Privacy Policy

1. Who We Are

This website and the services described in it are operated by Unitas Global Ltd, a company registered in England and Wales. Unitas Global Ltd is the data controller for the personal data described in this policy.

• Registered name: Unitas Global Ltd
• Registered in: England and Wales
• Company number: 12562965
• Registered office: Suite Ra01 195-197 Wood Street, London, England, E17 3NU
• Contact email: admin@unitas-global.com
• Website: unitas-global.com

Unitas Global Ltd also trades as Unitas Hub (unitas-hub.com), Unitas Hosting (unitas-hosting.com) and Gramloyal (gramloyal.com). Those sites publish their own policies covering their own services. Where a service is delivered by Unitas Global Ltd under any of those brands, Unitas Global Ltd remains the responsible legal entity.

2. What This Policy Covers

This policy explains how we collect, use, store and protect personal data when you:

• visit unitas-global.com
• contact us by email or through the live chat on this site
• authorise Unitas Global Ltd to manage a social media account on your behalf through our Hub Social service (see section 6)

It does not cover third-party websites we link to. Those sites have their own policies and we are not responsible for them.

3. What Data We Collect

3.1 Information you give us

If you email us or start a live chat, we collect what you choose to send: typically your name, email address, company, and the content of your message. We use this to answer you.

We do not collect payment card details, passwords, or special category data (such as health, ethnicity or political opinions) through this website.

3.2 Information collected automatically

If you accept cookies, this website loads two services operated by Unitas Global Ltd on our own infrastructure:

• Live chat (Hub Inbox), which records your chat messages and a session identifier so a conversation can continue across pages.
• Website analytics (Hub Marketing), which records pages viewed, approximate visit timing and referring source, in order to understand how the site is used.

If you decline cookies, neither service loads and neither collects anything.

We do not use advertising networks, third-party ad trackers, cross-site tracking, or automated profiling that produces legal or similarly significant effects.

4. Cookies and Consent

When you first visit this site you are shown a cookie notice with an explicit Accept and Decline choice. Nothing beyond what is strictly necessary to display the page runs until you choose.

• Accept: live chat and website analytics load, and your choice is stored in your browser so you are not asked again.
• Decline: neither service loads. Your choice is stored so you are not asked again.

You can change your mind at any time by clearing this site's data in your browser, which will make the notice appear again on your next visit. You can also block or delete cookies through your browser settings.

5. Legal Bases for Processing

Under UK GDPR we rely on:

• Consent, for live chat, website analytics and any marketing email you have opted into. You may withdraw consent at any time.
• Legitimate interests, for responding to business enquiries you send us and for keeping our systems secure. We have considered your rights and do not believe this processing overrides them.
• Contract, where processing is necessary to deliver a service you have engaged us for.
• Legal obligation, where we must retain records for tax, accounting or regulatory purposes.

6. Social Media Platform Integrations (Hub Social)

Unitas Global Ltd provides a managed social media publishing service called Hub Social. This section explains exactly what that service does with data from connected social media platforms.

6.1 Which platforms

Hub Social can connect to Instagram, Facebook, TikTok, LinkedIn, X, YouTube, Google Business Profile, Pinterest and Telegram. Only the platforms a client chooses to connect are used.

6.2 How a connection is authorised

A connection is only ever created when the account holder signs in to that platform themselves and grants permission through the platform's own authorisation screen. We never ask for, store, or use social media passwords. The account holder can revoke that permission at any time, either from within Hub Social or from the platform's own settings, and the connection stops working immediately.

6.3 What we access and why

When an account is connected, we access only what is needed to schedule, publish and report on content:

• the account identifier, username and profile or page name, so the correct account is shown and posted to
• the ability to publish posts, images and video that the account holder or we, acting on their instruction, have created
• comments on that account's own posts, where comment management has been enabled
• engagement and reach statistics for that account's own posts, so we can report performance

We do not access private messages unless a client has separately enabled that feature, we do not read other users' personal data, we do not download follower lists, and we do not access content belonging to accounts that have not authorised us.

6.4 How we store and protect it

Platform access tokens are stored on our own servers within the UK and EU and are used solely to operate the service for the account that granted them. Each client's connections are isolated from every other client's. Tokens are refreshed automatically where the platform supports it.

6.5 Retention and deletion

Access tokens are deleted when the account holder disconnects the account or when the client relationship ends. Scheduled and published post records are retained for up to 24 months so clients can review their own publishing history, then deleted. A client may request earlier deletion of their social media data at any time by emailing admin@unitas-global.com, and we will action it within 30 days.

6.6 What we never do

We do not sell, rent or share social media platform data with third parties. We do not use it for advertising, ad targeting or building profiles of individuals. We do not use it to train machine learning models. We do not combine it with data from other clients.

7. Who We Share Data With

We do not sell personal data. We share it only with service providers who help us operate, and only to the extent needed:

• Hosting and infrastructure providers, for servers and storage
• Email delivery providers, for sending transactional and marketing email
• Domain and DNS providers
• Payment and accounting providers, for billing

Each is bound by contract to protect the data and to use it only on our instructions. We may also disclose data where required by law.

8. Where Your Data Is Held

Our infrastructure is located in the United Kingdom and the European Economic Area. Where any provider processes data outside the UK or EEA, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

9. How Long We Keep Data

• Enquiry emails and live chat transcripts: up to 24 months from last contact
• Website analytics: up to 12 months
• Social media platform data: as set out in section 6.5
• Client records, contracts and financial records: 7 years, to meet UK accounting and tax obligations

We delete or anonymise data once it is no longer needed for the purpose it was collected for.

10. Your Rights

Under UK GDPR you have the right to:

• be informed about how your data is used
• request a copy of the data we hold about you
• have inaccurate data corrected
• request erasure of your data
• restrict how we process your data
• object to processing based on legitimate interests
• data portability, where processing is by consent or contract and carried out by automated means
• withdraw consent at any time, where consent is the legal basis

To exercise any of these, email admin@unitas-global.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

11. Security

We protect personal data with encrypted connections, access controls, isolated client environments, encrypted backups, and restricted administrative access. No internet service can be guaranteed completely secure, but we take reasonable technical and organisational measures appropriate to the risk, and we will notify you and the ICO of a personal data breach where the law requires it.

12. Children

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above will reflect any change. We will not retroactively reduce your rights under a previous version without your explicit consent. Where a change is material, we will notify active clients by email.

14. Contact

For any privacy question, or to exercise your rights:

Email: admin@unitas-global.com
Company: Unitas Global Ltd, registered in England and Wales, company number 12562965