Legal

Privacy Policy

Last updated: 27 August 2026

This policy is written in plain English so it's actually useful to you. It has not been reviewed by a solicitor — if you're relying on it for formal compliance purposes, have it checked before treating it as final.

1. Who we are

UK Student Hub (ukstudenthub.com) is operated by a UK-registered sole trader — not a limited company — contactable at info@ukstudenthub.com. For the purposes of UK data protection law, this person is the "data controller" for the personal data described below.

2. What data we collect

We only collect what's needed to provide the service you're using:

Account/profile: full name, email, password (handled entirely by our authentication provider, Supabase — we never see or store your password ourselves), university, city, nationality, phone number.
Airport pickup / accommodation bookings: name, email, phone, airport, destination, address, flight number, arrival date/time, passenger details.
Room / job / event listings you post: the listing details you enter, plus your contact email and (optionally) phone number, which are shown to other users once your listing is approved.
Driver applications: name, email, phone, area, vehicle and licence details.
Contact form and partnership enquiries: name, email, phone (if given) and your message.
Usage data: pages viewed, approximate device/browser type, and general location inferred from IP address — collected in aggregate through Google Analytics. We do not send your name, email, phone number, or message content to Google Analytics.

3. How we use it

To provide the service you asked for — process a booking, publish a listing, respond to your enquiry, review a driver application.
To send you confirmation and status-update messages related to a submission you made.
To moderate listings before they go live and to prevent spam/abuse.
To understand, in aggregate, how the site is used, so we can improve it (Google Analytics — only with your consent, see our Cookie Policy).

We do not sell your personal data, and we do not use it for third-party advertising.

4. Legal basis for processing

Under UK GDPR, we rely on: contract (to provide a service you've directly requested, like a booking or listing), consent (for optional analytics cookies), and legitimate interest (moderating listings and preventing fraud/abuse, in a way that doesn't override your own rights).

We use a small number of third-party services to run the site. Each only receives the data it needs to do its job:

Supabase — our database and authentication provider. Stores your account, bookings, listings and messages.
Google Analytics (GA4) — anonymised, aggregated usage statistics only, and only after you accept analytics cookies.
EmailJS — sends confirmation/notification emails for certain forms (e.g. driver applications).
getform.io — a form-relay service used for some submissions as a backup notification channel.
ntfy.sh — sends us a push notification when someone submits a form. These notifications contain only non-personal summary information (e.g. "new room listing in Manchester") — never your name, email or phone number.

We may also disclose data if required by law, or to protect the safety of our users.

6. Cookies

See our Cookie Policy for full detail on what we use and how to control it.

7. How long we keep it

We keep account data for as long as your account is active. Booking, listing, driver-application and enquiry records are kept for as long as reasonably necessary to provide support and maintain accurate records, and are deleted or anonymised when no longer needed. You can ask us to delete your data at any time — see Section 8.

8. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; correct it if it's wrong; ask us to delete it; restrict or object to how we use it; and receive a copy in a portable format. To exercise any of these, email info@ukstudenthub.com. You also have the right to complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data.

9. Children

UK Student Hub is intended for university-age international students. We do not knowingly collect data from children under 16.

10. International data transfers

Our service providers (Supabase, Google) may process data on servers outside the UK. Where that happens, they're required to provide equivalent protection to UK data protection standards (e.g. via standard contractual clauses).

11. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and database-level access controls that restrict who can read or change your information. No system is 100% secure, but we take reasonable steps to keep your data safe.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the latest version.

13. Contact

Questions about this policy or your data: info@ukstudenthub.com.