Hublok uses personal information only where there is a clear business or legal reason. We do not sell it or use the public website for behavioural advertising or significant automated decisions.
1. Who we are
Hublok Limited is the controller. We are registered in England and Wales under company number 12924422 and trade from Rae House, Dane Street, Bishop's Stortford, Hertfordshire CM23 3BT. Contact sales@hublok.co.uk, 01245 921911, or write to that address marked “Data Protection”.
2. Information we collect and its sources
We may collect names, job titles, employers, business contact details, enquiries, quotations, contracts, project and support correspondence, site-access information, billing records, technical contacts, preferences and website security-log data such as IP address, browser, requested page and time.
Information comes directly from emails, calls, meetings, orders, support requests and visits, or from an employer, client, delivery partner, provider, tender portal, public professional profile or referral. The public website currently opens the visitor's own email application rather than storing a submitted contact form.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Enquiries, quotations and pre-contract steps | Legitimate interests; contract where applicable |
| Projects, delivery, software, support and maintenance | Contract and legitimate interests |
| Billing, tax, accounting and debt management | Legal obligation and legitimate interests |
| Security, safety, disputes and legal compliance | Legal obligation and legitimate interests |
| Relevant business-to-business updates | Legitimate interests or consent where required |
Where we rely on legitimate interests, we consider necessity, reasonable expectations and the person's rights.
5. Retention and security
We normally keep unsuccessful enquiries for up to 24 months; contract, invoice and transaction records for six years after the relevant financial year or contract; project, warranty and support records for the service period and normally six years afterwards; marketing contacts until objection with periodic review; and security logs for a limited period, normally no longer than 12 months unless needed for an incident or claim.
We use proportionate access controls, supported systems, secure providers, backups and incident procedures. No internet system can be guaranteed completely secure.
6. Your rights and marketing choices
Depending on the circumstances, you may ask to access, correct, erase, restrict or receive personal information, object to its use, or withdraw consent. Legal conditions and exemptions apply. Contact us using section 1; we may verify identity and normally respond within one month.
Business contacts may opt out of marketing at any time. We may retain a minimal suppression record to respect the request.
7. Data protection complaints
Send a complaint using section 1. We will acknowledge it within 30 days, investigate without undue delay, keep the complainant informed and explain the outcome.
You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or 0303 123 1113. This business website is not directed at children. We will update this policy when our processing or the law changes.