3Sixty Hub
Legal

Terms of service

Version 1.1, last updated 3 November 2026.

These terms are an agreement between 3Sixty Health and Safety Ltd, trading as 3Sixty Health and Safety (company number 09171942, VAT number GB198412087), of Suite 21, Enterprise House, Telford Road, Bicester, Oxfordshire, OX26 4LD ("we", "us") and the business that creates a 3Sixty Hub account ("you"). The person who creates the account confirms they are allowed to accept these terms for the business. 3Sixty Hub is for business use only and is not offered to consumers.

1. The service

3Sixty Hub helps you manage health and safety: registers of checks with reminders, actions, incidents, documents, risk assessments, training, inductions, contractors, templates and access to our experts. We may improve and change features over time. If we remove a feature you pay for, we will tell you at least 30 days before.

2. Plans and payment

3. Your account and users

4. Health and safety stays your responsibility

3Sixty Hub is a tool to help you meet your duties. It does not take them over. Checks, reminders, guidance, templates, ratings and suggested actions are general information based on typical workplaces. You must check that they fit your premises and work, carry out the checks, act on the findings and get competent advice where you need it. You remain the duty holder under health and safety and fire safety law. Reminders depend on email delivery and on the information you give us, so please don't rely on them as your only record of what is due.

5. Expert advice from 3Sixty Health and Safety

6. Acceptable use

Don't use 3Sixty Hub to break the law, upload anything harmful or that you have no right to share, try to get into other customers' information, test or overload our systems, copy or resell the service or its content, or send emails through it to people who shouldn't receive them.

7. Your information

You own the records you put into 3Sixty Hub. You give us permission to store and process them only to provide the service to you. You can download your documents and reports at any time. When we process personal information in your records we do so as your processor under the data processing terms below, which form part of these terms. Our privacy policy explains how we handle information about you and your users.

8. Our content

We own 3Sixty Hub, its software, guidance and templates. While you have an account you may use them, and copy and adapt the templates, for your own business. You may keep documents you have made from them after your account ends. You may not resell or publish our templates or guidance.

9. Availability

We will provide 3Sixty Hub with reasonable care and skill. We aim to keep it available at all times but can't promise it will never be interrupted, for example for maintenance, faults with our providers or events outside our control. We back up information regularly. To the extent the law allows, we give no other promises about 3Sixty Hub, including that it is fit for a particular purpose.

10. Liability

11. Ending the agreement

12. Changes to these terms

We may update these terms. We will email account owners at least 30 days before an important change. If you don't agree, you can close your account before it takes effect.

13. Confidentiality

Each of us will keep the other's confidential information private and use it only for this agreement. This includes your records and documents, and our prices and the parts of 3Sixty Hub that aren't public. It doesn't cover information that is already public, or that the law requires to be shared.

14. General

These terms (with any quote, order form or free package under section 2) are the whole agreement between us about 3Sixty Hub. Neither of us has relied on any statement that isn't in them. Neither of us is responsible for delays caused by events outside our reasonable control. You may not transfer these terms without our agreement. We may transfer them to a company that takes over our business, and will tell you if we do. Nobody else has rights under them under the Contracts (Rights of Third Parties) Act 1999. If any part is found invalid, the rest still applies.

We will send notices to the email address of your account owners. Send notices to us at info@3sixtyhealthandsafety.com. These terms are governed by the law of England and Wales, and the courts of England and Wales deal with any dispute.

Schedule: data processing terms

These terms apply when we process personal information on your behalf, as required by Article 28 of the UK General Data Protection Regulation.

  1. Subject and length. We process personal information in your records to provide 3Sixty Hub to you, for as long as you have an account and until it is deleted under section 11.
  2. Whose information and what kind. Your users, staff, new starters, contractors, visitors and anyone involved in an incident, including pupils where you are a school. Names, contact details, job roles, training and induction records, certificates, signatures, photos, display screen assessments, and accident and injury details, which can include health information.
  3. Your instructions. We only process the information on your documented instructions, which are these terms, your settings and your use of 3Sixty Hub, unless the law requires otherwise, in which case we will tell you first unless the law forbids it. Your instructions include our experts accessing your records to answer your questions, prepare or upload documents you ask for, and support your account. We will tell you straight away if we think an instruction from you breaks data protection law.
  4. Your responsibilities. You are responsible for having a lawful basis for the records you keep in 3Sixty Hub, and for telling your staff, contractors, visitors and others how their information is used, including that you use 3Sixty Hub.
  5. Confidentiality. Everyone we authorise to process the information is bound to keep it confidential.
  6. Security. We keep appropriate technical and organisational security measures in place, including encryption, access controls that keep each business's records apart, private file storage and backups.
  7. Other processors. You agree that we may use the processors listed below for your records. We will tell you at least 30 days before adding or replacing one, and you may object on reasonable data protection grounds. If we can't resolve it, you may close your account and we will refund any fees paid for the period after it closes. We put the same data protection obligations on them and remain responsible for them.
    • Supabase Inc.: Database, file storage and sign-in (Data stored in London, UK. Supabase is a US company and its support staff may access it from the USA.; International Data Transfer Addendum in its data processing agreement)
    • Vercel Inc.: Hosting the website and running the app (App runs in London, UK. Vercel is a US company.; UK-US data bridge (Vercel is certified))
    • Resend (Plus Five Five, Inc.): Sending and receiving the Hub's emails (USA; International Data Transfer Addendum in its data processing agreement)
    • Anthropic PBC: AI help for 3Sixty's experts drafting replies to enquiries (only the enquiry and details of the check it is about) (USA; International Data Transfer Addendum in its data processing agreement)
  8. Transfers. We only send the information outside the UK with appropriate safeguards, as described in our privacy policy.
  9. Helping you. We will help you respond to requests from people exercising their rights, and with security, breach notification, data protection impact assessments and consultation with the regulator, taking into account the information available to us.
  10. Breaches. We will tell you without undue delay, and in any case within 48 hours, after becoming aware of a personal data breach affecting your records, with the information you need to meet your own obligations.
  11. At the end. When your account closes you have 30 days to download the information, then we delete it, unless the law requires us to keep it. It is removed from backups within a further 30 days. This does not apply to information you sent us when asking for expert advice, which we hold as controller under section 5.
  12. Showing we comply. We will give you the information you reasonably need to show these obligations are met, and allow reasonable audits with at least 30 days' notice, no more than once a year unless there has been a breach.

See also: Privacy policy · Terms of service · Cookies