Privacy Policy

Who we are

the hub is a podcast studio based in Benalmádena, Málaga. If you get in touch with us, book a session, or record with us, we handle a small amount of personal information about you. This policy explains what and why.

For the purposes of Spanish and EU data protection law (the GDPR and the LOPDGDD), the hub is the data controller for the information we collect from you.

What we collect

Only what we need. In practice, that's:

• When you enquire: your name, email, phone number if you give one, and whatever you write in your message.
• When you book: the same, plus your billing details (name, address, VAT number for invoicing) and any information you share about your show, guests or session needs.
• When you pay: we don't see or store your full card details. Payments go through Stripe or bank transfer, and we only receive confirmation the payment happened.
• When you record: the audio and video files themselves. We treat these as your content, not our data (see section 08).

Why we collect it

Three reasons, each with a legal basis under GDPR:

• To do what you asked us to do (answer your enquiry, hold your booking, deliver your files). Legal basis: performance of a contract, or steps taken at your request before entering one.
• Because the law says we have to (issuing invoices, keeping accounting records, complying with tax obligations). Legal basis: legal obligation.
• Because you said yes (marketing use of session clips, newsletter subscription). Legal basis: your consent, which you can withdraw at any time.

How long we keep it

Not longer than we need to. Enquiries that don't turn into bookings are deleted within 12 months. Booking records and invoices are kept for the period required by Spanish tax law (currently 4 to 6 years). Newsletter subscriptions are kept until you unsubscribe. Session files follow the retention rules in our Terms & Conditions.

Who we share it with

We do not sell your data. Ever. To anyone.

The only people who ever see your information are the service providers we need to run the business. They act on our instructions and are contractually required to protect your data:

• Google Workspace (email and file storage).
• ClickUp (booking and customer management).
• Stripe (payments, when card payment is used).
• Our accountant (only what's needed to file taxes correctly).

Some of these providers are based outside the EU. Where that's the case, we rely on the safeguards required by GDPR (Standard Contractual Clauses or an adequacy decision).

Your rights

You can, at any time, ask us to:

• Show you what data we hold about you (access).
• Correct anything that's wrong (rectification).
• Delete it (erasure).
• Limit what we do with it (restriction).
• Get a copy in a portable format (portability).
• Withdraw a consent you've given (for marketing use, etc.).

Email hello@thehubbenalmadena.com with your request. We'll respond within 30 days.

If you think we've handled your data badly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es). We'd rather you told us first so we can fix it, but that's your call.

Cookies & analytics

This website uses only the cookies strictly necessary to make it work (things like remembering your language choice). We don't use tracking cookies, we don't run advertising cookies, and we don't share you with third-party trackers.

If that ever changes, we'll ask you first with a proper cookie banner and update this page.

Recordings & your content

The audio and video from your session belong to you. We hold them for the retention window in our Terms, and only for that. We won't listen to, review, publish or share your recordings unless you've asked us to (or unless we're required to by law).

If, at booking, you tick the box saying we can use short clips of your session for marketing, that consent is separate and can be withdrawn any time by writing to us.

How we protect your data

Reasonable, sensible measures. Your data lives in Google Workspace and ClickUp, both of which use two-factor authentication and encryption in transit and at rest. Physical files (invoices for the accountant) are kept in a locked space at the studio. Access is limited to the people who need it to do their job.

If something goes wrong and there's a data breach that affects you, we'll tell you within 72 hours of finding out, and we'll tell the Spanish Data Protection Agency too, as required by law.

Children's data

This website and service are aimed at adults. We do not knowingly collect data from anyone under 14. If a minor is going to appear in a session, our Terms & Conditions cover how consent works, and their parent or guardian handles that on their behalf.

Changes to this policy

If we change how we handle your data in any meaningful way, we'll update this page and change the date at the top. For anything material, we'll tell you by email if we have one for you.

How to reach us

Questions about this policy, or a request about your data: hello@thehubbenalmadena.com. Or WhatsApp us on +34 630 173 760.