Legal # Legal and data protection The policies behind this website and CubeHR, written to be read rather than scrolled past. If anything is unclear, ask us and we will explain it. ## For everyone How we handle personal data, and what this website and the app store on your device. - ### [Privacy policy](/legal/privacy) What personal data we collect through this website, our sales and support, and CubeHR accounts, why we need it, and the rights you have over it. Updated 25 September 2026 - ### [Cookie policy](/legal/cookies) This website sets no cookies unless you allow Google Analytics, and the CubeHR app only stores what keeps you signed in. The full list, and how to change your mind. Updated 25 September 2026 ## For customers What we commit to when your organisation puts its people’s records into CubeHR. - ### [Terms of service](/legal/terms) The agreement between your organisation and Cube Systems Limited for CubeHR: accounts, trials, fees, cancellation, acceptable use and liability, and the rules for using this website. Updated 25 September 2026 - ### [Data processing](/legal/data-processing) How CubeHR processes the staff data your organisation puts into it, including health and absence records, and what our Article 28 data processing terms commit us to. Updated 25 September 2026 - ### [Sub-processors](/legal/sub-processors) The third parties that process customer data on our behalf, what each one does, where it does it, and how we tell you about changes. Updated 25 September 2026 - ### [GDPR and data protection](/legal/gdpr) What UK GDPR asks of an employer keeping staff records, and how CubeHR helps with special category data, staff requests, retention, security and breaches. Updated 25 September 2026 - ### Reviewing us as a supplier? Send us your security questionnaire or your own data processing agreement, and any questions from your data protection lead. [Email hello@cube-hr.co.uk](mailto:hello@cube-hr.co.uk?subject=Data%20processing%20terms) What you may and may not use CubeHR for is in the [acceptable use](/legal/terms#acceptable-use) section of the terms of service. Data protection ## The facts, in one place Who is responsible for your data, where it lives, and who to contact. Inside CubeHR, each employer is the controller of its staff records and we are its processor. - **Publisher and controller:** Cube Systems Limited, trading as CubeHR, part of Crushed Ice Group - **Company number:** [17220899, England and Wales](https://find-and-update.company-information.service.gov.uk/company/17220899) - **ICO registration:** [ZC216972](https://ico.org.uk/ESDWebPages/Entry/ZC216972) - **Registered office:** Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP - **Where data is held:** United Kingdom. Google Analytics, only if you allow it, may process data in the United States under the UK Extension to the EU-US Data Privacy Framework. - **Data protection contact:** [hello@cube-hr.co.uk](mailto:hello@cube-hr.co.uk) - **Telephone:** [01234 672 617](tel:+441234672617) - **Regulator:** Information Commissioner’s Office, registration number ZC216972 Your rights ## Making a request about your data Access, correction, erasure, objection or portability: the route is the same for all of them. - Step 1 ### Tell us what you need Email hello@cube-hr.co.uk saying which right you want to use. There is no form and no particular wording to get right. - Step 2 ### We confirm it is you We may ask for something that confirms your identity, so that your data is never handed to someone else. - Step 3 ### We answer within a month Normally free of charge. If your data is in an employer’s CubeHR account, we pass the request to that employer and help it respond. --- **URL:** https://cube-hr.co.uk/legal