30 mins . No prep needed . No obligation
Last updated: 17th of July 2026
UPSKILLHUBS LIMITED, trading as Uhubs (“Uhubs”, “we”, “our” or “us”), is committed to protecting your privacy and handling personal data responsibly, securely and transparently.
This Privacy Policy explains how we collect, use, store, share and protect personal data when individuals use the Uhubs platform, visit our website, participate in assessments, access analytics, receive AI-generated insights, or otherwise engage with our services.
Uhubs provides workforce capability, performance and behavioural intelligence solutions designed to help organisations understand skills, performance drivers, coaching opportunities, development needs and capability gaps across teams.
UPSKILLHUBS LIMITED is registered in England and Wales under company number 11869565.
Our registered office is:
4th Floor, Silverstream House
45 Fitzroy Street
London
W1T 6EB
United Kingdom
For the purposes of UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (“EU GDPR”), Uhubs acts as either a Data Controller or Data Processor depending on the context in which personal data is processed.
If you have any questions about this Privacy Policy or our data practices, please contact:
Privacy Team
UPSKILLHUBS LIMITED trading as Uhubs
Email: privacy@uhubs.ai
Website: www.uhubs.ai
Uhubs acts in different capacities depending on the nature of the processing.
When organisations use Uhubs to conduct assessments, manager reviews, peer reviews, benchmarking, performance analytics, coaching programmes, AI-generated insights or workforce capability initiatives, the customer organisation acts as the Data Controller and Uhubs acts as a Data Processor.
In these circumstances, Uhubs processes personal data only in accordance with the customer’s instructions and the applicable contractual agreements, including any Data Processing Agreement.
Where Uhubs acts as a Data Processor, it processes personal data strictly on the documented instructions of the customer and does not determine the purposes of that processing. Uhubs’ processor commitments, including restrictions on the use of AI, on benchmarking and on international transfers, are set out in the applicable Data Processing Agreement.
Questions regarding employee data, assessment results, manager reviews, peer reviews, performance data, CRM data, call intelligence data or workforce analytics should generally be directed to the relevant employer or customer organisation.
Uhubs acts as a Data Controller in relation to personal data processed for its own business purposes, including: website visitors, sales enquiries, marketing communications, customer relationship management, customer support, supplier management, recruitment, business administration, and security and compliance.
Depending on how our services are used, we may collect and process the following categories of personal data.
Name, business email address, job title, employer, department, team, manager or reporting line information, user role and permissions, and login and authentication information.
Self-assessment responses, manager review responses, peer review responses, coaching and development inputs, skills and competency scores, capability ratings, blindspot analysis, development priorities, and user comments and free-text responses.
Where provided by a customer or connected system: quota attainment, revenue performance, sales performance metrics, pipeline metrics, forecasting metrics, CRM activity data, customer success metrics, account management metrics, and productivity and activity indicators.
Where enabled by a customer, Uhubs may connect with customer systems, including Salesforce, Microsoft Dynamics, HubSpot, and other CRM or business systems connected through customer-approved APIs. The data processed will depend on the configuration agreed with the customer.
Where enabled by a customer, Uhubs may process information obtained from third-party communication, meeting or conversation intelligence platforms through customer-approved APIs. This may include call transcripts, meeting summaries, conversation analytics, coaching observations, communication patterns, call-related performance indicators, and sales methodology or process indicators.
Uhubs may create aggregated, anonymised or de-identified benchmark datasets to provide comparative insights by industry, geography, company size, function, role type, performance cohort, capability area, seniority level, and sales motion. Where benchmarking is produced, Uhubs aims to ensure that individuals are not directly identifiable from aggregated benchmark outputs.
IP address, browser type, device information, operating system, usage logs, session activity, authentication events, platform interaction data, error logs, and security logs.
Where AI-powered features are enabled, we may process information submitted to generate summaries, recommendations, coaching suggestions, analytical outputs, reports and insights. This may include assessment data, review data, CRM data, call intelligence data, platform usage data and other customer-approved inputs.
