The short version
- We collect your email address only when you type it into a form.
- We use it to send the resource you asked for, and updates if you subscribed.
- We do not set advertising or cross-site tracking cookies.
- We do not sell, rent or trade personal data.
- You can ask us to delete your data at any time and we will confirm when it is done.
Who is responsible
This site, hub.in, is an independent editorial resource publishing business guides and templates. For the purposes of applicable data protection law, the operator of hub.in is the data controller for information collected through this site.
You can reach us about anything in this policy using the contact form (select "Privacy or data request"), or the editorial email address revealed by the Show contact email button in the site footer.
What we collect
Information you give us
| Form | What is collected | Why |
|---|---|---|
| Newsletter / resource pack signup | Email address, signup timestamp, and which page the form was on | To send the resource and, if you opted in, occasional updates |
| Template download gate | Email address and which template was unlocked | To unlock the file and record which resources are useful |
| Contact form | Name, email address, business type, topic, message text, page you sent from, timestamp | To reply to your enquiry |
We do not ask for and do not want sensitive personal data. Please do not include identity numbers, financial account details or health information in a message.
Information collected automatically
Our hosting provider records standard technical information when a page is served — typically the requested page, a timestamp, an approximate location derived from the network, browser type and a truncated network address. This is used for security, abuse prevention and aggregate traffic understanding. We do not use it to build individual profiles.
Cookies and local storage
We keep this deliberately minimal. This site may store:
- Strictly necessary cookies set by our hosting and security layer, where required to serve pages and prevent abuse. These cannot be switched off without breaking the site.
- Local storage in your browser, used for interface preferences such as whether a panel was open. This stays on your device and is not transmitted to us.
We do not set advertising cookies, cross-site tracking cookies, or third-party analytics beacons. There is no Cloudflare Insights or equivalent page-view tracker on this site.
You can clear or block cookies and local storage at any time in your browser settings. The site will continue to work; some conveniences such as remembered form details may reset.
Lawful basis
Where the GDPR or a similar framework applies, we rely on:
- Consent for sending you emails. You give it when you submit a form, and you can withdraw it at any time by unsubscribing or asking us to remove you.
- Legitimate interests for site security, abuse prevention and aggregate traffic understanding — limited to what is necessary for those purposes.
- Legitimate interests or consent for replying to an enquiry you chose to send.
How long we keep it
- Enquiries: retained for up to 24 months so we can refer back to a conversation, then deleted.
- Email subscribers: retained until you unsubscribe or ask for deletion.
- Download records: retained with the associated email address until deletion is requested.
- Server logs: retained by the hosting provider for a short operational window, typically days rather than months.
Who we share with
We do not sell, rent or trade personal data. We use a small number of service providers to operate the site — hosting and content delivery, and the database that stores form submissions. Those providers process data on our behalf and only as needed to provide their service.
We may disclose information if required by law, or where necessary to protect the site, its users or our legal rights.
Where data is processed
Our hosting and infrastructure providers operate globally, so form submissions and technical logs may be processed outside your country, including outside India and the European Economic Area. Where required, transfers rely on the safeguards those providers publish, such as standard contractual clauses.
Your rights
Depending on where you live, you may have the right to:
- Ask what personal data we hold about you, and receive a copy.
- Ask us to correct information that is wrong.
- Ask us to delete your information.
- Withdraw consent to marketing emails at any time.
- Object to processing based on legitimate interests.
- Complain to your local data protection authority.
To exercise any of these, use the contact form and select "Privacy or data request", telling us the email address you used. We aim to respond within 30 days and will confirm when a deletion is complete.
Children
This site is intended for people running or working in businesses. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has submitted information, contact us and we will delete it.
Security
The site is served over HTTPS. Form submissions are stored in a managed database with access restricted to the site operator. The contact email address is deliberately not published in plain text in the page source, to reduce automated harvesting.
No system is perfectly secure. If you believe you have found a security issue, please report it through the contact form and we will respond promptly.
Changes to this policy
If this policy changes materially, we will update the date at the top of this page and describe what changed. Continuing to use the site after a change means you accept the updated policy.
Contact
Questions about this policy, or a request relating to your data: contact us. See also our terms of use.