Privacy Policy
How Hubmaster collects, uses and protects your data
This policy explains what personal data Hubmaster collects, why, how long we keep it and the rights you have. It applies to this website and to the Hubmaster service. Last updated: 4 November 2026.
1. Who we are
Hubmaster is a trading name of eCommWeb Limited, a company registered in England and Wales (company number 06680782). Our registered office is 1 Measures Close, Bourne, Lincolnshire, PE10 0NJ.
eCommWeb Limited is the data controller for the personal data described in this policy. You can contact us about anything in it by emailing gary@ecommweb.co.uk, calling 01302 325 032, or writing to the address above.
2. The data we collect
When you contact us
If you use our contact form, email or call us, we collect what you give us: usually your name, email address, telephone number, website address and your message. If you ask to join our newsletter, we keep your email address for that purpose.
When you become a customer
To provide the Hubmaster service we hold your business name, contact details, billing details and the details of the channels you connect. Monthly payments are collected by direct debit through GoCardless, which holds your bank details; we do not.
Data in your Hubmaster account
When you connect your website and marketplaces, Hubmaster processes product data and order data, which includes your own customers’ names, delivery addresses and order details. We process that data only on your instructions, to provide the service, and you remain the controller of it. Our terms of service set out how we handle it.
Technical data
Like every website, our web server records basic technical information such as IP address, browser type and the pages requested. To protect the contact form from spam, we store a scrambled (hashed) version of your IP address for one hour to limit how many messages can be sent.
Website analytics
We use Google Analytics to understand how visitors use this website: which pages are viewed, how people arrive (for example from a search engine), roughly where they are (country and city), and what device and browser they use. We use this only to see how the site is used so we can improve it. It is reported to us in aggregate and does not tell us who you are. Google Analytics does not log or store full IP addresses. We have switched off Google signals, advertising and ad personalisation features, and we do not share this data with Google for its own purposes. You can opt out at any time (see section 7).
3. Why we use it, and our lawful basis
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Replying to your enquiry | Your consent, given on the contact form, and our legitimate interest in answering questions about our service |
| Setting up and running your free trial or account | Performance of a contract, or steps taken at your request before entering into one |
| Billing and keeping financial records | Legal obligation and performance of a contract |
| Sending our newsletter | Your consent, which you can withdraw at any time |
| Keeping the website and service secure, and preventing spam and fraud | Our legitimate interests |
| Website analytics (Google Analytics) | Our legitimate interests in understanding how the site is used so we can improve it. You can opt out at any time. |
We do not sell your data, and we do not use it for automated decision-making or profiling.
4. Who we share it with
We only share personal data with suppliers who help us run the website and the service, and only as much as they need:
- our website and application hosting providers;
- our email providers, which deliver contact-form messages and emails we send you;
- GoCardless, which collects direct debit payments;
- Google, which provides Google Analytics on our behalf (unless you opt out);
- the marketplaces and platforms you ask us to connect, such as eBay, Amazon, Wayfair, Vinted, Facebook (Meta) and Google, which receive the product and order data needed to make those connections work;
- our accountants and professional advisers, where needed.
We may also disclose data where the law requires it, for example to comply with a court order.
5. Transfers outside the UK
Some of our suppliers (including Google, for website analytics), and some of the marketplaces you choose to connect, may process data outside the UK. Where that happens we make sure the transfer is protected, for example because the country has UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or because the supplier has signed the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
- Enquiries that don’t lead to an account: up to 2 years from our last contact.
- Customer account and billing records: for as long as you are a customer, then 6 years to meet our tax and accounting obligations.
- Order and product data in your Hubmaster account: for as long as you use the service, then deleted or returned to you when the account closes.
- Newsletter subscriptions: until you unsubscribe.
- Google Analytics data: 2 months, after which Google deletes it automatically.
- Contact-form spam protection: one hour.
7. Cookies
Cookies are small files a website stores in your browser. This website uses two Google Analytics cookies to understand how the site is used so we can improve it. UK law allows cookies used only for this purpose without asking first, as long as we tell you about them and you can easily opt out.
| Cookie | Set by | What it does | How long it lasts |
|---|---|---|---|
_ga | Google Analytics | Tells visits from the same browser apart so we can count unique visitors | 2 years |
_ga_MWY58VW3XE | Google Analytics | Keeps track of the current visit (session) | 2 years |
We don’t use advertising or tracking cookies, and we don’t use analytics data to profile you or target ads.
Opting out: the first time you visit, a notice at the bottom of the page explains this and offers an Opt out button. You can change your mind at any time using at the bottom of every page. When you opt out we delete the analytics cookies from your browser and no Google code loads on your later visits. You can also block or delete cookies in your browser settings.
We remember your choice in your browser’s local storage (under hubm_analytics_pref). This is not a cookie and contains no personal data.
The Hubmaster application at admin.hubmaster.co.uk uses strictly necessary cookies to keep you signed in. These are essential for the service to work.
8. Your rights
Under UK data protection law you have the right to:
- be told how we use your data (this policy);
- get a copy of the data we hold about you;
- have inaccurate data corrected;
- have your data deleted, in some circumstances;
- restrict or object to how we use your data, in some circumstances;
- receive your data in a portable format, in some circumstances;
- withdraw your consent at any time, where we rely on it.
To use any of these rights, email gary@ecommweb.co.uk. There is normally no charge, and we will reply within one month.
If your data is in a Hubmaster customer’s account (for example, because you bought something from one of our customers), please contact that business first, as they control that data.
9. Keeping your data secure
This website is served only over HTTPS. Access to the Hubmaster service and to customer data is restricted to staff who need it, and we choose suppliers who protect data to a high standard.
10. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.