Legal
Privacy Policy
Last updated 17 September 2026
This policy explains what personal information Shadow One collects, why, what we do with it, and the choices and rights you have. It covers our website, the Shadow One platform, and the Shadow One Link extension for Google Chrome.
Who we are
Shadow One is operated by Shadow One Tech Labs Limited, a company registered in England and Wales (company number 16592666), whose registered office is 1st Floor, 314 Regents Park Road, London, England, N3 2LT. In this policy, “Shadow One”, “we”, “us” and “our” mean Shadow One Tech Labs Limited.
For information about people who visit our website, request early access, or hold a Shadow One account, we are the controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Recruitment businesses use Shadow One to manage information about their candidates, clients and contacts. For that information the recruitment business is the controller, and we process it on their behalf as a processor, under our agreement with them. If you are a candidate or contact of one of our customers, please contact that business about your information; we will help them respond.
What this policy covers
- The website at shadow.one, including the early-access and investor forms.
- The Shadow One platform, for people who are given an account by their organisation.
- The Shadow One Link extension for Google Chrome, which connects LinkedIn to your Shadow One account.
Information we collect
When you use our website
If you request early access, we collect the details you enter: your name, company, email address, the number of users and placement type you tell us about, and any note you add. If you request our investor deck, we collect your name, email address, firm, any note you add, and your acknowledgement of the information shown with the request.
Our website does not use advertising or analytics cookies. Our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, to run the site securely.
When you use the Shadow One platform
- Account information: your name, work email address, job title, profile photo, phone number allocated to you, time zone and working hours.
- Connected accounts: if you connect your email and calendar or your LinkedIn account, the messages, events and connection details needed to show them in Shadow One. We never see your passwords.
- Content you add: notes, emails, call records and other information you or your organisation add about candidates, clients and contacts.
- Usage and device information: log data such as IP address, browser, and the actions taken in the platform, used to keep it secure and working.
The Shadow One Link Chrome extension
Shadow One Link connects your LinkedIn account to your organisation’s Shadow One workspace. The connection is provided through a specialist integration partner that acts on our behalf and under our instructions.
What we process
- The information needed to connect your LinkedIn account to Shadow One and keep it connected.
- LinkedIn information available through your connected account that you use in Shadow One, such as the profiles of people you add as candidates or contacts, your connections, and your messages with people in your Shadow One workspace.
How that information is used
This information is used only to provide the Shadow One features you use, such as creating and updating candidate and contact records and showing your conversations in their communication feed. It is visible to you and, where you or your organisation choose, to your colleagues. You can disconnect LinkedIn in your Shadow One settings, or remove the extension from Chrome, at any time.
Chrome Web Store Limited Use
Shadow One’s use of information received through the Shadow One Link extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular, we:
- use this information only to provide and improve the extension’s purpose of connecting your LinkedIn account to Shadow One;
- do not sell it or transfer it to third parties, except as needed to provide the service, to comply with the law, or as part of a merger or acquisition;
- do not use or transfer it for advertising, or to determine creditworthiness or for lending;
- do not allow people to read it, except with your consent, for security purposes, to comply with the law, or where it is aggregated and anonymised for internal operations.
You can stop the extension at any time by signing out of it or removing it from Chrome.
How we use information
- To provide, maintain and secure the Shadow One platform and extension.
- To create and manage accounts, and to connect the email, calendar and LinkedIn accounts you choose to connect.
- To respond to early-access and investor requests, and to contact you about them.
- To provide support, and to send service messages such as security or account notices.
- To understand how the platform is used, fix problems and improve it.
- To comply with our legal obligations and enforce our agreements.
We do not sell personal information, and we do not use it for third-party advertising.
Our legal bases
- Contract: to provide the platform and extension to our customers and their users.
- Legitimate interests: to run, secure and improve our services, and to respond to people who contact us, where those interests are not overridden by your rights.
- Consent: where we ask for it, for example to connect an account; you can withdraw consent at any time.
- Legal obligation: where the law requires us to keep or disclose information.
Where we process information for a recruitment business, that business decides the legal basis.
International transfers
Some of our service providers are located outside the UK. Where personal information is transferred outside the UK, we make sure it is protected, for example through UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
How long we keep information
- Early-access and investor requests: for up to 24 months after our last contact, unless we go on to work together.
- Account and platform information: for as long as your organisation’s agreement with us lasts, then deleted or returned as that agreement sets out.
- LinkedIn connection information: until you disconnect LinkedIn or remove the extension.
- Logs and backups: for a limited period, after which they are deleted in the normal course.
We may keep information for longer where the law requires it.
Security
We use technical and organisational measures to protect personal information, including encryption in transit, access controls, and limiting access to people who need it. No system is completely secure, so please contact us straight away if you think your account has been compromised.
Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have information deleted, or its use restricted, in some circumstances;
- object to our use of your information, including for direct marketing;
- receive your information in a portable format, in some circumstances;
- withdraw consent, where we rely on it.
To use any of these rights, email support@shadow.one. We will respond within one month. If your information is held by a recruitment business that uses Shadow One, we will pass your request to them. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Children
Our services are for businesses and are not directed at children under 16. We do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date and, where the changes are significant, let you know by other means.
Contact us
Shadow One Tech Labs Limited
1st Floor, 314 Regents Park Road, London, England, N3 2LT
support@shadow.one