Last updated: 1 November 2020
At Hive, the privacy of your data - and it is your data, not ours! - is a big deal to us. We respect your privacy and data protection rights and recognize the importance of protecting the personal data we collect and process. This policy is designed to help you to understand what data we collect and why; how your data is handled; and your rights to your data.
Note: We do not rent, sell or trade your personal information.
interact with any of Hive’s websites (including www.hive.id and app.hive.id) or our social media pages (collectively, the "Websites") ("Website users");
use Hive’s identity products, customer workspaces, mobile applications, and our other applications and services (collectively, the "Hive Services") ("Customers");
interact with any of Hive’s end user identity domains (including verify.hive.id and api.hive.id ("End-users");
are a marketing prospect - anyone whose data Hive processes for the purposes of assessing customer eligibility ("Marketing prospects"); or
receive marketing communications from Hive.
In order to fully understand how personal data is processed, we encourage you to also review privacy notices and policies of our Customers who are using our identity services with you.
This Policy describes how we collect and use your Personal Information, whether it is shared and/or disclosed, and how we address privacy matters, such as deletion of your Personal Information upon request, and opting-out of marketing communications. Lastly, we describe methods for contacting us if you have privacy questions, comments or feedback.
Transparency is one of the best ways to earn your trust. The Personal Information that we collect about you broadly falls into the categories set out below. Some of this information you provide voluntarily when you interact with the Hive Services and Websites. Other types of information may be collected automatically from your device, such as device data and service data. From time to time, we may also receive personal data about you from third party sources (as further described below).
Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.
We use Personal Information to facilitate the business relationships we have with our Customers, to comply with our financial regulatory and other legal obligations, and to pursue our legitimate interests where these are not overridden by the interests, rights or freedoms of Customers and End-users. We also use Personal Information to complete payment transactions.
We only process and keep any Personal Information for as long as necessary to achieve the purpose for which the information was originally collected. The exact length of time we keep Personal Information depends on our processing purposes and the statutory retention period for that type of information. After the statutory period of time passes, or if storage of Personal Information is not needed, Personal Information is deleted or anonymized. If you would like more information about specific retention periods please contact firstname.lastname@example.org.
We collect and process your Personal Information for the following purposes and, if you are from the European Economic Area (EEA), the UK or Switzerland, on the following legal bases:
Providing and facilitating delivery of the Hive Services and Websites: We process your Personal Information to perform our contract with you for use of our Services and Websites and to fulfill our obligations under applicable terms of service. Where we have not entered into a contract with you, we process your Personal Information in reliance on our legitimate interests to operate and administer the Hive Services and Websites. For example, to create, administer and manage your account.
Communicating with you about the Hive Services and providing customer support: We may send you service, technical and other administrative messages in reliance on our legitimate interests in administering the Hive Services. For example, we may send you messages about the availability or security of the Hive Services. We also process your Personal Information to respond to your comments and questions and to provide customer care and support.
Improving the Hive Services and Websites: We process your Personal Information to improve and optimize the Hive Services and Websites and to understand how you use the Hive Services and Websites, including to monitor usage patterns and to analyze trends and develop new products, services, and functionality in reliance on our legitimate interests.
Sending marketing communications: We process your Personal Information to send you marketing communications via email, post or SMS about our products and services that might interest you in reliance on our legitimate interests or where we seek your consent. Please see the "Your Privacy Rights and Choices" section below to learn how you can control your marketing preferences.
Maintaining security of the Hive Services and Websites: We process your Personal Information to control unauthorized use or abuse of the Hive Services and Websites, or otherwise detect, investigate or prevent activities that may violate Hive policies or applicable laws, in reliance on our legitimate interests to maintain and promote the safety and security of the Hive Services and Websites.
Displaying personalized advertisements: We process your Personal Information to advertise to you and to provide personalized information, including by serving and managing advertisements on our Websites and on third-party sites, in reliance on our legitimate interests to support our marketing activities and advertise our products and services or, where necessary, to the extent you have provided your consent.
Carrying out other legitimate business purposes: including invoicing, audits, fraud monitoring and prevention.
Complying with legal obligations: We process your Personal Information when cooperating or complying with public and government authorities, courts or regulators in accordance with our obligations under applicable laws and to protect against imminent harm to our rights, property or safety, or that of our users or the public, as required or permitted by law.
