Privacy Policy

Effective date: 13 September 2026

Summary

This website uses no analytics, advertising or tracking cookies and loads no third-party scripts, fonts or embedded content.
We receive personal data when you email or call us. Our web server also records basic technical data about each request.
We do not sell or share personal information, and we do not use it for targeted advertising, profiling or automated decisions.
You can ask to access, correct or delete your personal data at any time by writing to info@hub-llc.com.

1. Who is responsible

HUB LLC, a Delaware limited liability company, is the controller of the personal data described in this policy.

United States: 16192 Coastal Hwy., Lewes, DE 19958, USA · +1 (302) 339-1810
European Union office: Udens street 12-38, LV-1007, Riga, Latvia · +371 282 18611
Privacy requests: info@hub-llc.com

This policy covers this website and our direct business communication. When we work inside a client's systems, personal data in those systems is handled under the client agreement and, where required, a data processing agreement, with the client as controller.

2. What we collect, why, and for how long

When you visit the website

Data: IP address, date and time, the page requested, the referring page, browser and device type (user agent) and the response status.
Purpose: delivering pages, keeping the website secure, and detecting and investigating abuse.
Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
Retention: server logs are kept for a limited period set by our hosting configuration and are then deleted automatically. We keep specific entries longer only while we investigate a security incident.

When you email or call us

Data: your name, email address, phone number, company and role, and anything you include in your message.
Purpose: answering your enquiry, discussing a possible engagement and preparing a proposal.
Legal basis: steps you ask us to take before entering into a contract (Article 6(1)(b) GDPR) or, for other messages, our legitimate interest in responding to business communication (Article 6(1)(f)).
Retention: for as long as the conversation is active and reasonably needed for follow-up. We then delete it, unless it becomes part of a client relationship or the law requires us to keep it.

The project brief on our contact page does not send or store anything on our servers. It prepares an email in your own email application, and we receive it only if you choose to send it. Please do not send passwords, access keys or other confidential data in a first message.

When you become a client or partner

Data: contact and billing details, agreements, invoices and project correspondence.
Purpose: performing the agreement, invoicing and keeping business records.
Legal basis: performance of a contract (Article 6(1)(b) GDPR) and our legal obligations, for example under accounting and tax law (Article 6(1)(c)).
Retention: for the duration of the engagement and afterwards for the periods required by accounting, tax and limitation-of-claims rules.

When you change the theme

If you use the light/dark switch, your choice is saved in your own browser's local storage. It is never sent to us. Details are in the Cookie Policy.

3. What we do not do

We do not use analytics, advertising, social media plugins, tracking pixels or fingerprinting.
We do not sell or share personal information, including for cross-context behavioural advertising.
We do not make decisions about you based solely on automated processing, including profiling.
We do not ask for special categories of personal data. Please do not send us health, biometric or similar information.

4. Who receives personal data

Only HUB LLC staff who need the information for the purposes above can access it. We also use service providers that process personal data on our behalf, under contracts that require them to protect it and to use it only to provide their services to us:

website hosting and infrastructure providers;
email and business communication providers;
accounting and invoicing providers, for clients.

We may disclose personal data to professional advisers, or to courts and authorities where the law requires it or where it is necessary to establish, exercise or defend legal claims. If HUB LLC is reorganised or its business is transferred, personal data may pass to the successor, subject to the protections described in this policy.

5. International transfers

HUB LLC is a United States company with an office in the European Union, so personal data from the European Economic Area, the United Kingdom or Switzerland may be processed in the United States and by service providers in other countries. Where the GDPR requires it, we protect these transfers with appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, including the EU–US Data Privacy Framework where a recipient is certified under it. You can ask us for more information about the safeguards that apply.

6. Security

The website is served over HTTPS. Access to personal data is limited to people who need it, and our content management area is protected by individual accounts, rate-limited sign-in and secure session cookies. No method of transmission or storage is completely secure, but we protect personal data in a way that is appropriate to the risks involved.

