at cloudflare.com/privacypolicy.

Newsletter subscriptions are managed by Brevo (Brevo SAS, France), a European email marketing service. Brevo stores subscriber data within the EU. Their privacy policy is available at brevo.com/legal/privacypolicy.

Our website is hosted on infrastructure provided by Hetzner Online GmbH in the EU. Their privacy information is available at hetzner.com/legal/privacy-policy.

5. Who we share data with

We do not sell, rent, trade, or otherwise share your personal data with any third party for their own purposes.

Your data is only accessible to the sub-processors listed above, strictly for the purpose of delivering the services described.

6. International transfers

We do not transfer your personal data outside the European Economic Area (EEA). All data processing, storage, and hosting takes place within the EU.

7. How long we keep it

We retain contact form submissions and email correspondence for a maximum of 12 months after the last interaction, unless a client engagement follows. For clients, we retain project-related correspondence for the duration of the engagement plus 24 months.

Newsletter subscriber email addresses are retained until you unsubscribe. Upon unsubscription, your email address is removed from our mailing list within 30 days.

You can request deletion at any time.

8. Cookies and tracking

We do not set any cookies. We do not use any analytics, tracking, or advertising technologies. There is no cookie banner on this website because none is needed.

9. Your rights under the GDPR

Under the General Data Protection Regulation, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”)
  • Restrict processing of your data
  • Object to processing based on legitimate interest
  • Data portability (receive your data in a structured, machine-readable format)
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, email us at hello@sovereignshift.eu. We will respond within 30 days.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect the most recent revision. We will not reduce your rights under this policy without notifying you.

11. Contact

For any questions about this privacy policy or how we handle your data:

Email: hello@sovereignshift.eu