Legal

GDPR Statement

Our commitment to UK GDPR, for brand clients and consumer subscribers.

Last updated: 1 June 2026

Our commitment

Huuddle was designed around the UK GDPR from day one. Every subscriber record that flows through our platform carries the consent metadata required to be lawfully processed by the brand receiving it.

Lawful basis

Subscriber data is processed on the lawful basis of consent. Every subscriber explicitly opts in to receive communications from a named brand, at a named contact method, in language they have read.

Consent records

Every consent event is recorded with timestamp, IP, source URL, consent copy presented and the named brand. This record is available to brand clients in the Ad Manager compliance centre and via API.

Data subject rights

Brand clients are responsible for handling data subject rights requests for the subscribers in their CRM. Huuddle assists brand clients with subject access, erasure and objection requests on request, contact dpo@huuddle.com.

Data transfers

Data is stored in the UK and EEA. We do not transfer data outside the UK or EEA save for a small number of vetted sub-processors operating under UK-approved transfer mechanisms.

ICO registration

Huuddle Ltd is registered with the Information Commissioner's Office. Our registration number is available on request.

Contact DPO

For any UK GDPR question, contact our Data Protection Officer at dpo@huuddle.com.