Under the GDPR and equivalent laws you have the right to:

access the personal data we hold about you and receive a copy;
have inaccurate data corrected;
have your data deleted;
restrict how we use it;
receive data you gave us in a portable format;
object at any time to processing based on our legitimate interests;
withdraw consent where we rely on consent, without affecting processing that took place before.

To use these rights, email info@hub-llc.com. We reply within one month. For complex requests this can be extended by up to two further months, and we will tell you if that happens. Requests are free of charge. We may ask for information to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular where you live, work or believe your rights were infringed. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija). The European Data Protection Board lists the authorities of other EU countries; in the United Kingdom, contact the Information Commissioner's Office. We would appreciate the chance to address your concern first.

8. California privacy notice

This section gives California residents the information required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), to the extent the CCPA applies to HUB LLC. Together with section 2, it is our notice at collection.

Personal information we collect

In the preceding 12 months we have collected the following categories of personal information, from the sources and for the business purposes described below and in section 2:

Identifiers: name, email address, phone number and IP address.
Personal information described in Cal. Civ. Code § 1798.80(e): contact details and, for clients, billing information.
Commercial information: records of services you ask about or buy from us.
Internet or other electronic network activity: server log data such as pages requested, referring pages and browser type.
Professional information: your company and role, when you give them to us.

We do not collect sensitive personal information as defined by the CCPA, and we do not collect precise geolocation, biometric information or inferences used to build a profile about you.

Sources: directly from you, and automatically from your browser when you visit the website. Purposes: responding to enquiries, providing and invoicing our services, securing and debugging the website, and complying with the law. Retention: each category is kept for the periods described in section 2.

Disclosure, sale and sharing

In the preceding 12 months we have disclosed identifiers, § 1798.80(e) information, commercial information and internet activity information for business purposes to our service providers: hosting, email and accounting providers. We have not sold or shared personal information, as those terms are defined by the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. Because we do not sell or share personal information, we do not display a "Do Not Sell or Share" link. We still treat a Global Privacy Control signal as a valid request to opt out.

Your California rights

Right to know and access the categories and specific pieces of personal information we have collected about you, and its sources, purposes and recipients;
Right to delete personal information we collected from you, subject to exceptions allowed by law;
Right to correct inaccurate personal information;
Right to opt out of the sale or sharing of personal information (we do neither);
Right to limit the use of sensitive personal information (we do not collect it);
Right not to be discriminated against for exercising any of these rights.

To make a request, email info@hub-llc.com with the subject "California privacy request", or call +1 (302) 339-1810. We confirm receipt within 10 business days and respond within 45 calendar days; if we need more time, we may extend this once by another 45 days and will tell you. To protect you, we verify requests by matching what you tell us with information we already hold, such as the email address you used to contact us. An authorised agent may submit a request with your signed permission, and we may still ask you to confirm your identity directly.

California residents may also ask whether we disclosed personal information to third parties for their own direct marketing purposes (Cal. Civ. Code § 1798.83). We do not make such disclosures.

9. Residents of other US states

Residents of states with comprehensive privacy laws, such as Colorado, Connecticut, Oregon, Texas, Utah and Virginia, may have rights to access, correct, delete and obtain a copy of their personal data and to opt out of targeted advertising, sale and certain profiling. We do not sell personal data or use it for targeted advertising or profiling. To make a request, use the contact details in section 8. If we decline your request, you may appeal by replying to our decision with the subject "Privacy appeal". We will answer within the time your state's law requires, and if we deny the appeal you may contact your state Attorney General.

10. Children

This website and our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

11. Other websites

Links to other websites, including our MagentoHUB division at magentohub.com, lead to sites that may have their own privacy policies. Please read them when you visit those sites.

12. Changes to this policy

We update this policy when our practices or the law change. The effective date at the top shows the current version. If a change materially affects how we use personal data you have already given us, we will tell you directly where we can.

13. Contact

Questions about this policy or your personal data: info@hub-llc.com, HUB LLC, 16192 Coastal Hwy., Lewes, DE 19958, USA.