Legal
Privacy Policy
What personal data FMHub Global collects, why, who it is shared with, and your rights.
Last updated: 30 October 2026
1. Who we are
FMHub Global Ltd ("FMHub Global", "we", "us") operates fmhubglobal.com. We are the data controller for the personal data described in this policy. Contact us about anything in it at admin@fmhubglobal.com.
2. What we collect and why
| Data | When | Why | Lawful basis (UK GDPR) |
|---|---|---|---|
| Name, email address, password (stored only as a one-way hash) | You create an account | To provide your account and log you in | Contract |
| Membership tier, subscription status, Stripe customer reference | You subscribe | To give you the access you have paid for | Contract |
| Name, work email, job title, organisation, country, area of FM work, notes | You submit a founding member application or organisation enquiry | To review and reply to your application or enquiry | Legitimate interests / steps before a contract |
| Company name, contact name, work email, phone, job title, country and company size (and your billing address and payment details, which Stripe collects and holds) | You apply for a Professional, Business or Enterprise membership | To review your application, confirm your details and set up your membership and billing | Contract |
| A record that you confirmed your email address | You click the link we email you | To confirm the address is yours before you apply, subscribe or download | Legitimate interests |
| Your saved FMHub assessment scores (overall, by category and date) | You choose to save a result | To show you your history and progress. You can delete any saved result | Contract / consent |
| Anonymous counts of button clicks, template views and assessment starts and completions (event name and page only) | You use the site, unless your browser sends Do Not Track or Global Privacy Control | To understand how the site is used. No IP address, cookie or identifier is stored with these counts | Legitimate interests |
| Your name, email address and a short reference, stamped into each template you download | You download a template | To show who a copy was licensed to, so we can trace copies that are shared without our approval | Legitimate interests |
| Your choice to be contactable by FMHub-listed suppliers, when and how you made it, and a log of any change | You tick the box at registration or switch it on in your account | To let suppliers you agreed to hear from message you. Suppliers see your first name, last initial, organisation and region (never your email address); FMHub forwards their messages, and you can stop them at any time with one click | Consent (you can withdraw it at any time) |
| Company details, contact name, email, phone, services, accreditations | A supplier registers for the directory | To verify and publish the listing the supplier asked for | Contract / consent |
| Content you enter in the Workspace, audits, assessments and FMHub AI | You use those tools | To store and show your work back to you | Contract |
| Technical data (IP address, browser, request logs) | Any visit | Security, preventing abuse, fixing faults | Legitimate interests |
We do not sell personal data, and we do not use advertising trackers. With your consent, we use Google Analytics to understand how the site is used (see section 5).
3. Payments
Payments are handled by Stripe. Your card details go directly to Stripe and are never seen or stored by FMHub Global. Stripe's own privacy policy applies to the data it processes: stripe.com/gb/privacy.
4. Who we share data with
We use a small number of service providers ("processors") who handle data only on our instructions:
- Contabo — server hosting for the website and database.
- Stripe — subscription billing and payment processing.
- Brevo — sending account, application and notification emails.
- Google (Gmail) — our admin@fmhubglobal.com inbox, where enquiries arrive.
- Google (Analytics) — only if you accept analytics cookies: pages visited, approximate location, device and browser details, used to see how the site is used.
- Anthropic — only if you use FMHub AI: the question you type is sent to Anthropic's Claude model to generate an answer. Don't include personal data about other people in FMHub AI questions.
Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement/Addendum to protect it.
We may also disclose data where the law requires it.
5. Cookies
We set a secure, HttpOnly session cookie that keeps you logged in. It is strictly necessary for the service you have asked for, so it does not need consent.
If you accept analytics cookies, Google Analytics sets cookies named _ga and _ga_* (kept for up to 2 years) to count visits and see which pages are used. They are not set unless you click Accept, and you can change your choice at any time using Cookie settings (also in the footer). We do not use advertising cookies. Google's privacy policy: policies.google.com/privacy.
Training videos on the Cleaning Standards page are embedded from YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set YouTube cookies until you play a video. The Supplier Registration page loads fonts from Google Fonts, which means your browser connects to Google's servers.
6. How long we keep it
- Account data — for as long as your account is open, then deleted within 90 days of closure unless we need it for the reasons below.
- Billing records — 6 years, to meet UK tax and accounting rules.
- Applications and enquiries that don't lead to membership — up to 24 months.
- Supplier listings — until the supplier asks for removal or the listing is withdrawn.
- Saved assessment results — until you delete them or your account is closed.
- Records of consents you have given or withdrawn — for as long as your account is open, and for a limited time afterwards as proof of consent.
7. Your rights
Under UK GDPR you can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent where we rely on it. Email admin@fmhubglobal.com and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office: ico.org.uk. Members in the UAE also have rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and we will honour requests made under it.
8. Security
Passwords are hashed with Argon2, all traffic is encrypted over HTTPS, and access to member data is restricted to the founder and authorised administrators, apart from the limited view that listed suppliers have of members who have agreed to be contacted (first name, last initial, organisation and region, never an email address).
9. Changes
If we change this policy in a way that matters, we will update the date above and, for significant changes, email account holders.