Uhubs does not intentionally require or request special category data, such as health information, racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data or sexual orientation, as part of standard platform use.
Customers and users should not submit special category data into Uhubs unless there is a lawful basis for doing so and this has been agreed with Uhubs in writing where required.
If special category data is included in free-text fields, call transcripts, CRM notes or other customer-provided sources, Uhubs will process that information only in accordance with the customer’s instructions and applicable data protection requirements.
We may collect personal data from: individuals who use the Uhubs platform, customer organisations, employers or sponsoring organisations, managers and colleagues participating in reviews, CRM systems connected by customers, call intelligence or communication platforms connected by customers, website forms, sales and marketing interactions, customer support communications, authentication providers, and analytics and security tools.
Uhubs processes personal data for the following purposes.
We use personal data to provide access to the Uhubs platform, manage user accounts, authenticate users, configure user permissions, deliver reports, dashboards and analytics, provide customer support, and maintain platform performance.
We use personal data to deliver capability assessments, process self-assessments, manager reviews and peer reviews, generate capability scores, identify strengths and development areas, and support coaching and development initiatives.
We use personal data to analyse performance data, identify capability gaps, compare performance against skills and behaviours, support sales effectiveness initiatives, support customer success and account management development, provide trend analysis, and help organisations understand performance drivers.
Where enabled by customers, Uhubs may use AI technologies to generate summaries, produce coaching recommendations, identify patterns and trends, generate capability insights, support reporting and analysis, assist users in interpreting platform data, and suggest development actions.
Capability and competency scores are calculated by the Uhubs platform using defined algorithms, not generated by artificial intelligence. Where AI is used, it draws on those calculated scores to produce insights, summaries and recommendations; it does not produce the scores themselves.
Uhubs does not make solely automated decisions, including profiling, that produce legal effects concerning individuals or similarly significantly affect them. AI-generated and platform-generated outputs are decision-support tools intended for review and interpretation by a human manager, administrator or other authorised user before any action is taken. See also Section 7.
We may use aggregated, anonymised or de-identified information to improve our products and services, improve our assessment frameworks, develop benchmark datasets, produce industry insights, analyse platform effectiveness, and improve reporting and analytics.
Product improvement, benchmarking and industry-insight activities use aggregated, anonymised or de-identified information that does not identify any individual or customer. Uhubs does not use identifiable customer personal data, call transcripts, CRM exports, pricing information, negotiation content or roleplay content to train, fine-tune or otherwise improve any foundational, shared or third-party AI model, nor to develop or improve Uhubs’ products. Such identifiable information is not used in marketing or case-study materials except with the customer’s prior written consent.
We use personal data to maintain platform security, detect and prevent misuse, monitor authentication events, investigate security incidents, comply with legal obligations, protect customer data, and enforce contractual rights.
Where Uhubs acts as Data Controller, we may use personal data to respond to enquiries, manage customer relationships, send relevant business communications, provide product updates, share marketing communications where permitted by law, and manage events, webinars and customer communications.
Where Uhubs acts as a Data Controller, we process personal data under one or more lawful bases, set out in the table below. The specific legitimate interests we rely on are described beneath the table.
Providing access to Uhubs services
Managing customer relationships
Customer support
Website administration
Security monitoring
Product improvement
Business analytics
Marketing communications
Recruitment activities
Legal and regulatory obligations
Establishing, exercising or defending legal claims
Contract
Contract
Contract
Legitimate interests
Legitimate interests
Legitimate interests
Legitimate interests
Consent and/or legitimate interests
Legitimate interests
Legal obligation
Legitimate interests and/or legal obligation
Where we rely on legitimate interests, the specific interests we pursue are: keeping our website secure, functional and available (website administration); protecting our systems, customers and users from unauthorised access and misuse (security monitoring); developing and improving our products using aggregated, anonymised or de-identified data (product improvement); understanding how our services are used so we can operate and improve our business (business analytics); promoting our services to existing customers and prospects who would reasonably expect to hear from us, in compliance with applicable direct marketing law (marketing communications); assessing and progressing job applications (recruitment); and establishing, exercising or defending legal claims.
