GDPR Compliance

Last updated: 15 November 2026

Our Commitment to GDPR

Here/Now App Hub is committed to full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This page outlines how we and the third-party services we link to handle personal data in accordance with GDPR requirements.

We process personal data lawfully, fairly, and transparently in accordance with Article 5 of the GDPR.

Data Controller Information

Data Controller: Here/Now

Contact: matt.campbell@herenowtoday.co.uk

Jurisdiction: United Kingdom

Legal Basis for Processing

We process personal data under the following lawful bases as defined in Article 6 of the GDPR:

Consent (Article 6(1)(a))

When you register or provide information voluntarily

Legitimate Interests (Article 6(1)(f))

For improving our services and ensuring security

Legal Obligation (Article 6(1)(c))

When required to comply with UK law

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

1. Right to be Informed (Articles 13-14)

You have the right to clear information about how we collect and use your personal data.

2. Right of Access (Article 15)

You can request a copy of all personal data we hold about you, free of charge.

3. Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

4. Right to Erasure / "Right to be Forgotten" (Article 17)

You can request deletion of your personal data when it's no longer necessary or if you withdraw consent.

5. Right to Restrict Processing (Article 18)

You can request limitation of how we process your personal data in certain circumstances.

6. Right to Data Portability (Article 20)

You can request your data in a structured, commonly used format for transfer to another controller.

7. Right to Object (Article 21)

You can object to processing of your personal data for direct marketing or legitimate interests.

8. Rights Related to Automated Decision Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

Email: matt.campbell@herenowtoday.co.uk

Subject Line: "GDPR Data Subject Request"

We will respond to your request within one month as required by Article 12(3) of the GDPR. This may be extended by two months for complex requests.

Third-Party Services & GDPR Compliance

The Here/Now App Hub links to various third-party applications and services. Each service is responsible for its own GDPR compliance:

Third-Party Service GDPR Information:

Here/Now Today (herenowtoday.co.uk) - GDPR compliant. Contact: matt.campbell@herenowtoday.co.uk
NHS Services - GDPR compliant under UK health data regulations.Privacy Policy
Tees Valley Combined Authority - Public body, GDPR compliant.Privacy Policy
Samaritans - Registered charity, GDPR compliant.Privacy Statement
Citizens Advice - Registered charity, GDPR compliant.Privacy Policy
Other Third-Party Apps - Please review each service's individual GDPR and privacy policies before use.

Important: When you click through to third-party services, you leave the Here/Now App Hub and become subject to those services' privacy policies and GDPR compliance measures. We are not responsible for the data practices of external services.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy:

Account data: Retained while your account is active
Usage logs: Retained for 12 months
Security logs: Retained for 24 months for fraud prevention
Legal obligations: Retained as required by UK law

Data Breach Notification

In accordance with Article 33 of the GDPR, we will:

Report any data breach to the ICO within 72 hours of becoming aware
Notify affected individuals without undue delay if the breach poses a high risk to their rights and freedoms
Document all data breaches, including facts, effects, and remedial actions

International Data Transfers

Our services are hosted within the UK and EEA. If we need to transfer data outside the EEA, we will ensure appropriate safeguards are in place as required by Articles 44-50 of the GDPR, such as Standard Contractual Clauses or adequacy decisions.

Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Tel: 0303 123 1113

Website: ico.org.uk

Updates to This Page

We will update this GDPR compliance page as necessary to reflect changes in our practices or legal requirements. Significant changes will be communicated to registered users via email.

For any GDPR-related questions or to exercise your rights, contact: matt.campbell@herenowtoday.co.uk