Privacy policy

Who we are

HiveStock Ltd ("HiveStock", "we", "us") is a company registered in England and Wales (company number 17430464) with its registered office at Brighton Road, Redhill RH1 5EQ. We are the controller of the personal data described in this policy.

Questions about this policy or your data: privacy@hivestock.co.uk.

What this policy covers

This policy explains how we handle personal data collected through this website, through enquiries and demo requests, and in our business-to-business sales and marketing.

When a customer uses the HiveStock™ platform and cabinets, we process data about that customer's staff (for example badge IDs, transaction records and cabinet camera clips) on the customer's behalf, as a processor under our service agreement and data processing terms. The customer is the controller of that data, and its own privacy notice applies. Staff with questions about that data should contact their employer first.

What we collect

• Enquiry and contact data: your name, company, job title, business email, phone number and anything you tell us when you contact us or request a demo.
• Customer account data: business contact details of the people who manage a HiveStock account, and billing details for the business.

Why we use it and our lawful basis

• Responding to enquiries and arranging demos: legitimate interests (dealing with requests you make).
• Providing and managing a customer's service, billing and support: contract, or legitimate interests where the contract is with your employer.
• Keeping business and financial records: legal obligation.
• Sending business-to-business marketing about HiveStock to corporate contacts: legitimate interests. Every message includes an easy way to opt out, and we will stop when you ask.

Who we share it with

We don't sell personal data. We share it only with service providers who help us run our business, under contracts that require them to protect it: website and platform hosting and security (Railway, Supabase, Cloudflare), email (Microsoft), transactional email delivery (Resend), and our professional advisers. We may also share data where the law requires it, or with authorised partners who supply and support HiveStock on a customer's behalf, where that customer has chosen to work with them.

International transfers

Some of our providers process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Enquiries that don't lead to a customer relationship: up to 24 months from last contact.
• Customer account and billing records: for the life of the contract and 6 years afterwards.
• Marketing contacts: until you opt out, or 24 months without engagement.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use (including objecting to marketing at any time), to data portability, and to withdraw consent where we rely on it. To exercise any right, email privacy@hivestock.co.uk. We will respond within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and encrypted backups.

Changes

We may update this policy. The date at the top shows when it last changed.