Hive Box Privacy Policy

1. Introduction

Welcome to the Hive Box platform (hereinafter referred to as "this product"or "service") provided by HIVE BOX (HK) LIMITED (hereinafter referred to as "we" , "us" , or "our"). Your privacy and data security are ofutmost importance to us.

This Privacy Policy aims to explain to you, our users, in a clear and transparent manner, how we collect, use, disclose, transmit, and store your personal information when you use this product under our guidance. We commit to processing your personal data in accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR") of the European Union and the relevant data protection laws of your country.

Please read and understand this policy carefully before using our product.

2. What personal information do we collect and on what legal basis

We will only collect necessary information to achieve specific and clear purposes. The types of information we collect and the legal basis for processing are as follows:

3. Data sharing and disclosure

We only share your information with third parties in the following circumstances, and ensure that they provide the same level of protection as applicable laws and regulations such as GDPR:

• Service Provider (Processor):We engage third-party companies to provide us with services, such as cloud storage service providers. The aforementioned processors can only process your data in accordance with our instructions and in compliance with this policy.
• Legal requirement:If we believe in good faith that the disclosure of information is necessary to comply with applicable laws, regulations, legal procedures, or mandatory government requests.
• Business transfer: In the event of a merger, acquisition, or asset sale, your personal information may be transferred, and we will notify you prior to the transfer.
• With your consent:With your explicit consent, we will proceed with other sharing within the scope of your consent.
• International transmission: We will not transmit your data outside the European Union. If your data is transmitted to countries and regions outside the EU, we will ensure that appropriate protective measures are taken, such as the Standard Contractual Clauses (SCCs) of the European Commission, to ensure that your data transmission complies with the requirements of applicable laws and regulations such as GDPR.

4. Data storage and retention

Your data is stored on servers located within the European Union. Furthermore, we retain your personal information only for the period necessary to achieve the purposes outlined in this policy, while complying with applicable legal or regulatory requirements. The specific criteria for determining the retention period are as follows:

• Account information:It will be retained during the duration of your account until you actively cancel it;
• Location information:It will be retained during the existence of your account until you actively cancel it;
• Order information:It will be retained for 1 year during the duration of your account;
• Message notification: Retained for 1 month during the duration of your account;
• Data based on consent: If you withdraw your consent or cancel your account, we will immediately stop processing and delete the data.

Upon the expiration of the retention period, your personal data will be securely deleted or anonymized.

5. Your rights as a data subject

According to applicable laws and regulations such as GDPR, as a data subject, you have the following rights:

• Access right:You have the right to request access to the personal data we hold about you.
• Right to correction:You have the right to request the correction of inaccurate or incomplete personal data.
• Right to erasure (right to be forgotten):Under certain conditions, you have the right to request us to delete your personal data.
• Right to restriction of processing:In certain circumstances, you have the right to request us to suspend the processing of your personal data.
• Data portability: You have the right to receive the data you provided to us in a structured, commonly used, and machine-readable format, and to transmit it to other controllers.
• Right to object:You have the right to object to our processing based on legitimate interests in specific circumstances.
• Withdrawal of consent:If the processing is based on your consent, you have the right to withdraw your consent at any time, but this does not affect the legality of the processing based on consent before withdrawal.
• How to exercise your rights: You can submit a request to us through the contact information provided in Section 10 (Data Controller). For security purposes, we may request you to provide proof of identity. We will respond to your request within one month.
• Right to lodge a complaint with a regulatory authority:If you believe that our processing of your personal data violates applicable laws and regulations such as the GDPR, you have the right to lodge a complaint with the data protection authority in the place where the alleged infringement occurred. For example, in Croatia, the regulatory authority is:

  Croatian Agency for Personal Data Protection (AZOP)(Website: https://azop.hr/)

6. Data security

We have implemented security technical and organizational measures to protect your personal data and prevent its accidental or illegal loss, use, disclosure, or access. These measures include, but are not limited to:

• Encryption: Encrypt the data being transmitted (using TLS/SSL).
• Access control: Strict access restrictions are imposed on employees and service providers, limiting access to data solely for necessary purposes.
• Security audit: Regularly review and evaluate our security practices.

7. Children's privacy

Our services are not designed for children under the age of 18. We do not intentionally collect personal information from children. If you are a parent or guardian and become aware that your child has provided us with information, please contact us through the contact information provided in Section 10, and we will take steps to delete that information.

8. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will take effect after we post the updated policy. We will notify you of significant changes by, for example, posting a prominent notice within the product application.

9. Contact us

If you have any questions, comments, or concerns regarding this Privacy Policy or our data protection practices, please feel free to contact us through the detailed information provided in Section 10.

10. Data controller

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact us through the following methods:

• Company Name: HIVE BOX (HK) LIMITED
• Registered Address: ROOM 1903, 19/F, LEE GARDEN ONE, 33 HYSAN AVENUE, CAUSEWAY BAY, HONG KONG
• Email: fc-privacy@fcbox.com
• Data Protection Officer (DPO) contact information: fc-privacy@fcbox.com