Legal
Privacy Policy
Last updated: November 2026
This Privacy Policy explains how The Business Hub collects, uses, and protects your personal data in accordance with UK GDPR and the Data Protection Act 2018.
1. Who We Are
The Business Hub is a UK-based training and professional development company. We provide accredited workplace training, digital marketing courses, e-commerce programmes, and business start-up support. For the purposes of data protection law, The Business Hub is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at: privacy@thebusinesshub.co.uk.
2. What Data We Collect
We may collect and process the following categories of personal data: Identity data (name, job title, company name); Contact data (email address, telephone number, postal address); Transaction data (details of purchases and payments); Technical data (IP address, browser type, device information, pages visited); Usage data (how you interact with our website and courses); Marketing preferences (your preferences for receiving communications from us); Course and assessment data (progress, results, and completion records for training programmes you undertake with us).
3. How We Collect Your Data
We collect data directly from you when you: complete an enquiry or contact form on our website; register for or purchase a course or membership; create an account on our learning platform (Kajabi); subscribe to our newsletter or marketing communications; correspond with us by email, telephone, or post; attend one of our events or training sessions. We also collect data automatically through cookies and similar technologies when you browse our website. Please see our Cookie Policy for more information.
4. How We Use Your Data
We use your personal data for the following purposes: To fulfil our contract with you — processing enrolments, delivering courses, issuing certificates, and managing your account; To provide customer support — responding to enquiries and resolving issues; To send administrative communications — booking confirmations, course updates, and important notices; To send marketing communications — newsletters, course promotions, and business updates (where you have consented or we have a legitimate interest); To improve our services — analysing usage patterns to enhance our website and course offerings; To comply with legal obligations — maintaining records required by law, including financial and tax records; To prevent fraud and ensure security — protecting our website and users.
5. Legal Basis for Processing
We process your personal data on the following legal bases: Contract performance — where processing is necessary to fulfil a contract with you or take steps at your request before entering a contract; Legitimate interests — where processing is necessary for our legitimate business interests, such as improving our services and direct marketing to existing customers, provided these interests are not overridden by your rights; Legal obligation — where we are required to process data to comply with a legal requirement; Consent — where you have given us clear consent to process your data for a specific purpose, such as receiving marketing emails.
6. Data Sharing
We do not sell your personal data to third parties. We may share your data with: Our learning platform provider (Kajabi) to deliver online courses and manage your learner account; Payment processors to handle transactions securely; Email marketing platforms to send communications you have opted into; IT and hosting service providers who support our website and systems; Professional advisers including accountants and legal advisers where necessary; Regulatory authorities or law enforcement where required by law. All third parties are required to process your data in accordance with applicable data protection law and our instructions.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Course completion records and certificates are retained for a minimum of seven years to support learner verification requests. Financial transaction records are retained for six years in accordance with HMRC requirements. Marketing data is retained until you withdraw consent or unsubscribe. Where you have not engaged with us for three years, we will review whether it is necessary to continue holding your data.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data: Right of access — to request a copy of the personal data we hold about you; Right to rectification — to request correction of inaccurate or incomplete data; Right to erasure — to request deletion of your data in certain circumstances; Right to restrict processing — to request that we limit how we use your data; Right to data portability — to receive your data in a structured, machine-readable format; Right to object — to object to processing based on legitimate interests or for direct marketing; Rights related to automated decision-making — to not be subject to solely automated decisions that significantly affect you. To exercise any of these rights, please contact us at privacy@thebusinesshub.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
Our website uses cookies to improve your browsing experience and analyse site traffic. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or by email. The date at the top of this policy indicates when it was last revised.