Privacy Policy

Last updated: 13 July 2026

We take protecting your personal data seriously at Hublr. Please read this Privacy Policy alongside our Terms of Service. By using wearehublr.com (the "Website"), you agree to both.

What does this policy cover?

This policy explains what personal data we collect when you use Hublr, why we collect it, who (if anyone) we share it with, how we keep it secure, and the rights you have over it. We've tried to write it in plain language rather than dense legal text. If anything is still unclear, email wearehublr@gmail.com and we'll explain it properly.

Who is Hublr?

Hublr helps students find early-career opportunities, events, and resources, and gives them tools to organise their own applications and job search. Hublr is operated by Hublr Ltd, a company registered in England and Wales (company number 17076401), with a registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. Throughout this policy, "we" and "us" means Hublr Ltd.

What is personal data?

Personal data is any information that can identify you as a living person: things like your name, email address, or university. Some categories of personal data are treated as more sensitive under UK law (for example, health information, ethnicity, or sexual orientation). To be clear: we don't ask for or knowingly collect any of these sensitive categories, and we don't need them to run Hublr.

Who does Hublr collect personal data from?

To run Hublr, we collect data from:

• Students who register for an account ("Members");
• People who submit our "Work with us" form, whether as a prospective student volunteer or a prospective sponsor/partner; and
• General visitors to the Website, through analytics.

We don't hold employer or "client" accounts on Hublr: sponsors and employers don't have logins or direct access to Member data (see "Who do we share your personal data with" below).

Why does Hublr collect personal data?

For Members, we use your data to:

• create and secure your account, and let you log in;
• show you opportunities, events, and resources relevant to you, and let you track your own applications;
• send you emails you've asked for by using the service: deadline reminders, job alerts matching searches you've saved, and confirmation that we've received something you've submitted (you can turn these off anytime; see "Your rights" below);
• report honest, aggregated statistics to the sponsors and employers who fund the opportunities we list (for example, "120 students clicked apply this month"); this never includes your individual identity or contact details; and
• understand how the Website is used, and improve it, using analytics.

For people who submit our "Work with us" form, we use your data only to read and respond to your message.

If you choose not to share certain data with us (for example, leaving profile fields blank), we may not be able to personalise some parts of the service for you, but you can still use the core Website.

What personal data does Hublr collect?

For Members, we may collect and process:

• Your email address and password (password handling is managed by our authentication provider, Supabase; we never see it in plain text);
• Preferred name;
• University and degree subject;
• Study year (e.g. Year 12, Sixth Form, 1st–4th year, postgraduate, recent graduate);
• Career goal and a short summary you write about yourself;
• Whether you're a home or international student;
• Industries you're interested in;
• The opportunities you track, their stage (e.g. applied, interviewing, offer), deadlines, and any notes you add;
• CVs and cover letters you upload;
• Saved search / job alert criteria (region, category, visa sponsorship, industry, keyword);
• A record of when you click "Apply" on a listing; and
• If you contact us, a record of that correspondence.

For "Work with us" form submissions, we collect the name, email address, and message you provide.

For all visitors, our analytics tools may collect IP address (used to approximate location), device/browser type, and pages visited.

Testimonials published on the Website (real student stories) are only ever added by us, and only after the person featured has separately given their explicit consent to have their name, story, and photo shared; we never publish this from a Member's account data without asking first.

How does Hublr collect personal data?

Directly from you, when you:

• register for an account;
• fill in or update your profile;
• track an opportunity or upload a document;
• save a job alert;
• submit the "Work with us" form; or
• email us directly.

We also collect data automatically through cookies and analytics tools when you use the Website (see "Cookies and analytics" below). We don't buy personal data from third parties or data brokers, and we don't source information about you from social media or other public sources.

What legal basis do we rely on to process your personal data?

UK data protection law requires us to have a valid reason for processing your data. We rely on:

• Legitimate interest, to run the core service: creating your account, showing you relevant opportunities, sending you the transactional emails the service depends on (deadline reminders, job alerts, confirmations), and reporting aggregated, anonymised statistics to sponsors;
• Consent, for non-essential cookies used for analytics (see below), and you can withdraw this at any time; and
• Legal compliance, where we're required by law to process or disclose data, for example in response to a valid request from a regulator or law enforcement.

