Last updated: 1 June 2026
Our commitment
Huuddle was designed around the UK GDPR from day one. Every subscriber record that flows through our platform carries the consent metadata required to be lawfully processed by the brand receiving it.
Lawful basis
Subscriber data is processed on the lawful basis of consent. Every subscriber explicitly opts in to receive communications from a named brand, at a named contact method, in language they have read.
Consent records
Every consent event is recorded with timestamp, IP, source URL, consent copy presented and the named brand. This record is available to brand clients in the Ad Manager compliance centre and via API.
Data subject rights
Brand clients are responsible for handling data subject rights requests for the subscribers in their CRM. Huuddle assists brand clients with subject access, erasure and objection requests on request, contact dpo@huuddle.com.
Data transfers
Data is stored in the UK and EEA. We do not transfer data outside the UK or EEA save for a small number of vetted sub-processors operating under UK-approved transfer mechanisms.
ICO registration
Huuddle Ltd is registered with the Information Commissioner's Office. Our registration number is available on request.
Contact DPO
For any UK GDPR question, contact our Data Protection Officer at dpo@huuddle.com.