Whats-Hub | Last updated: 9 July 2026 | Effective: 9 July 2026
This Privacy Policy explains how Whats-Hub (“Whats-Hub”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit our website at whats-hub.co.uk (the “Website”), create an account, and use our products and services including our WhatsApp message-sending application, our integration with the WhatsApp Business Platform via Meta’s Embedded Signup, and any related tools, dashboards and APIs (together, the “Services”).
Our role: When Whats-Hub sends broadcast or messaging campaigns on behalf of business clients, the client is the responsible party for the personal information in their own contact databases, and Whats-Hub acts as an operator, processing that information only on the client’s documented instructions. Whats-Hub is the responsible party for personal information it collects directly, such as website enquiries and its own client and supplier contacts.
We are committed to protecting your privacy and to handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where applicable, the Protection of Personal Information Act, 2013 (POPIA) of South Africa.
1. Who we are (Data Controller)
Whats-Hub is the data controller responsible for your personal information.
| Trading name | Whats-Hub |
|---|---|
| Registered company name | HBUFC Trading (Pty) Ltd |
| Company number | 2021/484119/07 |
| Registered address | 6 Riverside Terrace, Hout Bay, 7806, Western Cape, South Africa |
| Website | https://whats-hub.co.uk |
| Privacy contact email | [email protected] |
| Information Officer (POPIA) | Information Officer, [email protected] |
2. Scope of this policy
This policy applies to two broad groups of people:
(a) Our customers and Website visitors: businesses and individuals who visit our Website, register for an account, or use our Services to send WhatsApp messages.
(b) Message recipients / end-users: individuals whom our customers contact through the WhatsApp Business Platform using our Services. For these communications, our customer is typically the data controller and Whats-Hub acts as a data processor on their behalf, processing personal information only on their documented instructions. Meta Platforms Ireland Limited processes WhatsApp message data under its own terms.
3. Information we collect
3.1 Information you provide to us
| Category | Examples |
|---|---|
| Account & identity data | Name, business name, email address, phone number, password, job role. |
| Billing data | Billing address, VAT number, payment details (processed by our payment provider; we do not store full card numbers). |
| Business / onboarding data | Information you submit to set up WhatsApp messaging, including details provided during Meta’s Embedded Signup flow. |
| Message content & contact lists | Content of messages you send, message templates, and the recipient phone numbers and contact lists you upload or import. |
| Support & communications | Messages you send to our support team, survey responses and feedback. |
3.2 Information collected automatically
| Category | Examples |
|---|---|
| Usage & device data | IP address, browser type, device identifiers, pages viewed, features used, timestamps and log data. |
| Cookies & similar technologies | See section 9 (Cookies). |
| Delivery & status data | Message delivery, read and error statuses returned by the WhatsApp Business Platform. |
3.3 Information from third parties
When you connect your WhatsApp Business Account through Meta’s Embedded Signup, we receive business assets and tokens from Meta (such as your WhatsApp Business Account ID, phone number ID, business verification status and access tokens) so we can provide WhatsApp messaging services to you. We may also receive information from analytics providers and our payment processor.
4. WhatsApp Business Platform & Meta Embedded Signup
Our Services integrate with the WhatsApp Business Platform operated by Meta. When you onboard through Embedded Signup, Meta gathers business-related information and generates the WhatsApp assets needed to operate the platform, then grants our application access to those assets so we can provide you with messaging services.
Your use of WhatsApp messaging is also governed by Meta’s and WhatsApp’s own terms and policies, including the WhatsApp Business Terms of Service and the WhatsApp Business Data Processing Terms. You should review these in addition to this policy.
Important obligations for our customers. If you use our Services to message individuals, you are responsible for securing all necessary notices, permissions and consents (including a valid lawful basis and, where required, opt-in) to contact those individuals and to share their personal data with WhatsApp/Meta and with us. You must maintain your own published privacy policy and comply with applicable law. We will only process this data on your instructions and as described in our customer agreement.
Other than handling the content of message threads as needed to deliver the Service, we do not use data obtained from WhatsApp about a person you message for any unrelated purpose, and we do not sell personal information.
5. How we use your information and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Create and administer your account and provide the Services | Performance of a contract |
| Send WhatsApp messages on your instruction and report delivery status | Performance of a contract; or, for end-users, processing on behalf of our customer |
| Take payment and prevent fraud | Performance of a contract; Legitimate interests |
| Provide support and respond to enquiries | Performance of a contract; Legitimate interests |
| Secure, monitor and improve the Services | Legitimate interests |
| Send service and (where permitted) marketing communications | Legitimate interests; or Consent where required |
| Comply with legal, tax and regulatory obligations | Legal obligation |
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object (see section 8).
6. Sharing your information
We do not sell your personal information. We share it only with:
| Recipient | Purpose |
|---|---|
| Meta Platforms Ireland Ltd / WhatsApp | To deliver messages via the WhatsApp Business Platform. |
| Cloud hosting & infrastructure providers | To host and run the Website and Services. |
| Payment processors | To process payments (Xero and Yoco). |
| Analytics & communication tools | To understand usage and contact you (Google Analytics, Infobip and Anthropic). |
| Professional advisers & authorities | Where required by law, or to establish, exercise or defend legal claims. |
All processors are bound by contracts requiring them to protect personal information and process it only on our instructions.
7. International transfers
Some of our providers (including Meta) process data outside the UK and South Africa. Where we transfer personal information internationally, we rely on appropriate safeguards such as the UK’s adequacy regulations, the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, or, for POPIA, transfers permitted under section 72.
8. Your rights
Subject to conditions in the applicable law, you have the right to: access your personal information; request correction; request erasure; restrict or object to processing; data portability; and withdraw consent. You may also lodge a complaint with a regulator.
To exercise any right, contact us at [email protected]. We will respond within one month (UK GDPR) or as soon as reasonably possible (POPIA).
If you are a message recipient contacted by one of our customers, please direct rights requests to that business in the first instance, as they control that communication. We will assist them as their processor.
9. Cookies
We use cookies and similar technologies to operate the Website, remember your preferences, keep you signed in, and measure usage. You can control cookies through your browser settings and, where shown, our cookie banner.
10. Data retention
We keep personal information only for as long as necessary for the purposes set out above, then delete or anonymise it. Account and billing records are generally retained for the duration of your account plus any period required for tax and legal purposes (typically up to 6 years in the UK). Message content and recipient data processed on a customer’s behalf are retained according to that customer’s settings and our agreement with them. We review stored information regularly and clear out data that is no longer required, with a minimum clear-out cycle of three months where applicable. Where appropriate, we will give reasonable notice before information is deleted.
11. Security
We use appropriate technical and organisational measures including encryption in transit, access controls and monitoring to protect personal information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant regulator of any qualifying personal data breach as required by law.
12. Children
Our Services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes will be notified to you where required.
14. Contact us & complaints
For any privacy question or to exercise your rights, contact us at [email protected] or write to 6 Riverside Terrace, Hout Bay, 7806, Western Cape, South Africa.
UK: You may complain to the Information Commissioner’s Office (ICO), ico.org.uk, helpline 0303 123 1113.
South Africa: You may complain to the Information Regulator (South Africa), inforegulator.org.za.