Who do we share your personal data with?

We use a small number of trusted service providers to run Hublr. Each only processes the data needed to provide their service to us, and we require them to handle it securely:

• Supabase: hosts our database, authentication, and file storage (your uploaded documents);
• Vercel: hosts the Website, and provides cookieless usage analytics;
• Resend: delivers the transactional emails we send; and
• Google Analytics: provides usage analytics using cookies (see below).

Sponsors and employers only ever receive aggregated, anonymised statistics (e.g. total click counts), never your individual identity, contact details, profile, or documents. Beyond the providers listed above, we won't disclose your personal data to anyone else unless we're legally required to.

Where we store your personal data

Our service providers (Supabase, Vercel, Resend, Google) may store and process data in the UK, the EEA, or other countries in which they operate, including the US. Where data is transferred outside the UK/EEA, reputable providers of this kind maintain appropriate legal safeguards (such as the UK International Data Transfer Addendum or equivalent standard contractual clauses) to protect it to a comparable standard.

Cookies and analytics

We use Google Analytics, which sets cookies to recognise repeat visits and measure site usage. It only loads if you accept it in the cookie banner shown on your first visit; if you decline, no Google Analytics cookies are set. You can change your mind at any time by clearing your browser's cookies for this site, which brings the banner back, or using your browser's cookie settings, or Google's Analytics opt-out browser add-on. Vercel Analytics, which we also use, is cookieless and doesn't track you individually across visits.

Security

We rely on industry-standard providers (Supabase, Vercel) with encryption in transit, and we restrict access to your data to you and, where necessary, our own admin team. No system is completely secure, but we take reasonable technical steps to protect your information.

How long do we keep your personal data for?

We keep your data for as long as your account is active. If you delete your account, your profile, tracked applications, uploaded documents, and saved job alerts are permanently deleted immediately. Apply-click records are anonymised (disconnected from your account) rather than deleted, so sponsor reporting stays accurate. "Work with us" submissions are kept for our own records unless you ask us to remove them.

Your rights

Under UK data protection law, you have the right to:

• Be informed, which is what this policy is for.
• Access the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data; most of this you can edit yourself on your profile page.
• Erasure: permanently delete your own account and all associated data anytime from the "Danger zone" section of your profile page, with no need to contact us.
• Restrict or object to processing, for example, opting out of analytics, or turning off email notifications from your profile.
• Data portability: request a copy of your data in a portable format.
• Withdraw consent at any time, where consent is the basis for processing (this doesn't affect anything already done lawfully before you withdraw it).

To exercise any right that isn't self-serve, email wearehublr@gmail.com and let us know who you are. We may need to verify your identity before acting on a request. We aim to respond within one month. We don't charge a fee for reasonable requests, but may charge a reasonable fee, or decline, if a request is manifestly unfounded, excessive, or repetitive.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you think we've mishandled your data. Further information, including contact details, is available at ico.org.uk.

Third-party privacy policies

Opportunities, events, and resources on the Website link out to third-party employer sites, application portals, and other external services. If you follow one of these links, note that the destination site has its own privacy policy, and we aren't responsible for its practices or for any data you submit there. Please check a site's own policy before submitting personal data to it.

Changes to this policy

Any changes we make to this policy will be posted on this page, and we'll update the "Last updated" date above. It is important that the personal data we hold about you stays accurate. Please keep your profile up to date.

Contact

The data controller responsible for your information is Hublr Ltd. Questions, comments, or requests regarding this policy or our use of your personal data can be sent to wearehublr@gmail.com.

Unauthorised access

If you think someone unauthorised has become aware of your Hublr password, please contact us immediately at wearehublr@gmail.com. We can't be responsible for unauthorised use of your account resulting from a password you've shared or that was compromised outside our systems.

Transfer of ownership

If we sell or transfer Hublr to another company, we may transfer our rights and obligations, and the information we hold about Members, to that company without further consent. This won't change the rights you have over how that information is used.