Privacy Policy
Version: HH-PP-v2025.4
Date: 3 November 2025
Official Legal Contact: legal@hub-hosting.com

PREAMBLE
This Privacy Policy explains how Hub Hosting (“we”, “our”, “us”) collects, uses, and protects personal data in connection with the provision of hosting, VPS, domain, and related services. This Policy complies with the General Data Protection Regulation (GDPR – EU 2016/679), the Irish Data Protection Act 2018, and relevant European privacy legislation.

1. DEFINITIONS
• “Personal Data” – any information relating to an identified or identifiable natural person.
• “Processing” – any operation performed on personal data, such as collection, storage, transmission, or deletion.
• “Data Subject” – the individual whose personal data is processed.
• “Controller” – Hub Hosting, which determines the purposes and means of processing.
• “Processor” – third parties engaged to process data on behalf of Hub Hosting.

2. SCOPE OF POLICY
This Policy applies to all clients, users, visitors, and partners of Hub Hosting whose personal data is processed as part of service delivery, account management, or communication.

3. DATA CONTROLLER & CONTACT INFORMATION
Hub Hosting acts as the Data Controller for personal data processed under this Policy.
Registered office: Cork, Ireland
Email: legal@hub-hosting.eu
Supervisory Authority: Data Protection Commission (DPC), Ireland – www.dataprotection.ie

4. TYPES OF DATA COLLECTED
Hub Hosting may collect and process the following categories of data:
• Account Data – name, company, email address, contact details.
• Billing Data – payment information, transaction records, VAT identifiers.
• Technical Data – IP addresses, log files, device identifiers, connection metadata.
• Communication Data – support tickets, emails, and service correspondence.
• Security Data – authentication logs, access records, and monitoring information.

5. PURPOSE AND LEGAL BASIS FOR PROCESSING
Hub Hosting processes personal data based on the following legal grounds under Article 6 GDPR:
• Contractual necessity – to provide and maintain hosting and related services.
• Legal obligation – to comply with tax, accounting, and regulatory requirements.
• Legitimate interests – to improve service quality, security, and user experience.
• Consent – for optional communications and marketing (if applicable).

6. COOKIES AND TRACKING TECHNOLOGIES
Hub Hosting uses cookies and similar technologies for essential service functionality and performance analytics. Full details are provided in the separate ‘Hub Hosting Cookie Policy’, available on our website.

7. DATA RETENTION
Personal data is retained only for as long as necessary to fulfill the purposes outlined in this Policy. Retention periods are determined by statutory obligations, contractual requirements, or legitimate business needs. Upon expiration, data is securely deleted or anonymized in accordance with Hub Hosting’s internal Data Retention Policy, aligned with ISO/IEC 27001 data lifecycle principles.

8. DATA SECURITY
Hub Hosting applies appropriate technical and organizational measures to protect data against unauthorized access, loss, or alteration, including:
• Encryption of data at rest and in transit.
• Multi-factor authentication for administrative access.
• Network intrusion detection and monitoring.
• Secure data centers located within the EEA.
• Regular internal security reviews and testing.

These controls are aligned with the principles of ISO/IEC 27001:2022 and NIS2 Directive requirements, though Hub Hosting is not formally certified under ISO or SOC schemes.

9. DATA SHARING AND DISCLOSURE
Personal data may be shared with:
• Authorized subprocessors (for infrastructure, billing, or support functions).
• Legal and regulatory authorities when required by law.
• Auditors or consultants operating under confidentiality agreements.

All subprocessors operate within the European Economic Area (EEA) and are bound by GDPR-compliant Data Processing Agreements.

10. DATA SUBJECT RIGHTS
Data Subjects have the following rights under GDPR:
• Right of access – to obtain confirmation and a copy of their personal data.
• Right to rectification – to correct inaccurate or incomplete data.
• Right to erasure – to request deletion where data is no longer necessary.
• Right to restriction – to limit processing under certain conditions.
• Right to data portability – to receive their data in a structured format.
• Right to object – to processing based on legitimate interest or marketing.

Requests may be submitted to legal@hub-hosting.com. Responses are provided within 30 days in accordance with Articles 12–23 GDPR.

11. DATA BREACH NOTIFICATION
In the event of a personal data breach, Hub Hosting will notify affected Clients and the Data Protection Commission without undue delay and, where feasible, within 72 hours of becoming aware of the incident, in accordance with Article 33 GDPR.

12. CHILDREN’S DATA
Hub Hosting does not knowingly collect or process personal data of individuals under 16 years of age. If such data is inadvertently collected, it will be deleted immediately upon identification.

13. SUPERVISORY AUTHORITY
If you believe that your data has been processed unlawfully, you may file a complaint with:
Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie

14. CHANGES TO THIS POLICY
Hub Hosting reserves the right to update or modify this Privacy Policy to reflect changes in legislation, technology, or business practices. The latest version will always be available on Hub Hosting’s official website.

15. GOVERNING LAW & JURISDICTION
This Privacy Policy is governed by the laws of Ireland and applicable EU regulations. Any disputes shall be resolved under the exclusive jurisdiction of the courts of Dublin, Ireland.

16. ANNEX REFERENCE
Annex A: Data Processing Agreement (DPA)
Annex B: Cookie Policy (available separately)
Annex C: Security & Compliance Statement (aligned with ISO/IEC 27001 principles)