Privacy Policy

Last updated: February 12, 2026

Hub 9 Group Limited (“we”, “us”, “our”, “the Studio”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, transfer, store, retain and protect the personal information you provide to us or that we collect about you when you visit our website located at www.hub9.co.uk (the “Site”), contact us, submit inquiries, view our portfolio, sign up for updates, or engage our creative services.

By using the Site or providing us with any personal data, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or provide us with personal data.

1. Who We Are (Data Controller / Business)

Hub 9 Group Limited, The Studio at The Hyde, Woodcock Hill, St Albans, Hertfordshire
AL4 9HJ. Email: info@hub9.co.uk Phone: +44 (0) 20 8940 8803.

We act as the data controller (GDPR) / business (CCPA/CPRA and similar U.S. state laws) for the personal data we process as described here.

2. Information We Collect

We collect the following types of information:

Information you provide directly

  • Contact & inquiry data: name, email address, phone number, company name, project description, budget range, timeline (via contact forms, email, proposal requests, or client intake forms).
  • Newsletter / updates subscription: name and email address.
  • Any other information you voluntarily provide (e.g., in messages, attachments, or during calls/meetings).

Information we collect automatically

  • Device & usage data: IP address, browser type & version, operating system, device identifiers, pages viewed, time spent on pages, referring/exit pages, date/time stamps.
  • Interaction with portfolio & Site: which projects viewed, clicks on case studies, time on page.
  • Cookies & similar technologies (see Section 7 below).

Information from third parties

  • Analytics providers (e.g., Google Analytics).
  • If applicable: social media platforms (if you interact with our social embeds or log in via social login — rare for agency sites).

We do not intentionally collect sensitive personal data (health, race, religion, biometrics, etc.) or data about children under 16. If you are under 16 (or the relevant age in your jurisdiction), do not provide any personal data.

3. How We Use Your Information

We use personal data for the following purposes:

  • To respond to inquiries, send proposals, quotes, estimates, or project-related communications.
  • To provide, maintain, and improve our Site and services (e.g., analytics to understand how visitors use our portfolio).
  • To send marketing communications, newsletters, or updates about our work (only if you opt in or where permitted by law).
  • To operate, protect, and secure the Site (fraud prevention, debugging, security).
  • To comply with legal obligations, resolve disputes, enforce agreements.
  • For our legitimate interests (where applicable under GDPR): showcasing work in portfolio (anonymized where possible), improving Site experience, direct marketing (with opt-out).

4. Legal Basis for Processing (GDPR / UK GDPR)

Where we process personal data under GDPR/UK GDPR, the legal bases are:

  • Contract — processing inquiries and pre-contractual steps (proposals).
  • Legitimate interests — Site operation, analytics, security, portfolio display (balanced against your rights).
  • Consent — marketing emails/newsletters (you can withdraw consent anytime).
  • Legal obligation — compliance with law.

5. Sharing Your Information

We share personal data only in these limited circumstances:

  • With service providers / processors (e.g., hosting providers, email service like Mailchimp, analytics like Google Analytics, form tools, cloud storage) — bound by data protection agreements.
  • With professional advisors (lawyers, accountants) when necessary.
  • If required by law, court order, or public authority.
  • In connection with a merger, acquisition, or sale of assets (with notice where required).

We do not sell personal information as defined under CCPA/CPRA or similar U.S. state laws (2026 definitions).

6. International Data Transfers

If we transfer personal data outside the EEA/UK (e.g., to U.S.-based providers), we use appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission / UK ICO.
  • Adequacy decisions where applicable.
  • Other mechanisms permitted under applicable law.

7. Cookies & Tracking Technologies

We use cookies and similar technologies (pixels, web beacons) for functionality, analytics, and performance.

  • Essential — necessary for Site operation.
  • Analytics — to understand usage (e.g., Google Analytics — anonymized IP where configured).
  • Marketing — if we run remarketing (rare for most agencies).

You can manage preferences via our cookie banner (if implemented) or browser settings. For more details, see our Cookie Policy. Note: disabling cookies may limit Site functionality.

We honour Global Privacy Control (GPC) signals for opt-out of targeted advertising/sale/sharing where applicable under U.S. state laws.

8. Data Retention

We keep personal data only as long as necessary for the purposes above or to meet legal obligations:

  • Inquiry data — up to 12 months after last interaction (or longer if active project).
  • Newsletter subscribers — until unsubscribe.
  • Analytics data — typically 12 months (provider-dependent, anonymized where possible).

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

  • Access, rectification, erasure (“right to be forgotten”).
  • Restriction of processing, objection (including to legitimate-interest processing or direct marketing).
  • Data portability.
  • Withdraw consent (where consent is basis).
  • Lodge complaint with supervisory authority (e.g., ICO in UK, your national DPA in EU, or state AG in U.S.).

To exercise rights, email info@hub9.co.uk. We respond within one month (extendable under GDPR). Verification may be required.

CCPA/CPRA & similar U.S. state rights (if applicable): You may also have rights to know, delete, correct, opt out of sale/sharing/targeted advertising, limit sensitive data use, and non-discrimination. Submit requests via the same email.

10. Security

We implement reasonable technical and organizational measures to protect personal data (e.g., encryption in transit, access controls). However, no method is 100% secure.

11. Third-Party Links

The Site may link to third-party sites (e.g., social media, stock libraries in portfolio). We are not responsible for their privacy practices.

12. Changes to This Privacy Policy

We may update this policy. Changes will be posted here with an updated “Last updated” date. Material changes may be notified via email or prominent notice on the Site.

13. Contact Us

For questions, concerns, or to exercise rights: Email: info@hub9.co.uk Subject: Privacy Inquiry.

© 2026. Hub 9 Group Limited. All rights reserved.