Privacy Policy.

1. Introduction

hub-LABS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (hub-labs.net), use our services, partner portal, or interact with us—including when you connect third-party accounts (e.g. Facebook, Google, Instagram) for analytics or engagement features. We operate in Kenya, East Africa, and Europe and comply with applicable data protection laws in these regions.

By using our services, you consent to the practices described in this policy. If you do not agree, please do not use our services. We may update this policy from time to time; the "Last updated" date is shown at the top of this page.

2. Data Controller

The data controller responsible for your personal data is hub-LABS, Longonot House, Nakuru, Kenya. For questions or to exercise your rights, contact us at info@hub-labs.net or +254 734 073 652.

3. Information We Collect

3.1 Information you provide

We may collect personal information that you provide directly, including:

• Name, email address, phone number, and mailing address
• Company name and job title
• Payment and billing information (processed securely; we do not store full card numbers)
• Project requirements, preferences, and communications
• Account credentials (stored in encrypted form) and authentication information
• Content you submit (e.g. comments, support requests, form submissions)

3.2 Information from third-party sign-in and connected accounts

If you sign in with Google, Facebook, or another provider, we receive basic profile information (e.g. name, email) as permitted by that provider. When you connect social or advertising accounts (e.g. Instagram, Facebook) through our platform for analytics and engagement, we receive data made available by those platforms (e.g. insights, metrics) in accordance with their APIs and your consent. We use this data only to provide the services you requested (e.g. dashboards, reports) and as described in this policy. We do not sell this data to third parties.

3.3 Automatically collected information

When you visit our website or use our services, we may automatically collect:

• IP address and general location (country/region)
• Device type, browser type and version, and operating system
• Pages visited, time spent, and referring URLs
• Cookies and similar technologies (see section 8)

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Authenticate users and manage accounts (including single sign-on)
• Provide analytics and engagement features when you connect social or advertising accounts
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends and usage (in aggregated form where possible)
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications where you have opted in (you may opt out at any time)

5. Legal Basis for Processing (EU/EEA and UK)

Where applicable law requires a legal basis, we process your data on the basis of: (a) performance of a contract with you; (b) your consent; (c) our legitimate interests (e.g. security, analytics, improving services), where not overridden by your rights; and (d) compliance with legal obligations.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent (e.g. when you connect a third-party account)
• Service providers who assist us (hosting, payment processing, email delivery, analytics) under strict confidentiality and data-processing agreements
• Legal compliance: to comply with laws, court orders, or government requests; to protect our rights, privacy, safety, or property; or in connection with legal proceedings
• Business transfers: in connection with a merger, sale of assets, or acquisition, subject to the same privacy commitments

When you use features that involve third-party platforms (e.g. Facebook, Google), their use of your data is governed by their respective privacy policies and your settings with those platforms.

7. International Transfers

We are based in Kenya and may use service providers or systems in other countries (including outside Kenya, East Africa, and the European Economic Area). Where we transfer personal data from the EEA, UK, or other jurisdictions that require safeguards, we implement appropriate measures (e.g. standard contractual clauses, adequacy decisions) to ensure your data is protected in line with applicable law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained while your account is active and for a reasonable period after closure. Data from connected third-party accounts (e.g. social analytics) is retained as long as the connection is active and for a limited period after disconnection for historical reporting, unless you request deletion. You may request deletion of your data subject to our legal obligations (see section 10).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including encryption, access controls, and secure hosting. No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security but we take security seriously.

10. Your Rights

Depending on your location (including Kenya, East Africa, and the European Union/EEA/UK), you may have the right to:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete data
• Request erasure of your personal data (subject to legal exceptions)
• Object to or restrict certain processing
• Data portability (where applicable)
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a supervisory authority (e.g. in your country of residence in the EU)

To exercise these rights, contact us at info@hub-labs.net or +254 734 073 652. We will respond within the time required by applicable law (e.g. one month under GDPR). You may also update your account details and preferences in the partner portal or via the "Settings" area where available.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember your preferences, analyze usage, and improve our services. You can set your browser to refuse or limit cookies; some features may not function fully without them. We may use analytics providers (e.g. Google Analytics) that place cookies; you can manage preferences via their tools or our cookie banner where provided.

12. Third-Party Links and Services

Our website and services may contain links to third-party websites or integrate with third-party services (e.g. Facebook, Google, payment gateways). We are not responsible for the privacy practices of these external parties. We encourage you to read their privacy policies and terms before providing any personal information.

13. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at info@hub-labs.net and we will take steps to delete such information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date. For material changes, we may notify you by email or through the platform where required by law. Your continued use of our services after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

15. Contact Us

For any questions about this Privacy Policy, to exercise your rights, or for data protection inquiries:

• Email: info@hub-labs.net
• Phone: +254 734 073 652
• Address: hub-LABS, Longonot House, Nakuru, Kenya