In certain circumstances, we may collect your Personal Information on a different legal basis. If we do, or if we use your Personal Information for purposes that are not compatible with, or are materially different than, the purposes described in this notice or the point of collection, we will explain how and why we use your Personal Information in a supplementary notice at or before the point of collection. Where we refer to legal bases in this section, we mean the legal grounds on which organizations can rely when processing personal data.
These legal bases only apply to you if you are resident in the EEA, the UK or Switzerland.
If you have any questions about our legal bases for processing your Personal Information, please contact us at email@example.com.
Hive takes appropriate administrative, technical, physical and organizational security measures to protect your Personal Information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. We follow generally accepted standards to protect the Personal Information submitted to us, both during transmission and once it is received, taking into account the nature of such information and the risks involved in processing, and comply with applicable laws and regulations. While we have taken reasonable steps to secure the Personal Information you provide to us, please be aware that despite our best efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide Personal Information via our Websites or Services.
If you have any questions about our security, or have reason to believe that your interaction with us is no longer secure, please contact us at firstname.lastname@example.org.
Depending on your location and subject to applicable laws, you may have certain data protection rights. If you are a resident of the EEA or the UK you have the following data protection rights:
If you wish to access, correct, update or request deletion of your Personal Information, you can do so at any time.
You can object to processing of your Personal Information, ask us to restrict processing of your Personal Information or request portability of your Personal Information.
You have the right to opt-out of marketing communications we send you at any time. If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by clicking on the "unsubscribe" or "opt-out" link in the communications we send you. Please note, however, that it may not be possible to opt-out of certain service-related communications.
Similarly, if we have collected and process your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
You have the right to complain to a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA and the UK are available here.
You can exercise any of these rights by submitting a request to our Data Protection Officer at email@example.com.
If you are a California resident, you can find information about how we use your Personal Information and about your privacy rights in “Notice for California Residents” section of this Policy.
Certain recipients (our service providers and other companies) who process your Personal Information on our behalf may also transfer Personal Information outside the country in which you are resident. Where such transfers occur, we will make sure that an appropriate transfer agreement is put in place to protect your Personal Information.
If you are a resident of the EEA, the UK or Switzerland, we will protect your Personal Information when it is transferred outside of the EEA, the UK or Switzerland by processing it in a territory which the European Commission has determined provides an adequate level of protection for Personal Information; or otherwise ensuring appropriate safeguards are in place to protect your Personal Information.
If you would like to find out more about international transfers, please contact our Data Protection Officer at firstname.lastname@example.org.
This section describes how Hive collects, uses and shares Personal Information of California residents in our capacity as a "business" under the California Consumer Privacy Act of 2018 ("CCPA"), and their rights under the CCPA.
This section applies only if you are a California resident. For purposes of this section, "Personal Information" has the meaning given in the California Consumer Privacy Act ("CCPA").
This section does not apply to:
information exempted from the scope of the CCPA;
information collected in a business-to-business context, namely, where the information reflects our communications or transactions with you in the context of performing due diligence on, providing services to, or receiving services from, a company, partnership, sole proprietorship, non-profit or government agency where you are an employee, controlling owner, director, officer or contractor of that organization;
activities governed by a different privacy notice; or
Personal Information we collect, use, and share on behalf of our Customers as a "service provider" under the CCPA.
You have the following rights:
Right to Know – Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
The categories of Personal Information we have collected.
The categories of sources from which we collected the Personal Information.
The business or commercial purpose for collecting the Personal Information.
The categories of third parties with whom we share the Personal Information.
The categories of Personal Information that we disclosed for a business purpose.
The categories of third parties to whom the Personal Information was disclosed for a business purpose.
Right to Know – Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
Right to Deletion. You can ask us to delete the Personal Information that we have collected from you.
Right to Opt-Out. You have the right to opt-out of any "sale" of your Personal Information as defined in the CCPA.
Right to Nondiscrimination. You are entitled to exercise the rights described above free from discrimination prohibited by the CCPA.
We will need to verify your identity to process your information, access, and deletion requests and reserve the right to confirm your California residency. To verify your identity, we may require you to log into a Hive online account (if applicable), provide government identification, give a declaration as to your identity under penalty of perjury, and/or provide additional information. These rights are not absolute, and in some instances, we may decline your request as permitted by law.
We also provide the ability to submit job applications to our open job listings. To appropriately respond to your application, we need to collect and process your provided Personal Information, which may also be carried out electronically. If we begin an employment contract with you, your submitted application data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. We maintain your Personal Information for the period of time necessary to carry out our legitimate business interests and according to applicable laws. For information about specific retention periods, please contact us at email@example.com.