Privacy Policy
Last updated: 6 October 2026
This policy explains what ERP Partner Hub, operating ERP Partner Hub at erppartnerhub.com, collects when you use the site, why, who it is shared with, and how long it is kept.
1. The short version
- Browsing the directory does not require an account and does not require you to identify yourself.
- When you send an enquiry to a partner, your details go to that partner. That is the point of the enquiry, and it is the main sharing that happens here.
- We do not sell personal data, and we do not resell enquiries to other partners.
- Enquiry records are deleted after 24 months.
2. What we collect
Enquiries you send to a partner
Name, work email, phone, job title, company, country and region, the industry you selected, your message, and — if you chose to answer — company size, timeline and budget range. We also record which ERP context the enquiry came from and the page it was sent from.
Lawful basis: performance of a request you initiated, and our legitimate interest in operating a directory that connects buyers with partners.
Partner accounts
Company details, public contact details, the ERP systems and certifications you list, your account email, a hashed password, and subscription status. Passwords are stored hashed and are never sent by email — account setup and reset use a one-time link.
Newsletter
Email address, and name and company where you supplied them. Only if you opted in. Every message carries an unsubscribe link.
Analytics and campaign tracking
Pages viewed, referrer, approximate location derived from IP, device and browser, and any UTM campaign parameters on the link that brought you here. We use a first-party visitor identifier and Google Tag Manager / Google Analytics.
Lawful basis: consent, via the cookie banner, where consent is required in your jurisdiction.
Technical logs
Errors and security-relevant events, which can include IP address and user agent. Kept for operational and security purposes only.
3. Who your data goes to
| Recipient | What | Why |
|---|---|---|
| The partner you contacted | Your enquiry and its contact details | To answer you. This is the purpose of the form. |
| Payment processor (Stripe) | Partner billing details | To take subscription payments. We never see or store full card numbers. |
| Email provider (Amazon SES) | Recipient address and message | To deliver transactional and newsletter email. |
| Analytics (Google) | Usage events, pseudonymous identifiers | To understand which pages help buyers. Consent-gated. |
| Hosting and infrastructure | All of the above, at rest | To run the service. |
We do not sell personal data. We do not share your enquiry with partners other than the one you addressed it to. Our own administrators do not receive enquiry contents — leads route directly to the partner.
We may disclose data where legally required, or to establish or defend legal claims.
4. How long we keep it
| Data | Retention |
|---|---|
| Enquiries sent to partners | 24 months from submission, then permanently deleted |
| Partner accounts and listings | While the listing is active, and for 12 months after closure |
| Billing records | As required by tax and accounting law, typically 7 years |
| Newsletter subscription | Until you unsubscribe, plus a suppression record so we do not re-add you |
| Analytics and campaign tracking | 26 months |
| Error and security logs | 90 days |
Enquiry deletion runs automatically. A partner who has downloaded a copy of their own leads holds that copy under their own privacy policy, not ours.
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time.
Write to [email protected]. We respond within 30 days. We may ask you to confirm your identity first.
If you asked a partner to contact you and now want that partner to delete your details, contact the partner — they hold that copy as their own controller. Tell us too and we will delete our record.
6. Cookies
Strictly necessary cookies keep you signed in and protect forms; these cannot be turned off. Analytics and campaign-attribution cookies are set only with consent, which you can change or withdraw at any time through the cookie banner.
7. International transfers
Our infrastructure and processors are located in the United States. If you are in the UK, EEA or another region with transfer restrictions, your data will be transferred there under appropriate safeguards. [To be confirmed by counsel: the specific transfer mechanism.]
8. Security
Traffic is encrypted in transit. Passwords are hashed. Administrative access is restricted and uses federated sign-in. Verification decisions, tier changes and ERP association changes are audit-logged with the actor and timestamp. No system is perfectly secure, and we do not claim otherwise.
9. Children
This is a business service and is not directed at anyone under 16.
10. Changes
We will update this policy when our practices change, and revise the date at the top. Material changes affecting listed partners are notified by email.
11. Contact
ERP Partner Hub
Privacy: [email protected]
General: [email protected]