Where Uhubs acts as a Data Processor on behalf of customer organisations, processing is carried out in accordance with customer instructions and applicable contractual agreements.
The customer organisation is responsible for identifying and communicating the appropriate lawful basis for processing employee, worker, contractor, manager, CRM, call intelligence, performance or assessment data submitted to Uhubs.
Uhubs provides workforce capability, behavioural and performance intelligence services.
Our services may involve capability assessments, self-assessments, manager reviews, peer reviews, performance analysis, benchmarking, trend identification, AI-generated recommendations, skills and competency scoring, blindspot analysis, and coaching recommendations.
These activities may constitute profiling under applicable data protection laws.
Where Uhubs acts as a Data Processor, any profiling is carried out only on the customer’s documented instructions. The customer remains responsible for identifying the lawful basis for the profiling and for obtaining any consent or providing any notice required under applicable law.
Uhubs does not make solely automated decisions that produce legal or similarly significant effects about individuals. Uhubs’ scoring, profiling and AI-generated outputs are designed to inform and support decisions made by a human manager, administrator or other authorised user of the customer’s platform.
Profiling is used to generate insights, identify strengths and development opportunities, support coaching activities, provide benchmarking information and help organisations understand capability and performance trends.
Benchmarking outputs are generated using aggregated, anonymised or de-identified datasets and are designed to provide comparative insights across industries, functions, regions, role types and performance cohorts.
Cross-company benchmarking operates only on aggregated and anonymised competency and capability scores. The underlying raw inputs a customer provides, including call transcripts, CRM exports, pricing data, negotiation scripts and roleplay content, remain within that customer’s own instance, are used solely to generate that customer’s own coaching and development outputs, and are never pooled with, compared against, or made visible across other customer accounts.
Uhubs does not recommend that assessment scores, benchmark results, profiling outputs or AI-generated outputs are used as the sole basis for employment, promotion, compensation, disciplinary or termination decisions.
Customers are responsible for ensuring that their use of Uhubs insights complies with applicable employment, privacy and data protection laws.
Uhubs may use artificial intelligence technologies to support analysis, reporting, coaching recommendations, summarisation and insight generation. AI-powered functionality may be used to analyse assessment data, generate coaching recommendations, identify patterns and trends, produce summaries and reports, support benchmarking and workforce analytics, assist users in interpreting platform data, and support development planning.
Uhubs currently uses third-party AI providers, including Anthropic, to deliver certain AI-enabled functionality.
Uhubs does not make solely automated decisions that produce legal or similarly significant effects concerning individuals. AI-generated outputs are intended to support human decision-making and should not be relied upon as the sole basis for employment, promotion, compensation, disciplinary or termination decisions.
AI outputs may contain inaccuracies, omissions or recommendations that require human review and validation.
Where Uhubs acts as a Data Processor for a customer, the following safeguards apply to AI processing of that customer’s personal data and confidential information: (a) the data is not entered into any public or consumer AI service (such as the public versions of ChatGPT, Gemini or Claude); (b) the data is not used to train, fine-tune, retrain or otherwise develop or improve any foundational, shared or third-party AI model; and (c) AI processing is carried out only through secured, enterprise-grade interfaces operating under terms that provide for zero retention of the data for model-training purposes. Details of AI subprocessors and the applicable safeguards are set out in Uhubs’ subprocessor information and the applicable Data Processing Agreement.
Uhubs implements governance, security and contractual safeguards designed to support the responsible use of AI technologies.
Uhubs may share personal data with the following categories of recipients.
Uhubs does not sell personal data. Where Uhubs acts as a Data Processor, it shares customer personal data only with the sub-processors approved under the applicable Data Processing Agreement, as the customer otherwise instructs in writing, or as required by law.
Assessment participants, employees, contractors, managers and users may have their information made available to their employer or sponsoring organisation in accordance with the services being provided. This may include assessment results, review outputs, dashboards, reports, AI-generated insights, benchmarking outputs and performance analytics.
