Privacy Policy

We collect the following personal data when you create an account and use our platform: • Identity & Contact: Full name, email address, phone number • Professional Information: Job title, work history, industry experience, certifications (including expiry dates and uploaded documents) • Assessment Data: Skill assessment scores and vetting report results • Payment Information: Billing details collected and processed by Stripe. The HSE Hub does not store raw card numbers. All payment data is handled by Stripe's PCI DSS-compliant infrastructure. • Consulting Intake Data: Company name, contact phone, project location, preferred start date, project details, site size, and workforce size • Lead Capture Data: Name and email address submitted to receive the free Safety Checklist or another requested resource • Referral Data: Referrer and referred-user email addresses and referral attribution • Usage Data: Login timestamps, pages visited, and feature interactions necessary to operate the platform

We use your personal data for the following purposes: • Candidate Matching: Displaying candidate profiles to verified employers browsing our Talent Directory • Vetting Services: Conducting professional HSE reviews and generating Confidence Reports • Payment Processing: Facilitating purchases and subscription billing via Stripe • Consulting Fulfillment: Reviewing intake details, scheduling engagements, communicating about deliverables, and providing purchased consulting services • Resource Delivery: Providing requested lead magnets and free resources, including the Safety Checklist • Referral Tracking: Attributing community invitations and preventing duplicate or fraudulent referral records. Referrals do not provide rewards or compensation • Notifications: Sending email alerts for application status changes, certification expiry warnings, new project alerts, and platform updates • Platform Security: Detecting fraud, preventing abuse, and maintaining audit logs • Legal Compliance: Meeting our obligations under applicable law

We do not sell your personal data. We share it only in the following circumstances: • Employers (Confidence Report): When an employer pays the Confidence Fee, we provide that employer with the candidate's direct contact information (email, phone) along with the written vetting report. No contact details are shared before payment. • Stripe: We share billing information with Stripe, Inc. for payment processing. Stripe's privacy policy is available at stripe.com/privacy. • Base44: Our platform is built on Base44 infrastructure. Base44 processes data on our behalf as a data processor. Data is hosted on SOC 2 Type II and ISO 27001 certified infrastructure. • Legal Requirements: We may disclose data if required by law, court order, or to protect the rights and safety of The HSE Hub or our users. • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or part of our business or assets, your personal data may be transferred to the acquiring party as part of that transaction. Any such party will be required to honor the commitments made in this Privacy Policy. We will notify registered users by email before any such transfer takes effect.

• Active Accounts: We retain your personal data for as long as your account remains active on the platform. • Deleted Accounts: Upon account deletion request, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons. • Security Events: Security and admin audit records may be retained for up to 2 years for fraud prevention, incident response, and legal compliance. • Payment Events: Payment-related audit records may be retained for up to 7 years for accounting, tax, dispute, and legal obligations. • GDPR Erasure Records: Records documenting data-erasure requests may be retained permanently as compliance evidence. We review these retention periods annually and may delete records sooner when they are no longer required.

You have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you • Correction: Request that we correct inaccurate or incomplete data • Deletion: Request deletion of your account and associated data • Portability: Request your data in a portable format • Objection: Object to certain uses of your data To exercise any of these rights, email us at admin@thehsehub.com. We will respond within 30 days. Identity verification may be required before processing your request.

We use essential cookies only. These cookies are strictly necessary to provide our service and cannot be disabled: • Authentication cookies: Maintain your logged-in session • Security cookies: Protect against cross-site request forgery • Stripe cookies: Stripe may set strictly necessary cookies during purchases to process transactions securely and help prevent fraud We do not use analytics, advertising, or other non-essential tracking cookies.

We implement industry-standard security measures including encryption of data in transit (TLS) and at rest, role-based access controls, rate limiting on all endpoints, audit logging of sensitive actions, and regular security reviews. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

The HSE Hub is intended for use by working professionals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has created an account, please contact us at admin@thehsehub.com.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 14 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

The HSE Hub uses artificial intelligence (AI) technology in parts of our platform to improve your experience. This includes our AI Safety Chat assistant, which responds to your questions automatically, and other features such as document and job posting processing. When you use these features, you are interacting with an automated AI system, not a human. Information you enter into AI features may be processed by third party AI providers to generate responses. We do not sell this information. Please avoid entering sensitive personal information, confidential company data, or private details into AI chat features.

For any questions, concerns, or data requests related to this Privacy Policy, contact us at: The HSE Hub LLC Email: admin@thehsehub.com Website: thehsehub.com