Privacy Policy

1. Who we are

Entity name: HiveLabel Tech Global Limited
Privacy enquiry email: contact@hivelabel.com
Governing jurisdiction: Hong Kong Special Administrative Region.

2. Scope of this policy

This Privacy Policy applies to:

• (a) Website visitors browsing hivelabel.com;
• (b) Prospective and active enterprise clients ordering data collection, annotation, validation, and human in the loop review services;
• (c) Prospective and verified task contributors registering on our contributor platform or performing data labelling tasks;
• (d) All data submitted via web forms, account registration, email communications, project workflows, and platform interactions.

This policy does not govern third party external websites linked from our site. We are not responsible for external site privacy practices.

3. Categories of personal data we collect

3.1 Information collected from website visitors and enquiry submitters

• Contact identifiers: full name, email address, job title, organisation name, and self identified role;
• Voluntary information submitted through contact forms, enquiry forms, or business correspondence;
• Automatically collected metadata: IP address, browser type, device information, session timestamps, page navigation logs, and cookie generated session identifiers.

3.2 Information collected from enterprise clients

• Business contact details: corporate name, authorised contact person name, job title, corporate email, business phone number, and business mailing address;
• Project related materials: task specifications, labelling guidelines, project requirement documents, communication records, support tickets, and meeting notes;
• Billing related contact information. HiveLabel will not store full payment card credentials; payment processing is delegated to regulated third party payment processors;
• Client supplied source datasets: clients may upload images, audio, video, text, and multimodal content for annotation workflows. Such datasets may contain third party personal data. In such circumstances, the client acts as Data User under PDPO; HiveLabel acts as Data Processor and only processes personal data strictly following the client’s written project instructions. We shall not reuse, mine, or repurpose source dataset personal data for internal model training without explicit written approval from the client.

3.3 Information collected from task contributors

• Contributor profile data: full legal name, contact email, country/region, professional background, and qualification information submitted for task access vetting;
• Workflow generated records: task completion logs, quality audit outcomes, reputation score metrics, and review feedback on submitted labelling work;
• Reward related information required for compensation settlement. We do not store banking credentials locally where third party payout providers are used.

3.4 Cookies and local storage

Our website uses essential functional cookies for session stability, form operation, and user authentication. Non essential analytics cookies will only activate upon visitor consent. You may disable cookies within your browser settings; disabling cookies may break certain web form functionalities. We deploy no persistent third party advertising cookies without explicit opt in consent.

4. Purposes for processing personal data

We process personal data only for lawful purposes directly related to our business operations:

4.1 For website visitors and enquiry submitters

• Respond to general enquiries, partnership requests, and business discussions;
• Process account registration, access requests, and user verification where applicable;
• Conduct anonymous aggregate website usage analysis to improve site usability and service quality.

4.2 For enterprise clients

• Prepare quotations, negotiate, execute, and deliver contracted data service projects, including task definition, contributor routing, multi pass QA validation, and dataset exports;
• Manage project coordination, milestone communication, invoicing, reconciliation, and customer support;
• Internal security audit, service quality improvement, and platform optimisation;
• Send operational service status notices. Marketing related emails will require opt in under Hong Kong direct marketing rules; you may opt out of marketing communications at any time;
• Comply with Hong Kong statutory and regulatory legal obligations.

4.3 For task contributors

• Perform contributor vetting, qualification assessment, and assign appropriate data annotation tasks matching contributor skill sets;
• Record task output, quality review results, and contributor reputation metrics;
• Process reward and compensation settlement for completed accepted work;
• Deliver platform operational notices regarding task queues, quality rules, and service updates.

5. Disclosure and cross border transfer of personal data

We will never sell, rent, or trade your personal data to unrelated third party commercial entities. Disclosure may only happen in permitted cases below:

5.1 Authorised subcontractors and service providers

We may share necessary personal data with vetted subcontractors, cloud infrastructure hosts, payment and payout service vendors, and quality review subcontractors. All such third party processors are bound by written contractual data protection obligations consistent with PDPO, limiting processing strictly to our documented instructions.

5.2 Cross border data transfer

Our cloud infrastructure, contributor workforce, and subcontractor resources may be located outside Hong Kong.

• For client provided project personal data: the client shall secure lawful cross border transfer grounds, including relevant data subject consents where legally required.
• For visitor, client, and contributor personal contact data: we implement contractual safeguards with overseas processors aiming to maintain protection standards comparable to Hong Kong PDPO requirements.

5.3 Legal compulsion

We may release personal data if compelled by Hong Kong court order, statute, or regulatory requirement, or when reasonably necessary to defend our legal rights, prevent fraud, or mitigate material harm.

5.4 Business re organisation

If HiveLabel enters merger, acquisition, or asset sale proceedings, personal data assets may transfer as part of business assets. We will provide reasonable notice to affected users where practicable.

6. Data security

We implement reasonable organisational and technical safeguards, including role based access permission control, access event logging, encryption for data in transit, credential governance, and periodic internal security assessment, to mitigate risks of accidental loss, destruction, alteration, or unauthorised access to personal data.

No internet hosted digital service can guarantee absolute security. You acknowledge inherent residual security risks of online based systems.

7. Data retention rules

• Visitor and enquiry submitter personal data: retained until a user submits a deletion request, or for 24 months after last active interaction, whichever comes first.
• Enterprise client business contact and project records: retained for the full business relationship term plus a statutory compliant retention period after project closure for contract, tax, and compliance record keeping purposes. Upon client written instruction after project completion, source client datasets shall be securely deleted or returned. Fully anonymised non identifiable aggregated statistics may be retained for internal service improvement.
• Contributor profile and workflow records: retained while the contributor maintains platform access plus a compliance retention window after account closure.
• Audit and system logs: kept for periods required by applicable Hong Kong regulatory requirements.

8. Data subject rights under the Hong Kong PDPO

Under Cap. 486 PDPO, data subjects hold rights of access to their personal data and correction of inaccurate personal data.

Submit written requests to contact@hivelabel.com. We shall verify applicant identity before handling requests. Statutory allowed administrative fees may apply for formal data access requests.

Where personal data belongs to client uploaded project datasets, HiveLabel as Data Processor will forward subject access or correction enquiries back to the client acting as Data User, unless we receive explicit written authorisation from the client to handle such requests directly.

9. Children’s privacy

Our services are intended for adult enterprise users and adult task contributors. We do not knowingly collect personal information from persons under 18 years old. If you believe we hold personal data of minors collected unintentionally, please email contact@hivelabel.com and we will erase those records.

10. Amendments to this Privacy Policy

We may revise this Privacy Policy from time to time as our services and legal requirements evolve. Revised text will be published at https://hivelabel.com/privacy-policy together with an updated effective date.

Material policy changes will be notified to existing clients and registered users by email where reasonably feasible. Continued use of the website and services after publication of revisions constitutes acceptance of updated terms.

11. Third party links

Our website may contain hyperlinks pointing to external third party websites. This Privacy Policy does not extend to those external platforms. We recommend you review each external site privacy statement before submitting personal data.

12. Contact information

For all privacy related questions, access correction requests, or complaints:
Email: contact@hivelabel.com
Entity: HiveLabel Tech Global Limited
Governing law: Laws of Hong Kong Special Administrative Region.