Last updated: 13 October 2026
1. Introduction
3HUB Ltd (“3HUB”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store, share and protect personal information about individuals who visit our website, contact us, enquire about our services, work with us or otherwise interact with our business.
It applies to personal information relating to website visitors, prospective clients, business contacts, suppliers, professional contacts, representatives of other organisations and members of the public who communicate with us.
Where we process personal information in connection with our clinical or case management services, additional privacy information may apply. Where we process personal information on behalf of another organisation as a data processor, that organisation may be responsible for providing the relevant privacy information.
2. How to contact us
If you have questions about this Privacy Notice, how we use your personal information or how to exercise your data protection rights, please contact the Data Protection Officer using the email address below.
Email: office@threehub.co.uk
3. What personal information do we collect?
Depending on how you interact with us, we may collect the following categories of personal information.
Identity and contact information
- Name and job title.
- Business or organisation name.
- Postal and business addresses.
- Email addresses.
- Telephone numbers.
Enquiry and communication information
- Information you provide when contacting us.
- Emails, letters and other correspondence.
- Enquiries about our services.
- Records of meetings, telephone calls and other business communications, where appropriate.
- Feedback, complaints and requests.
Business and professional information
- Your employer, organisation or professional role.
- Information relevant to a potential or existing business relationship.
- Details of services discussed, requested or supplied.
- Relevant contractual and administrative records.
Financial and transaction information
Where relevant to a business relationship, we may process invoicing details, payment records and information needed to administer transactions or recover amounts owed.
Website and technical information
When you visit our website, we may collect technical information such as your IP address, browser type, device information, website usage information and information collected through cookies or similar technologies, where applicable.
Recruitment and employment-related information
If you apply for a position or contact us about working with 3HUB, we may process information relevant to your application or prospective working relationship. Additional privacy information may be provided where appropriate.
We aim to collect only personal information that is relevant and necessary for the purpose for which it is used.
Please do not send confidential clinical information or other sensitive personal information through our general website contact channels unless this is necessary and we have provided an appropriate method for doing so.
4. Where do we obtain personal information?
We may obtain personal information:
- Directly from you when you contact us, complete a form or communicate with us.
- From your employer or the organisation you represent.
- From professional contacts or business partners where relevant to our relationship.
- From publicly available sources, where appropriate and lawful.
- Automatically through our website, including technical information and information collected using cookies or similar technologies.
5. Why do we use your personal information?
We may use personal information for the following purposes:
Responding to enquiries
To respond to questions, requests for information, complaints or other communications.
Managing business relationships
To communicate with clients, prospective clients, suppliers, professional contacts and other organisations, and to manage our business relationships.
Providing and administering services
To assess enquiries, discuss potential services, fulfil contractual obligations and administer the services we provide.
Business administration and financial management
To maintain business records, manage invoices and payments, keep appropriate accounting records and manage disputes or potential legal claims.
Website operation and security
To operate, maintain and protect our website, investigate technical problems and help prevent misuse, fraud or security incidents.
Website analysis and improvement
Where applicable and lawful, to understand how visitors use our website and improve its performance, content and accessibility.
Marketing and business updates
To send relevant information about 3HUB and our services where permitted by applicable data protection and electronic marketing laws.
You may opt out of marketing communications at any time by using the unsubscribe facility in the message or by contacting office@threehub.co.uk.
Legal and regulatory obligations
To comply with applicable laws, regulations, lawful requests and our legal obligations, and to establish, exercise or defend legal claims.
We will not use your personal information for a new purpose that is incompatible with the original purpose unless we have a lawful basis to do so.
6. Our lawful bases for processing your information
We process personal information only where we have a lawful basis under applicable data protection law.
Depending on the circumstances, these bases may include:
Legitimate interests: Where necessary for our legitimate business interests, such as responding to business enquiries, maintaining professional relationships, managing business records, protecting our systems and handling disputes, provided those interests are not overridden by your rights and interests.
Contract: Where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
Legal obligation: Where processing is necessary to comply with a legal obligation, including applicable accounting and record-keeping requirements.
Consent: Where we have asked for and obtained your consent for a particular purpose, such as the use of cookies where consent is required.
We will consider the appropriate lawful basis for each processing activity. Where we rely on legitimate interests, those interests will be determined according to the relevant circumstances.
You may contact us if you would like further information about the lawful basis applicable to a particular use of your personal information.
7. Who do we share personal information with?
We do not sell your personal information.
We may share personal information where necessary and lawful with:
- Service providers who support our business operations, including email, IT, website hosting and business software providers.
- Professional advisers, such as accountants, lawyers and other advisers.
- Clients, suppliers or professional contacts where necessary for the relevant business relationship.
- Banks, payment providers or other financial service providers where necessary to process transactions.
- Regulators, public authorities, courts or law enforcement agencies where we are legally required or otherwise lawfully permitted to do so.
- Other parties where necessary to establish, exercise or defend legal claims or protect our rights.
Where a third party processes personal information on our behalf, we will put appropriate contractual and other safeguards in place as required by applicable data protection law.
We will share only the information reasonably necessary for the relevant purpose.
8. International transfers
Some of our service providers may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve transferring information to a country recognised as providing adequate protection or using another legally permitted transfer mechanism and appropriate safeguards.
You may contact us for further information about relevant international transfers and the safeguards used.
