Privacy Policy

Who we are

The Thrive Hub is a trading name of The Thrive Hub Innovations Partnership.

The Thrive Hub Innovations Partnership is the controller responsible for the personal information described in this policy.

Our contact details are:

Email: info@thethrivehub.co.uk
Telephone: 01926 919035

Information we collect

When someone completes the website contact form, we may collect:

• Name
• Business name
• Email address
• Telephone number
• The service they are interested in
• The contents of their message
• The date and time of submission
• The page from which the form was submitted

The website may also process limited technical information, such as an IP address, temporarily for security, spam prevention and rate limiting.

We may also receive personal information when someone contacts us directly by telephone, email or WhatsApp.

How we use personal information

We use personal information to:

• Review and respond to enquiries
• Discuss services that someone has asked us about
• Take steps requested before entering into a professional engagement
• Arrange calls or meetings
• Maintain appropriate records of correspondence
• Protect the website and contact form against spam, fraud and misuse
• Comply with legal, regulatory and professional obligations
• Establish, exercise or defend legal claims where necessary

We do not use website enquiries for automated decision-making or profiling.

We do not add people to a marketing list simply because they have submitted an enquiry.

Lawful bases

Depending on the nature of the enquiry, we rely on one or more of the following lawful bases:

Steps before entering into a contract

Where someone asks us to provide information, discuss a service or take steps before a possible engagement.

Legitimate interests

Where it is necessary for our legitimate interests in responding to business enquiries, operating and securing the website, maintaining proportionate records and managing our business.

Legal obligation

Where we are required to use or retain information to comply with the law or applicable professional obligations.

Information submitted through the contact form is not processed on the basis of marketing consent.

Who we share information with

We may use trusted service providers to operate the website and manage communications.

These currently include:

• Lovable, which provides website hosting, cloud functionality and transactional email services
• Microsoft 365, which receives and stores emails sent to info@thethrivehub.co.uk
• Our IT and technical support providers where access is necessary to maintain or secure our systems
• Professional advisers where disclosure is necessary and appropriate
• Regulators, courts, law-enforcement bodies or public authorities where disclosure is required or permitted by law

Lovable processes website information on our behalf as a data processor.

We do not sell personal information.

We do not share enquiry information with advertisers or data brokers.

Contact-form delivery

Contact-form submissions are sent to info@thethrivehub.co.uk.

The website does not store completed enquiries in a separate customer database.

A short acknowledgement email is sent to the email address provided by the person submitting the form.

The submitted email address is used as the Reply-To address so that we can respond directly.

Spam and security controls

The contact form uses proportionate security and anti-spam controls, including:

• Form validation
• A hidden honeypot field
• Minimum form-completion checks
• Rate limiting
• Duplicate-submission controls

Technical information used for these controls is not retained longer than necessary for security and abuse prevention.

How long we keep information

Enquiries that do not result in a client engagement will normally be retained for up to 24 months after the last meaningful contact.

We may delete information earlier where it is no longer needed.

We may retain information for longer where this is reasonably necessary:

• To deal with an ongoing enquiry or dispute
• To establish, exercise or defend legal claims
• To comply with legal, regulatory or professional obligations

If an enquiry results in a client engagement, relevant information may become part of the client record. Client records are retained in accordance with the engagement terms, our client privacy information and applicable legal and professional requirements.

International transfers

Some technology providers may operate internationally or use subcontractors in other countries.

Where personal information is transferred outside the United Kingdom, we require appropriate safeguards to be used where required by data-protection law. These may include adequacy regulations or approved contractual protections.

Website hosting

The website’s Lovable Cloud environment has been provisioned in the European hosting region.

Security

We take appropriate technical and organisational measures to protect personal information.

These include controlled access, server-side validation, secure handling of credentials, spam controls and limiting the information stored by the website.

No method of transmitting or storing information can be guaranteed to be completely secure.

Individual rights

Depending on the circumstances, individuals may have the right to:

• Ask for access to their personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete information
• Ask us to restrict the use of information
• Object to processing based on legitimate interests
• Ask for information to be transferred in a portable format
• Withdraw consent where processing is based on consent

Not every right applies in every situation.

Requests can be sent to:

info@thethrivehub.co.uk

We may need to confirm the requester’s identity before responding.

Complaints

Anyone concerned about how we use their personal information should contact us first at:

info@thethrivehub.co.uk

They also have the right to complain to the Information Commissioner’s Office.

External websites

This website contains links to external websites and services, including WhatsApp.

When someone follows an external link, the external provider may collect and process information under its own privacy policy.

We are not responsible for the privacy practices of external websites.

Children

This website and our services are intended for businesses and adults.

We do not knowingly use the website to collect personal information from children.

Changes to this policy

We may update this policy if the website, our services or the way we use personal information changes.

The current version will always be published on this page.