Legal

Privacy Policy

How we collect, use and protect personal data, for brand clients and consumer subscribers.

Last updated: 1 June 2026

Who we are

Huuddle Ltd is a company registered in England & Wales. Our registered office is 12 Soho Square, London W1D 3QF. We are registered with the Information Commissioner's Office (ICO). For data protection queries, contact our DPO at dpo@huuddle.com.

Data we collect

Brand clients: We collect business contact details (name, work email, company, role, phone), authentication credentials, campaign configuration, billing details and product usage data. Consumer subscribers: Where consumers opt in to a Huuddle-powered subscription on a publisher placement, we collect name, email, postal address (where given), date of birth (where given), declared preferences and metadata about the consent event (timestamp, IP, source URL, consent copy presented).

Legal basis

We process brand client data under the contract you have with us. We process consumer subscriber data under the explicit, named consent the subscriber gives at the moment of opt-in, on behalf of the brand they are subscribing to. We also rely on legitimate interests for security, fraud prevention and product analytics.

How we use data

Brand client data is used to provide the platform, support, billing and product communications. Consumer subscriber data is used to verify identity, de-duplicate, enrich with declared preferences and deliver into the brand's CRM. We do not use subscriber data for any other purpose and we do not retain it once it has been delivered, save for the audit record required by PECR.

Data sharing

We share subscriber data only with the brand the consumer opted in to. We use a small number of sub-processors for hosting, identity verification and CRM delivery, a current list is available on request from dpo@huuddle.com.

Data retention

Brand client data is retained for the life of the account and for six years after closure for accounting purposes. Subscriber records are delivered and removed from our active systems within 30 days. Consent audit records are retained for the statutory period.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict, port and object to processing of your personal data. To exercise these rights, contact dpo@huuddle.com. We respond within one calendar month.

Cookies

See our Cookie Policy for full detail. In short: we use essential cookies for the app to function, and aggregated analytics cookies (with consent) to improve the product.

Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). We operate role-based access controls, audit logging and regular third-party penetration testing.

Contact our DPO

For any data protection question, email dpo@huuddle.com or write to the Data Protection Officer at our registered office. You also have the right to complain to the ICO at ico.org.uk.