Privacy policy
Who we are
Hive Stewards is a trading name of Hive International Group Ltd, registered in England and Wales under company number 17368328, with its registered office at 66 Paul Street, London, England, EC2A 4NA. We are the data controller for the personal data described in this policy.
For anything about your data, email hello@hivestewards.com.
What we collect
If you contact us or use the readiness review
- Your name, email address and phone number if you give it
- The area or postcode of your property, and any listing link you share
- The answers you give in the readiness review, if you choose to send them
- Anything you send us on WhatsApp, if you use the message button
The WhatsApp button on our site is an ordinary link. It opens WhatsApp on your own device and sets nothing on ours. Anything you then send is held in your WhatsApp account and ours, under Meta's terms as well as this policy.
When you send the enquiry form, the details go to our web host in the UK or the European Economic Area and are emailed to us. They are not stored in a database.
The readiness review runs entirely in your browser. Your answers are not transmitted anywhere unless you press the button to send them, which copies them into the enquiry form for you to check before submitting.
If you become a client
- Contact and billing details, and bank details for payments
- Property details, access codes, safety certificates and insurance documents
- Booking and earnings records for the properties we manage
- Guest names and contact details supplied through booking platforms, which we handle only to run your bookings
Guest details reach us from the booking platform, not from the guest directly. We use them only to run the stay itself: arranging access, answering questions and coordinating the changeover. Once that is done, we delete them on the schedule below. Guests receive their own privacy information from the platform they booked through.
Why we use it, and our lawful basis
- To answer enquiries and prepare quotes, because you asked us to, as steps before entering a contract.
- To provide management services, to perform our contract with you.
- To meet legal duties: tax records, and short-term let registration and safety requirements.
- To improve the service and keep records of what we advised, in our legitimate interests in running the business, balanced against your rights.
We do not use your data for marketing unless you have asked to hear from us, and you can stop that at any time by replying to any message. Where we rely on your consent for anything, you can withdraw it at any time; that does not affect anything we did lawfully before you withdrew it.
You do not have to give us any of this information, but there is some we cannot work without. If you don't give us the property address, safety certificates or access details, we won't be able to manage the property.
No automated decision-making
We do not make decisions about you by automated means and we do not profile you. Nightly pricing is set by software, but that concerns the property's rates, not decisions about any person.
Who we share it with
We share only what is necessary, with:
- The booking platforms you use
- Cleaners, tradespeople and contractors, who are given access details for a specific job
- Our group company in Egypt, which manages properties there and shares the same systems as us, so its staff can reach the records held in them
- Our accountant, insurer and professional advisers
- Software we use to run the service, such as pricing and messaging tools
- Google, whose Fonts service delivers the typefaces on this site and, in doing so, receives your IP address with each font request
- Public authorities where the law requires it
We never sell personal data.
Where your data is held
Our hosting provider keeps standard server access logs, recording things like IP address, time and the page requested, for security and troubleshooting; they are deleted automatically on our hosting provider’s standard schedule. We do not use them for anything else, and we can tell you the retention period currently in force on request. Data is held in the UK and the European Economic Area where possible. Some of our software providers are based outside the UK, and our group company in Egypt uses the same systems we do, so your data may be reached from Egypt.
Egypt is not covered by UK adequacy regulations. Where data goes there, or to any other country without adequacy, we rely on the International Data Transfer Agreement or the UK Addendum, together with an assessment of the risks involved. You can ask us for a copy of the safeguards that apply to a transfer.
How we keep it safe
Access to client records is limited to the people who need it, on accounts protected by strong passwords and two-factor authentication where the service offers it. Devices are encrypted and kept up to date. Keys, access codes and certificates are held in a password manager, and codes are changed when a contract ends or a contractor stops working with us.
If a breach happens that is likely to put your rights at risk, we will tell you without undue delay, and we will report it to the Information Commissioner's Office within 72 hours of becoming aware where the law requires it.
Children's data
Our services are for property owners and we do not knowingly collect data about children. A guest booking may list the number of children staying; we use that only to prepare the property, and we do not ask for their names or any other detail about them.
How long we keep it
- Guest details for a stay: deleted once the stay has ended and any damage claim or dispute is closed, unless the law requires longer
- Enquiries that don't become work: 12 months
- Client records and correspondence: 6 years after the contract ends
- Financial records: 6 years, as HMRC requires
- Safety certificates and risk assessments: for as long as we manage the property, plus 6 years
Guests
This notice is written for property owners. Guests staying at a property we manage have their own notice setting out what we hold about them and why: guest privacy notice.
Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it elsewhere. You can also object to processing based on legitimate interests, and withdraw any consent you have given. We'll respond within one month, and there is no charge.
To exercise any of these rights, email hello@hivestewards.com with what you would like us to do. We may ask you to confirm who you are before we act, so that we don't hand your data to someone else.
We have not appointed a data protection officer, as we are not required to. Questions go to the email address above.
Complaining about how we use your data
You have the right to complain to us directly if you think we have not handled your personal data properly. Email hello@hivestewards.com, or write to us at the registered office above, and say what has gone wrong. You do not need to use any particular form of words, and it doesn't matter how you send it.
We will acknowledge your complaint within 30 days of receiving it, look into it, keep you posted while we do, and tell you the outcome without undue delay.
You can also complain to the Information Commissioner's Office at any time, at ico.org.uk or on 0303 123 1113. You are not required to come to us first, though it is usually quicker if you do.
Changes to this policy
If we change how we use personal data we'll update this page and the date at the top. Material changes will be sent to current clients by email.