Privacy policy
Last updated 30 October 2026
House Hub Studio is software for creative media agencies. It is owned by House Hub Media and Cor Meum Ltd, and operated by Cor Meum Ltd, a company registered in England and Wales (company number 16670739), registered office 116 Wards Road, Ilford, England, IG2 7AZ ("we", "us"). This policy explains what personal data we handle, why, and your rights. Questions: [email protected].
Who is responsible for your data
When you use this website or have a House Hub Studio account, Cor Meum Ltd decides how your data is used (we are the "controller").
When an agency uses House Hub Studio to run its work (its clients, projects and media), the agency is the controller of that data and we process it on the agency's behalf, under our agreement with them (we are a "processor" or "service provider"). If you are a client of an agency, contact the agency first about your data; we will help them respond.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account details | Name, email, role, a securely hashed password (never the password itself) | To give you access and keep your account secure |
| Agency work | Clients' names and contact details, project briefs, locations, shoot times, team assignments | To run the service for the agency |
| Media files | Photos, videos and graphics uploaded to a project | To store, process and deliver them |
| Sign-in and security data | IP address, device and browser, sign-in times, actions taken in the app | To keep accounts secure, prevent abuse and keep an audit history |
| Emails we send | Recipient, template, delivery status (delivered, bounced, complained) | To deliver invites and updates and handle bounces |
| Website enquiries | Name, work email, agency and your message from the contact form | To reply to you |
Our lawful bases under UK GDPR are: performing our contract with you or your agency; our legitimate interests in running a secure, reliable service and replying to enquiries; and legal obligations. We do not sell or "share" personal information (as California law defines it), and we do not use it for advertising.
Who we share it with
We use these providers to run the service. Each only processes data on our instructions.
| Provider | What for |
|---|---|
| Google Cloud | Hosting the application and database (United States) |
| Cloudflare | Website hosting, file storage, network security, bot protection on forms |
| Resend | Sending email |
| Square | Payments, when an agency turns them on |
| Sentry | Error reports, without message contents or passwords |
| House Hub Media | As co-owner, for support and product decisions, under confidentiality |
We may also disclose data if the law requires it, or to protect our users and the service. If the business changes hands, data would transfer under this policy.
International transfers
Some providers process data in the United States. Where data leaves the UK, we rely on the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge, through our providers' terms.
How long we keep it
- Account and agency data: while the account is active, then deleted within 90 days of the agency closing its account, unless the law requires longer.
- Unfinished uploads: 7 days. Webhook records: 90 days.
- Security and audit logs: up to 13 months.
- Website enquiries: up to 24 months after our last contact with you.
Cookies
We only use cookies needed for the service to work: a session cookie when you sign in, and security cookies set by Cloudflare. We do not use analytics or advertising cookies.
Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent. California residents can also ask what personal information we collect and how it's used, and will not be treated differently for asking. Email [email protected]; we'll reply within one month (45 days under California law). For data an agency controls, we'll pass your request to them.
You can complain to the UK Information Commissioner's Office (ico.org.uk) if you're unhappy with how we handle your data.
Security
Data is encrypted in transit, each agency's data is separated in the database, original files are only reachable through short-lived signed links, and access inside the company is limited to people who need it.
Children
House Hub Studio is for businesses and is not intended for anyone under 16.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account owners by email.