Uhubs engages trusted third-party service providers to support the operation, delivery, security and administration of its services. Depending on the services used and the customer’s configuration, personal data may be processed by the following categories of providers:
Uhubs requires its service providers to process personal data only for the purposes for which they have been engaged and subject to appropriate contractual, confidentiality, security and data protection obligations. Where Uhubs acts as a Data Processor, customer personal data is shared only with authorised subprocessors in accordance with the applicable Data Processing Agreement, the customer’s documented instructions, or as required by law.
The table below lists key subprocessors and providers, including where they process data. This list is reviewed and kept up to date as providers are added or removed.
Where customers connect third-party systems to Uhubs, such as CRM platforms, call intelligence tools or communication platforms, data may flow between Uhubs and those systems in accordance with the customer’s configuration and instructions.
Uhubs may disclose personal data where required by law, regulation, court order, lawful governmental request or to establish, exercise or defend legal claims.
If Uhubs undergoes a merger, acquisition, restructuring, financing, investment transaction or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate safeguards.
Where personal data is processed on behalf of a customer, that data remains subject to the applicable Data Processing Agreement, which continues to govern the data for as long as Uhubs holds it.
Uhubs may process personal data in countries outside the United Kingdom and, where applicable, the European Economic Area.
This may occur where our hosting providers, infrastructure providers, authentication providers, analytics providers, AI providers, CRM providers, communication providers or service partners operate internationally.
For example, Uhubs currently uses Supabase infrastructure in the United States and Auth0 authentication services in the European Union. Certain AI, infrastructure or software providers may also involve processing outside the United Kingdom or European Economic Area.
Where personal data is transferred internationally, Uhubs implements appropriate safeguards designed to protect personal data and comply with applicable data protection laws. These safeguards include UK International Data Transfer Agreements; UK Addendums to the EU Standard Contractual Clauses; the UK–US Data Bridge, where the receiving party is certified under the EU-U.S. Data Privacy Framework and its UK extension; adequacy regulations recognised under UK or EU law; contractual safeguards; technical and organisational security measures; and transfer risk assessments where required.
A copy of the specific safeguard relied on for any given transfer is available on request by contacting privacy@uhubs.ai.
Customers with specific data residency requirements may contact Uhubs to discuss UK or EU hosting options where available. Uhubs may be able to host or migrate customer data to UK or EU infrastructure where this is agreed contractually and technically feasible.
Uhubs retains personal data only for as long as necessary to fulfil the purposes for which it was collected, perform contractual obligations, comply with legal requirements and protect interests.
Unless otherwise agreed with a customer in writing:
Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised or de-identified unless continued retention is required by law, contractual obligation or a legitimate business purpose consistent with the original reason for processing.
Customers may request earlier deletion of customer platform data, subject to contractual terms, legal obligations and technical feasibility.
Where customer platform data is processed under a Data Processing Agreement, the deletion or return timeframe set out in that Agreement applies. On termination or expiry, Uhubs will delete or return that data within the period specified in the Data Processing Agreement and will provide a written certificate of destruction.
Where customer data contributes to benchmarking, industry insights or statistical analysis, Uhubs may retain aggregated, anonymised or de-identified information that no longer identifies individuals or organisations. Such anonymised datasets may be retained indefinitely for research, benchmarking, product improvement and analytical purposes.
Uhubs maintains technical, organisational and administrative measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
Security measures include encryption of personal data in transit and at rest; access controls and role-based permissions; multi-factor authentication on critical systems; audit logging and security monitoring; secure development practices; vendor risk assessments; data minimisation controls; internal access restrictions; incident response procedures; pseudonymisation or anonymisation of data where appropriate; third-party penetration testing; and a designated data protection lead responsible for data protection matters, reachable at privacy@uhubs.ai.
Uhubs’ information security and data-governance controls are documented in its Trust Center and are designed and maintained in alignment with the Cloud Security Alliance CAIQ (v4.0.3) and the SOC 2 criteria. These controls are reviewed at least annually.