9. How long do we keep personal information?
We retain personal information on only for as long as necessary for the purpose for which it was collected, taking account of our legal obligations, legitimate business needs and the rights of individuals.
Business correspondence, including emails, may be retained for an appropriate period where necessary for ongoing business relationships, maintaining an accurate record of communications, meeting legal or regulatory obligations, or establishing, exercising or defending legal claims. We recognise that correspondence information may be held in different systems and that it may not always be practicable to delete individual items of correspondence immediately when their original purpose has ended.
Our retention periods depend on the type of information and the circumstances in which it is held.
The following are our intended standard retention periods for general business information, subject to confirmation against our internal retention schedule:
- General enquiries and business correspondence: Normally up to 6 years after the enquiry or correspondence has concluded, unless a continuing business relationship or another justification requires longer retention.
- Prospective client and business contact details: Normally reviewed after 6 years without meaningful contact and deleted when no longer required, unless there is a documented reason to retain them.
- Supplier and business relationship records: For the duration of the relationship and afterwards for as long as necessary for administration, contractual obligations and potential claims.
- Contracts, invoices and financial records: In accordance with applicable legal, accounting and tax requirements. Some records may need to be retained for at least 6 years, depending on the applicable requirements and circumstances.
- Complaints, disputes and legal correspondence: For as long as reasonably necessary to investigate and resolve the matter and deal with any resulting legal or regulatory requirements.
- Recruitment information: For a period appropriate to the recruitment process, any subsequent employment relationship and any relevant legal requirements or potential claims.
- Marketing records: Until you unsubscribe or object to the relevant marketing, subject to retaining limited information where necessary to respect your preferences and demonstrate compliance.
- Website technical and analytics information: For the period necessary for the relevant security, operational or analytical purpose, in accordance with our cookie arrangements and the settings of the services used.
These periods are not automatic entitlements to retain information for the maximum period. We may delete or anonymise information earlier when it is no longer needed, where appropriate.
Where a legal claim, investigation, complaint or other exceptional circumstance justifies longer retention, we may retain relevant information for the period reasonably necessary to deal with that matter.
10. How we protect personal information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
Access to personal information is restricted to those who need it for legitimate business purposes. We also take appropriate steps to ensure that service providers handling personal information on our behalf protect it appropriately.
No method of electronic transmission or storage can be guaranteed to be completely secure. However, we take reasonable steps to protect the information entrusted to us.
11. Your data protection rights
Under data protection law, you may have the right to:
- Access: Request confirmation of whether we process your personal information and obtain a copy of that information. This is known as a Subject Access Request (SAR).
- Rectification: Ask us to correct inaccurate or incomplete personal information.
- Erasure: Ask us to delete your personal information where the legal conditions for erasure are met.
- Restriction: Ask us to restrict the processing of your personal information in certain circumstances.
- Objection: Object to certain types of processing, including processing based on legitimate interests.
- Data portability: Request certain personal information in a structured, commonly used and machine-readable format where the legal conditions apply.
- Withdraw consent: Where we rely on your consent, withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
These rights are subject to applicable legal conditions and exemptions.
How to exercise your rights or make a Subject Access Request
To exercise any of your data protection rights, including making a SAR, please contact us at office@threehub.co.uk
Please provide sufficient information to help us identify you and understand your request. We may request additional information to verify your identity where reasonably necessary.
We will respond within the applicable statutory timeframe. For most SARs, this is one month from receipt of the request. Where permitted by law, this period may be extended by up to a further two months for complex or numerous requests. We will inform you of any extension and explain the reasons within the initial response period.
We will normally provide information free of charge. A reasonable fee may be charged, or a request may be refused, where permitted by applicable data protection law, for example in certain circumstances involving manifestly unfounded or excessive requests.
We will assess each request individually and may withhold information where a relevant legal exemption applies.
Where we process personal information on behalf of another organisation as a data processor, we will handle requests in accordance with our legal obligations and contractual arrangements, including assisting the relevant data controller where required.
If you have concerns about how we use your personal information, please contact us so that we can investigate.
Further information can be attained from the Information Commissioner’s Office (ICO), the UK’s data protection regulator and is on their website at https://ico.org.uk/.
12. Complaints
If you have concerns about how we use your personal information, please contact us first so that we can investigate.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
You can find information about making a complaint on the ICO’s website: https://ico.org.uk/
13. Cookies and similar technologies
Our website may use cookies and similar technologies to support website functionality, security and, where applicable, website analytics.
Cookies are small files stored on your device. Some are necessary for the website to function, while others may be used to understand how visitors use the website or to support additional features.
Where consent is required for cookies or similar technologies, we will seek your consent before using them.
14. Marketing communications
We may send business updates or information about our services where permitted by applicable law.
The rules governing electronic marketing differ depending on whether the recipient is an individual, a sole trader, a partnership or a corporate subscriber, and on the nature of the communication.
You can unsubscribe from marketing emails at any time by following the instructions included in the email or contacting office@threehub.co.uk.
If you opt out, we may retain limited information necessary to record and respect your preference and prevent further unwanted marketing.
15. Links to other websites
Our website may contain links to websites operated by other organisations.
Those websites have their own privacy notices and cookie arrangements. We are not responsible for the privacy practices of external websites, and we recommend reviewing their notices before providing personal information.
16. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our business, the personal information we process or applicable legal requirements.
The latest version will be published on our website.