Terms & Conditions

Welcome to CitiHub. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal data when you visit and interact with our website.

1. Who we are & Contact Information

Website: CitiHub.co.uk
Company / Owner name: CitiHub
Contact Email: CitiHub@hotmail.com
If you have any questions about this privacy policy or our data practices, please contact us at the email above.

2. Scope — Who this policy applies to

This policy applies to all visitors, users, customers or other persons who access or use our website (collectively “Users”).

3. What data we collect

We may collect the following categories of personal data:

  • Identity & Contact Data: name, email address, phone number, postal address — when you provide them (e.g. via contact form, registration, booking, order, or inquiry).

  • Technical & Usage Data: IP address, browser type, device identifiers, operating system, access times, pages viewed — collected automatically when you visit the site (e.g. via cookies, server logs, analytics).

  • Transaction Data: if your website processes orders/bookings — order details, payment status (note: we do not store full payment card details if using a third-party payment processor).

  • Other Data: any other data you choose to share with us (e.g. messages through contact/support forms).

4. Why we collect data & lawful basis

We collect and process your data for the following purposes:

  • To respond to your enquiries, provide services, bookings or support. (lawful basis: contract / legitimate interest)

  • To operate, maintain, and improve our website — analyse usage, performance, manage security, fix bugs. (lawful basis: legitimate interest)

  • To send you updates or marketing (if you consent). (lawful basis: consent)

  • To fulfill legal obligations, or for record keeping if required by law (e.g. tax, accounting). (lawful basis: legal obligation)

5. Cookies & Tracking Technologies

We may use cookies or similar tracking technologies to collect technical and usage data. Some cookies are essential for the website’s functioning; others (like analytics or advertising cookies) are non-essential.

  • If non-essential cookies are used, we will seek your explicit consent before placing them.

  • You may manage or opt-out of cookies by adjusting your browser settings or via a consent banner/manager on the site (if implemented).

For more details, see our Cookie Policy (if available) or our cookie banner on first visit.

6. Sharing & Disclosure of Data

We do not sell your personal data. We may share your data in limited cases:

  • Service providers / processors: For example — hosting providers, payment processors, analytics providers, email/CRM services, or other third-party tools we use to run the site. We ensure any such third parties comply with data protection standards (Data Processing Agreements).

  • Legal or regulatory requirements: If required by law, or to respond to lawful requests (e.g. from courts, regulators).

  • Business transfers: In case of business reorganization, sale, merger — only if you are notified and data protection safeguards are maintained.

7. International Data Transfers

If we transfer data outside the UK (or to countries without equivalent data protection laws), we will do so only with appropriate safeguards (e.g. standard contractual clauses, data-hosting in compliant jurisdictions).

8. Data Retention

We keep your personal data only as long as needed to fulfill the purposes described above, unless a longer retention period is required by law. Once data is no longer needed, we will securely delete or anonymize it.

9. Data Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration. This includes secure connections (HTTPS), restricted access, regular backups, and other security practices.

However, no system can guarantee 100% security — if you suspect any breach, please contact us immediately.

10. Your Rights

Under applicable data protection law (e.g. UK GDPR and related regulation), you have certain rights, including:

  • Right to access your data

  • Right to rectification (correction)

  • Right to erasure (delete your data)

  • Right to restrict or object to processing

  • Right to data portability

  • Right to withdraw consent (if processing is based on consent)

To exercise any of these rights, contact us via the email given above. We will respond within a reasonable timeframe as required by law.

11. Marketing & Opt-out

If you have opted in to receive marketing communications, you can opt out at any time by contacting us or using the unsubscribe option provided in the communication.

We will not send marketing messages without valid consent (unless permitted under applicable law as a “soft opt-in”).

12. Children & Minors

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If we become aware we have collected data from someone under 16, we will delete it immediately (unless required for legal reasons).

13. Complaints / Contact for Data Protection

If you have any concerns or complaints about how we handle your data, please contact us at the email above. You also have the right to lodge a complaint with the relevant supervisory authority (for example, the Information Commissioner’s Office (ICO) in the UK).

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the “Last updated” date.
We encourage you to review this page periodically to stay informed about how we use your data.