Where Uhubs acts as a Data Processor, it will notify the relevant customer without undue delay of any personal data breach affecting that customer’s data. Specific notification timeframes may be agreed contractually in the applicable Data Processing Agreement.
Independent security documentation, including third-party penetration-test reports, can be made available to customers on request.
No system can guarantee absolute security. However, Uhubs continually reviews and improves its security controls.
Customers are responsible for managing their own user access, permissions, connected systems and internal use of Uhubs outputs.
Where Uhubs acts as a Data Controller, individuals may have the following rights under applicable data protection laws: right of access; right to rectification; right to erasure; right to restrict processing; right to object; right to data portability; rights relating to automated decision-making and profiling; and the right to withdraw consent where processing is based on consent.
Requests can be submitted to privacy@uhubs.ai. We will normally respond within one calendar month. We may request additional information to verify identity before responding.
This includes the right to request a copy of the personal data Uhubs holds about you and the right to request its deletion.
Where Uhubs acts solely as a Data Processor on behalf of a customer organisation, requests relating to workforce assessments, employee data, customer programme data, CRM data, call intelligence data, performance analytics or platform outputs should generally be directed to the relevant employer or customer organisation. If we receive such a request directly, we may refer the request to the relevant customer organisation where appropriate.
If you are located in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority, in addition to the UK Information Commissioner’s Office referenced in Section 19.
Uhubs uses cookies and similar technologies, including analytics and advertising pixels, to operate the website, improve website performance, understand website usage, enhance user experience, support security and authentication, and analyse marketing effectiveness.
A full list of the cookies and similar technologies used on this website, including their name, provider, purpose and duration, is set out in our Cookie Policy.
Non-essential cookies, including analytics and advertising cookies, are only placed with your prior consent, given via the cookie banner presented on your first visit. You can change or withdraw your consent at any time through the cookie settings link on our website or through your browser settings.
Where permitted by law, Uhubs may send marketing communications to business contacts, customers, prospects or individuals who have expressed interest in our services. These may include product updates, event invitations, research insights, benchmark reports, thought leadership, and commercial information about Uhubs services.
Individuals can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting privacy@uhubs.ai. We may continue to send service-related or contractual communications where necessary.
If you provide your mobile number and opt in to receive SMS messages from Uhubs (Upskillhubs Limited), we use your number only for the specific category of message you consented to receive: (i) customer care and service-related notifications, such as consultation, webinar and event reminders, and/or (ii) marketing and promotional messages, where you have separately opted in. Consent to receive marketing messages is not a condition of purchase.
We do not sell, share, or transfer mobile numbers or SMS opt-in consent to any third parties or affiliates for marketing or promotional purposes. Mobile information is shared only with service providers that help us deliver these messages, and otherwise only as required by law, in connection with a business merger or acquisition, or with your consent.
Message frequency will vary. Message and data rates may apply. Reply HELP for help or STOP to cancel at any time.
Uhubs services are designed for business and professional users and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
Our website or platform may contain links to third-party websites, applications or services. Uhubs is not responsible for the privacy practices, content or security of third-party websites or services. Users should review the privacy policies of those third parties before providing personal data.
Uhubs may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, products, services, suppliers or business practices. Updated versions will be published on our website with a revised effective date. Material changes may be communicated to customers or users where appropriate.
If you have any questions about this Privacy Policy or our handling of personal data, please contact:
Privacy Team
UPSKILLHUBS LIMITED trading as Uhubs
4th Floor, Silverstream House
45 Fitzroy Street
London
W1T 6EB
United Kingdom
Company Registration Number: 11869565
Email: privacy@uhubs.ai
Website: www.uhubs.ai
If you are in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) if you believe your personal data has been processed unlawfully. If you are in the EEA, see Section 12 regarding your local supervisory authority.
A member of our team will be in touch with you to find an available slot!
Pricing scales based on team size and number of assessments
john.doe@uhubs.co.uk
