Privacy Policy

Who we are

Hive School is a trading name of HIVE VIDEO LIMITED, a company registered in England and Wales (company number 10684503) with its registered office at 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

We are the "controller" of the personal data described in this policy, which means we decide how and why it is used. If you have any question about this policy, or you want to exercise any of the rights set out below, email us at hello@hiveschool.one.

What this policy covers

This policy covers the personal data we collect through this website. It does not cover the separate services we link to, each of which handles your data under its own privacy policy:

Ticket Tailor

Course bookings and payments are taken entirely on Ticket Tailor's platform. We never see or store your card details — no payment information is ever entered on this website.

Discord

Our community server is hosted by Discord and governed by their terms and privacy policy.

YouTube, Instagram, LinkedIn and Facebook

Our social profiles are governed by each platform's own policies.

The personal data we collect

We collect a deliberately small amount of data. Specifically:

When you browse this site

If you consent to analytics cookies, our analytics provider records pages viewed, clicks and scroll depth, approximate location derived from your IP address, browser type, device type, operating system and referring URL. This builds a pseudonymous profile of your visit.

When you join the mailing list

Your email address. If you have consented to analytics, we also attach your email address to the analytics profile of your visit, so we can understand which parts of the site lead to signups.

When you email us

Your email address, your name if you give it, and whatever you choose to put in your message.

Automatically, for security

Our hosting provider keeps short-lived server logs including IP addresses, used to keep the site available and to investigate abuse.

We do not collect special category data, we do not knowingly collect data from children, and we do not carry out any automated decision-making or profiling that produces legal effects for you.

Why we use it, and our lawful basis

UK GDPR requires us to have a lawful basis for each use of your personal data. Ours are:

Sending you mailing list emails — consent

You opt in on the form and confirm via a link we email you. You can withdraw consent at any time using the unsubscribe link in any email, or by emailing us. Withdrawing consent does not affect anything we did before you withdrew it.

Analytics and measuring what works — consent

We only set analytics cookies and record your behaviour on the site if you agree to it. You can change your mind at any time.

Replying to your enquiry — legitimate interests

Our legitimate interest in answering people who contact us. We think this is what you would expect when you email us.

Keeping the site secure and available — legitimate interests

Our legitimate interest in protecting the site from abuse and diagnosing faults.

Delivering a course you have booked — contract

Where we need your details to provide training you have paid for, we process them to perform our contract with you.

Cookies and similar technologies

Cookies are small files stored on your device. We use two kinds, and they are treated very differently.

Strictly necessary

A small number of cookies are required to serve the site and remember your cookie choice. These do not need your consent and cannot be switched off.

Analytics

Set by PostHog to measure how the site is used, including heatmaps, scroll tracking and A/B tests of page copy. These are only set if you consent, and you can withdraw that consent at any time.

We do not use advertising or cross-site tracking cookies, and we do not sell your data to anyone. The fonts on this site are served from our own servers rather than from Google, so simply loading a page does not share your IP address with a third party.

You can also block or delete cookies in your browser settings, though parts of the site may not work as intended if you block the strictly necessary ones.

Who we share it with

We use a small number of carefully chosen service providers, who act as our processors and may only use your data on our instructions:

PostHog

Product analytics. We use their EU-hosted service, so analytics data is stored within the European Economic Area.

Mailchimp (Intuit Inc.)

Mailing list delivery. Mailchimp is based in the United States.

Vercel

Website hosting and content delivery.

We may also disclose personal data where we are required to by law, or to establish, exercise or defend legal claims. We do not sell, rent or trade your personal data, and we do not share it with third parties for their own marketing.

Sending data outside the UK

Some of our providers are based outside the UK. Where personal data is transferred abroad, we rely on UK adequacy regulations where they apply, and otherwise on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards. You can ask us for details of the safeguards in place for any particular transfer.

How long we keep it

Mailing list

Until you unsubscribe or ask us to remove you, and then only a minimal record to make sure we do not email you again by mistake.

Analytics data

No more than 24 months from collection.

Email correspondence

Up to 24 months after our last exchange with you.

Server logs

A short rolling period, typically no more than 30 days.

Course booking records

Where we hold records relating to a paid booking, up to seven years, because tax law requires us to keep business records for six years after the end of the relevant accounting period.

Your rights

Under UK GDPR you have the following rights over your personal data. Exercising them is free of charge, and we will respond within one month.

• The right to be told what we do with your data, which is what this policy is for.
• The right of access — to get a copy of the personal data we hold about you.
• The right to rectification — to have inaccurate or incomplete data corrected.
• The right to erasure — to have your data deleted where there is no good reason for us to keep it.
• The right to restrict processing — to have us pause what we do with your data while a dispute about it is resolved.
• The right to data portability — to receive data you gave us in a portable format, or have it sent to another provider.
• The right to object to processing based on our legitimate interests, and an absolute right to object to direct marketing at any time.
• The right to withdraw consent at any time, where we rely on consent.

To exercise any of these, email hello@hiveschool.one or write to us at 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. We may ask you to confirm your identity first so we do not disclose your data to somebody else.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at any time. ico.org.uk

Security

We take appropriate technical and organisational measures to protect your data, including encrypting traffic to and from this site, keeping credentials for our providers on the server rather than in the browser, and limiting access to the people who need it. No website can be completely secure, but we take this seriously and will tell you and the ICO if a breach occurs that is likely to affect your rights.

Links to other websites

This site links to other websites. Once you follow a link away from here we have no control over that site, and this policy no longer applies. We would encourage you to read the privacy policy of any site you visit.

Changes to this policy

We may update this policy from time to time. The date at the top tells you when the current version took effect. Where a change materially affects you, we will take reasonable steps to let you know.