How Pebble handles your information.

Last updated: 7 September 2026

Who we are

Pebble is a safeguarding and social care technology platform, built by Matthew Davies, a practising social worker and team manager. This policy applies to this website, pebblehub.co.uk.

This website is operated by Pebble Hub Ltd, company number 14157422, whose registered office is at Goldworks, Mill Lane, Ebbw Vale, Blaenau Gwent NP23 6GR. Pebble Hub Ltd is the data controller for information collected through this website.

If you have any question about this policy, or about information we hold about you, email enquiries@pebblehub.co.uk.

What this policy does and does not cover

This policy covers the Pebble website only.

The Pebble app is different. Where an organisation uses Pebble to record and manage safeguarding and social care work, that organisation decides what information goes into it and how long it is kept. If you use Pebble through your employer, or you are someone a service is working with, questions about case information should go to that organisation rather than to us.

What we collect, and why

When you send us an enquiry

Our contact form asks for your name, your email address, your phone number if you choose to give it, and your message. We use this only to reply to you and to keep a record of the conversation. We rely on our legitimate interest in responding to an enquiry you chose to start.

When you subscribe to updates

If you subscribe, we store your email address so we can send you occasional updates about Pebble and new practice resources. We rely on your consent, and you can withdraw it at any time using the unsubscribe link in every email. Our email is sent through MailerLite.

When you download a resource

Our worksheets are free and ungated. You do not give us an email address, and we do not know who downloaded what. The files are stored on Google Drive, so Google receives the request in order to serve the file, in the same way as any other web request.

Analytics

We use Google Analytics to understand which pages are useful, in the aggregate. It only loads if you agree to it when you first visit. Your choice is stored in your own browser and you can change it at any time using the privacy settings link in the footer.

We never send personal or safeguarding information to analytics. No names, no email addresses, no form contents, no case information.

Analytics run by our website platform

This website is built on a platform called Uddify. Uddify runs its own visitor analytics, which starts when the page loads rather than waiting for the consent banner. It stores a random identifier in your browser, works out an approximate location from your IP address (country, region and city — not a precise location), and records the page you visited, the site you came from, your browser and your screen size.

Other services that see your IP address

Like most websites, some parts of our pages are served by other companies, and your IP address reaches them as a normal part of loading the page. These are Google Fonts (typefaces), Cloudflare (icons), Amazon CloudFront (images) and, on our pricing page, Stripe. We do not use advertising networks, and none of these are used to profile you.

What we store in your browser

We do not use advertising or tracking cookies. We store a small number of items in your browser's local storage:

Who we share information with

We do not sell your information and we do not share it for advertising. We use a small number of service providers who process information on our behalf:

• Uddify — hosts this website and passes enquiry form messages to us.
• MailerLite — sends our email updates.
• Google — analytics, fonts, and hosting our downloadable resources.
• Stripe — payment processing, on our pricing page.
• Amazon Web Services and Cloudflare — serving images and icons.

We may also disclose information where we are required to by law.

Where your information is held

Some of these providers are based outside the United Kingdom, or store information outside it. Where that happens, the transfer is covered by the safeguards required under UK data protection law, such as the UK addendum to the standard contractual clauses or an adequacy decision.

How long we keep it

• Enquiries — we keep these for two years from our last contact with you. If you go on to become a customer, we keep them for as long as we work together and for six years afterwards, to meet our accounting and tax obligations.
• Newsletter subscriptions — until you unsubscribe. When you unsubscribe we remove you from the mailing list, and keep your email address on a suppression list only so that we do not add you again by mistake.
• Analytics — Google Analytics information is kept for 14 months and then deleted automatically.

Your rights

Under UK data protection law you have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these, email enquiries@pebblehub.co.uk. We will respond within one month.

If you are unhappy

Please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we handle information, we will update this page and change the date at the top. Where the change is significant, we will say so.