Legal

Data deletion

How to have your data deleted from Hubber — whether you are a business that subscribes to us, or an individual whose details are held by a business that uses us.

Last updated: 6 August 2026

To request deletion, email ryan@rrwebdesign.co.uk with the subject line "Data deletion request". Tell us who you are, which business the data relates to, and what you want deleted. There is no charge.

1. Work out which request you are making

Hubber is business software. Each business that subscribes gets its own private workspace and decides what data goes into it. That changes who can authorise a deletion, so start here.

You are…	Who can delete the data	What to do
A business that subscribes to Hubber	You can delete records yourself in the app, and you can ask us to delete the whole workspace.	See sections 2 and 3.
A client of a business that uses Hubber	That business decides — they are the data controller. Hubber only stores it for them.	Contact that business first. See section 4.
An employee or ex-employee of a business that uses Hubber	Your employer decides, and may be legally required to keep employment records for a period.	Contact your employer. See section 4.
Someone who received a WhatsApp message sent through Hubber	Reply STOP to opt out immediately. For deletion, contact the business that messaged you.	See section 5.

2. Deleting individual records yourself

If you subscribe to Hubber, most records can be deleted directly in the app by a user with the right permission — contacts, jobs, quotes, invoices, photos, documents, staff records, messages and so on.

An important limitation, stated plainly: deleting a client contact in the app removes the contact record itself. It does not automatically remove every job, invoice, quote, survey, photograph or message that mentions them. If you need a complete erasure — for example to answer a right-to-erasure request from one of your clients — email us and we will do it properly at the database level. Do not assume the in-app delete button has covered everything.

3. Deleting your whole account and workspace

Email us from the address on the account owner's login and ask for the account to be closed and its data deleted. We will confirm your identity as the account owner before acting, since this is irreversible.

[TO CONFIRM: whether a self-service "close my account and delete my data" control will be added — today this is handled by email]

What gets deleted

Every database record belonging to your workspace: contacts, companies, deals, jobs, surveys, quotes, invoices, job costs, activities, tasks and notes.
All staff and HR records: staff profiles, documents, contracts and signatures, compliance and DBS check records, driving licence details, training records, time entries, leave, payroll statements, performance reviews, employee-relations cases and incident reports.
Every file in private storage: job photos and video, staff document scans, staff photos, incident photos, expense receipts, chat attachments and your depot map.
Communications data: internal chat messages, notifications, message delivery records, inbound WhatsApp messages, and consent and opt-out records.
Access data: user logins and password hashes, sessions, NFC badge token hashes and push notification registrations.
AI assistant usage logs, including the questions your staff typed.
Any connected integrations are disconnected and their stored access tokens destroyed — your WhatsApp Business connection and your payment provider connection.

What we keep, and why

Billing and accounting records for your subscription. UK tax law requires these to be kept for six years, so they are excluded from deletion.
Records held by a third party under their own obligations — for example, your payment provider's record of a transaction, or your email provider's delivery logs. We can delete our copy but not theirs. Their retention is governed by their own policies.
Copies inside routine encrypted backups, until those backups rotate out. Deleted data is not restored to the live system, and the backups are overwritten within [TO CONFIRM: backup rotation period].

4. If a business that uses Hubber holds your data

Hubber does not decide what data that business keeps about you, so we cannot delete it on our own initiative — doing so would destroy their records without their instruction. Your route is:

Contact the business directly. They are the data controller and must respond to a deletion request within one month under UK GDPR.
If you cannot reach them, or they do not respond, email us at ryan@rrwebdesign.co.uk. We will identify the workspace, pass your request on, and support them in carrying it out. We will tell you what we have done.
If you are still not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

5. WhatsApp and other messages

Businesses using Hubber can send you WhatsApp and email messages about your job — and, with your consent, marketing messages.

Reply STOP to any WhatsApp message from a business using Hubber. This is processed automatically and immediately: your consent is withdrawn for both operational and marketing messages, and further messages are blocked at the point of sending.
Use the unsubscribe link at the bottom of a marketing email to stop those emails.
Opting out stops future messages. It does not by itself delete the record of the messages already sent, or your details in the business's records — for that, make a deletion request as above.

6. How long it takes

Stage	Target
We acknowledge your request	[TO CONFIRM: acknowledgement target — 72 hours proposed]
We verify who you are	We will ask for enough information to be sure the request is genuine, and no more than that.
Deletion completed	[TO CONFIRM: completion target — 30 days proposed], which is within the one-month statutory maximum under UK GDPR.
Backups overwritten	[TO CONFIRM: backup rotation period]

If a request is complex we may extend the deadline by a further two months, as UK GDPR allows. We will tell you within the first month if that happens, and why.

7. Is anything deleted automatically?

No — and we would rather say so than imply otherwise. Hubber has no scheduled purge, no automatic expiry and no archiving job. Records stay in a workspace until someone deletes them or the account is closed. The only two exceptions are expired login sessions, which are cleared automatically, and push notification registrations, which are removed when a device stops accepting them.

Businesses using Hubber should therefore set and apply their own retention schedule for client and staff records, rather than relying on the software to age data out.

8. Contact

ryan@rrwebdesign.co.uk · gethubber.com · [TO CONFIRM: registered company name and registered office address]

See also our privacy policy and terms of service.