Privacy Policy

1. Who we are (data controller)

The data controller for the personal data described in this policy is:

Coffico Investments LLC

trading as Route Business Hub, registered in the United Arab Emirates. Contact us about privacy matters at enquiries@routebusinesshub.com.

2. What data we collect

When you use our contact form or consultation request form, we collect:

• Name
• Email address
• Phone number
• Company name (optional)
• Approximate annual turnover (optional)
• Any details you provide in your enquiry message
• Technical data: IP address, browser type, and pages visited, via standard web server logs and cookies (see Section 8)

3. Lawful basis for processing

We process your data on the following lawful bases under UK GDPR Article 6:

• Consent: when you tick the consent box on our enquiry forms.
• Legitimate interests: to respond to your enquiry and provide requested information about our services.
• Contract: where processing is necessary to take steps at your request before entering into an engagement with us.

4. How long we keep your data

General enquiries that do not proceed to an engagement are retained for 24 months from your last contact with us, then deleted. Client engagement, tax, and accounting records are retained for 6 years from the end of the tax year to which they relate, in line with standard UK HMRC record-keeping requirements. This longer period applies once you become a client, not to general website enquiries.

5. Who we share data with

We may share your data with the following categories of processor, each of whom is contractually required to process your data only on our instructions and to apply appropriate security measures:

• Our customer relationship management (CRM) system, used to manage enquiries and client communication
• Our email service provider, used to send and receive correspondence
• Our website hosting provider
• Where applicable, our booking/scheduling provider for consultation calls

We do not sell your personal data to third parties.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Object to or restrict our processing of your data
• Request data portability
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at enquiries@routebusinesshub.com.

8. Data breach notification

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO without undue delay and, where feasible, within 72 hours of becoming aware of it, as required under UK GDPR Article 33. Where a breach is likely to result in a high risk to you, we will also notify you directly and without undue delay, as required under Article 34, describing what happened, the likely consequences, and the measures taken or proposed to address it.

9. Cookies

This site itself uses only strictly necessary cookies required for core functionality (e.g. remembering form state). We do not use analytics or advertising cookies. Our booking calendar is provided by a third party, Calendly, and is not loaded until you actively choose to open it (for example, by clicking "Book a call"). At that point Calendly may set its own cookies under its own privacy policy, which is unaffected by ours. No Calendly cookies are set before you take that action.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.