Privacy Policy

This Privacy Policy explains how ISS Hub (“we”, “our”, “us”) collects, uses and protects your information when you use our website and mobile application. We are committed to processing your personal data in accordance with the General Data Protection Regulation (GDPR), Irish data protection laws and applicable platform policies, including Google Play and Apple requirements.

Who we are

Our website address is https://isshub.ie. ISS Hub operates across Ireland, supporting international students and residents through community, events and digital services. ISS Hub acts as the Data Controller for personal data collected through its services.

Information we collect

We may collect the following types of information:

• Information you voluntarily provide, including your name, email address, profile details, nationality, institution, event bookings and communications.
• Login information, which is securely processed and never stored in plain text.
• Media you upload, including photos, files, posts and comments.
• Technical information such as IP address, device type, operating system, browser type and usage logs.
• Cookies and usage data.
• Information processed by third-party services such as analytics tools, payment processors and notification systems.

Identity verification (IRP / PSC)

To confirm eligibility, prevent fraud and maintain a safe community, we may request identity verification documents such as an Irish Residence Permit (IRP), Public Services Card (PSC), student ID or proof of enrolment.

These documents are used strictly for identity and eligibility verification. They are never publicly displayed, sold or used for marketing, are stored securely with restricted access and are retained only as long as necessary for verification and compliance. Processing is based on our legitimate interests in maintaining a safe and trusted community and preventing fraud.

Comments

When comments are enabled and visitors leave comments, we collect the information shown in the comment form, the visitor’s IP address and browser user-agent string to help spam detection. An anonymised string created from your email address may be sent to the Gravatar service. After approval, your profile image may be visible in the context of your comment.

Media

If you upload images, avoid including embedded location data (EXIF GPS), as other people may be able to extract that information.

Cookies

We use cookies to store preferences and maintain sessions. You can disable cookies in your browser settings, although some features may not work correctly.

Embedded content from other websites

Pages may include embedded content such as videos, images or articles. Embedded content behaves as if you visited the external website directly and may collect data, use cookies and track interactions.

How we use your data

Your data may be used to:

• Manage your account and membership.
• Verify identity and eligibility.
• Provide website and app services.
• Process event bookings and payments.
• Send service updates and notifications.
• Detect and prevent fraud or misuse.
• Improve performance, security and user experience.

If you request a password reset, your IP address may be included for security purposes.

Legal basis for processing

We process personal data under one or more of the following lawful bases: consent, contractual necessity (for example, event bookings and membership services), legal obligations and legitimate interests such as improving services and ensuring security.

Third-party services

We may share limited data with trusted providers that help operate our services, including payment processors such as Stripe, analytics providers, push-notification services such as Firebase Cloud Messaging and spam-detection tools. These providers process information on our behalf and are subject to their own privacy policies.

International data transfers

Where data is transferred outside the European Economic Area (EEA), we use appropriate safeguards, such as standard contractual clauses or compliant providers.

How long we retain your data

• Account data: while your account is active.
• Event and transaction data: as required for legal and financial purposes.
• Technical logs: up to 12–24 months.
• Identity verification documents: only as long as necessary for verification and compliance.

Your rights

Under GDPR, you may have the right to access your personal data, correct inaccurate information, request deletion, restrict or object to processing, withdraw consent, request data portability and lodge a complaint with the Irish Data Protection Commission (DPC). To make a request, contact privacy@isshub.ie.

Data deletion

You may request deletion of your personal data at any time. After verification, we will delete your account and profile information, posts, comments and uploaded content, and booking history unless records must be kept for legal or financial purposes. Local app data is removed when you uninstall the app.

Where your data is stored

Your data is stored on secure servers and may be processed within the European Union or by trusted providers using appropriate safeguards.

Children’s privacy

Our services are not intended for people under 16 years of age. We do not knowingly collect data from children. If such data is identified, it will be deleted.

Security

We use appropriate technical and organisational measures, including HTTPS encryption, secure authentication and restricted access controls. However, no system can be guaranteed completely secure.

Changes to this policy

We may update this Privacy Policy from time to time. Updated versions will be posted here with a revised “Last updated” date.

Contact us

For questions or requests concerning personal data, email privacy@isshub.ie or use our Contact page.