Privacy notice

Effective date: 7 November 2026.

Who is responsible

HuBelor Limited is responsible for the personal information described in this notice. We are registered in England and Wales under number 17497104, at Hallmark House, 25 Downham Road, Ramsden Heath, Billericay, CM11 1PU, United Kingdom. Contact us through the HuBelor contact form or by post, and say that your request concerns privacy.

This notice covers our company website and common business activities across our products. Each product's privacy information explains its particular data, suppliers, retention and features. Read that information alongside this notice. We do not combine private information across products simply because they share HuBelor ownership or a payment account.

We act as controller when deciding how to use account, billing, support and security information for our own purposes. Where a business customer instructs us to process personal information on its behalf, the relevant agreement and data-processing terms describe our processor role. That customer's own privacy notice explains its purposes.

Information we use

Depending on the product and your interaction with us, information can include your name and contact details; account and organisation details; sign-in and permissions records; order, subscription, invoice and payment references; messages and attachments you send us; product-use records; and technical information such as IP addresses, browser details and security logs.

We receive information from you, people authorised to administer your organisation, payment and sign-in providers, and the public or licensed sources described by the relevant product. Business-information products may use public company records, including information relating to people where those records contain it. The product notice explains which sources and fields it actually uses.

Providing essential account and order details may be necessary to supply what you request. If you do not provide them, we may be unable to open the account, complete the order or respond. Optional fields and choices are identified where collected.

Do not send passwords, full card details or unnecessary sensitive information through support forms. A product relating to health does not automatically mean that we collect health records. Any feature collecting special-category information needs specific privacy information and an applicable legal condition before collection.

Why we use information

• Orders, accounts and support: to take steps you request before a contract and perform our contract with you. For an organisation's staff contacts, our legitimate interest is administering and supporting that business relationship.
• Payments and records: to administer purchases and meet tax, accounting and other legal obligations.
• Security and service operation: our legitimate interests in protecting customers, preventing misuse, maintaining reliable services and investigating faults.
• Enquiries and disputes: our legitimate interests in responding to requests and establishing, exercising or defending legal claims.
• Optional analytics and marketing: consent where required, or another applicable lawful basis explained at collection. Refusing optional tracking does not remove access to essential services. You can withdraw consent or unsubscribe through the relevant controls.

Where we rely on legitimate interests, we consider your rights and reasonable expectations. Product-specific processing, such as public-record monitoring, is explained in the relevant product notice.

Payments and recipients

For direct Stripe payments, Stripe collects payment credentials through its payment interface. We receive payment status, references and billing information needed to fulfil and administer the order, rather than full card numbers. Stripe may act as an independent controller for some activities, including its legal and fraud-prevention responsibilities. See Stripe's privacy policy. Where a checkout identifies a merchant of record, its own notice explains the sale information it handles.

We share relevant information with providers needed for the particular service, such as hosting and email providers, payment processors, optional sign-in or analytics services. Current products use 20i for hosting/email and Stripe for payments; Google features are used only where offered and described by the relevant product. We may share necessary information with professional advisers, authorities where legally required, and parties involved in a business transfer subject to appropriate safeguards.

Your organisation's administrators may see information needed to manage its account. Reseller access, where applicable, is explained by the product and is not permission to access all customer content. We do not sell personal information.

International processing and security

Some suppliers operate outside the UK. When a restricted international transfer is necessary, we use a legally recognised transfer route, such as an applicable adequacy regulation or approved contractual safeguards, with additional measures where required. You can ask us which safeguards apply to your product and how to obtain relevant details.

We use technical and organisational measures appropriate to the information and service, including access controls and secure connections. No system is entirely risk-free. Product security features and reporting routes are described separately where relevant.

How long information is kept

We retain information for its stated purpose, taking account of account activity, support needs, legal duties, disputes and the time required to remove copies from backups. Retention is not identical across products. Their notices provide specific periods or criteria.

• Account and service content is kept while needed to supply the product, then deleted or anonymised according to that product's closure and retention arrangements.
• Order and accounting records are normally retained for six years from the relevant financial-year end, or longer where a specific legal requirement or dispute requires it.
• Support correspondence is kept for the time needed to resolve the enquiry and related issues; product notices specify any fixed period.
• Security logs, analytics and backups follow defined schedules appropriate to their purpose. Deleting an account does not necessarily erase legally required records or every backup immediately.

Cookies and optional features

Cookie use varies by website. Essential technologies support features such as sign-in and checkout. Where optional analytics or other non-essential technologies require consent, the site asks before using them and provides a way to change your choice. The relevant cookie notice or settings explain providers, purposes and duration. This notice does not claim that every HuBelor product uses analytics.

Your rights and complaints

Depending on the circumstances, you may ask to access, correct, erase or restrict your information, receive portable data, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. Some rights have exceptions, including records we must legally retain.

Use our contact form or write to us, identifying the product and request. We may need proportionate information to verify identity. We normally respond within one month; if the law permits an extension, we will explain why and when to expect a response.

You can complain to the Information Commissioner's Office. We would also welcome the opportunity to address your concern directly.

Product notices explain any profiling or solely automated decisions that have legal or similarly significant effects, including relevant safeguards. Ordinary automated billing or company alerts should not be assumed to make such decisions about you.

Changes

We will keep this notice up to date and identify its publication date. Where a change materially affects how we use your information, we will provide appropriate notice and obtain any consent required before the new use starts.