Privacy Policy

Information you give us. Name, email address, shipping address, phone number, membership tier, plan interest, honey preferences, hive name (Queen tier), messages you send us, and anything else you choose to submit through forms, checkout, email, or SMS.

Payment information. Payments are handled by Stripe. We never receive or store your full card number, CVV, or bank credentials. We do receive limited billing metadata from Stripe (name on card, card brand, last four digits, expiration, billing country/postal code, Stripe customer ID, subscription ID, and status).

Account and subscription data. Subscription status, tier, start and renewal dates, cancellation date, order and shipment history, communications history, and email delivery events (sent, delivered, bounced, opened/clicked where enabled).

Device and usage data. IP address, approximate location (from IP), browser type, device type, operating system, referring URL, pages viewed, timestamps, and diagnostic info collected automatically through our hosting and security providers.

Cookies and similar technologies. We use strictly necessary cookies and local storage for authentication, sessions, security, and basic site functionality. If we add analytics or advertising cookies later, we'll update this Policy and ask for consent where required.

Partner beekeeper applications. If you apply through our "For Beekeepers" page, we collect the information you submit (name, contact details, location, experience, apiary details).

We don't knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). See Section 10.

We use personal information to: provide and improve the Services; create and manage your membership; process payments, renewals, refunds, and cancellations through Stripe; fulfill and ship items and match you with a hive; send transactional communications (order confirmations, shipping updates, membership updates, cancellation notices, security notices, and replies to your questions); send marketing only where you've opted in; prevent fraud, abuse, and violations of our Terms; comply with legal obligations and tax reporting; and enforce our agreements and defend our rights.

Where the law requires a legal basis, we rely on: performing our contract with you, our legitimate interests in operating and securing the Services, your consent (for marketing where required), and compliance with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share personal information only as follows:

• Service providers who help us run the Services under confidentiality and security obligations: Stripe (payments and billing portal), our email delivery provider, our hosting and database provider, our fulfillment/shipping providers and carriers, and our security, logging, and error-monitoring providers.
• Partner beekeepers, on a limited basis, to fulfill hive matching and shipping. Beekeepers don't receive your payment information.
• Legal and safety. To comply with subpoenas, court orders, lawful requests, and applicable law; to enforce our Terms; to protect the rights, property, or safety of HiveShare, our members, our beekeepers, or the public; or to investigate suspected fraud or abuse.
• Business transfers. If HiveShare is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred, subject to this Policy or with notice to you.
• With your direction or consent, including when you submit User Content for public display or ask us to share information with a third party.

All card and bank information is collected, stored, and processed by Stripe under Stripe's own privacy and security controls. We never see your full card number or CVV. Stripe's handling of your payment data is governed by Stripe's Privacy Policy. Admins can view non-sensitive billing metadata (card brand, last four digits, expiration, subscription status) through Stripe's billing portal to help update or cancel subscriptions — they cannot view your full card number.

Transactional messages. While your membership is active, we'll send account, order, shipping, billing, cancellation, and security messages by email (and by SMS if you provided a phone number). You can't opt out of these while your membership is active.

Marketing messages. We only send marketing emails with your opt-in where required. You can unsubscribe anytime via the link in any marketing email or by emailing joinhiveshare@gmail.com. Where SMS marketing is offered, reply STOP to opt out. Message and data rates may apply.

We keep personal information as long as needed to provide the Services and for legitimate business purposes, including tax and accounting records, legal and audit obligations, resolving disputes, preventing fraud, and enforcing our agreements. Typical retention:

• Active membership data — for the life of the membership plus a reasonable period afterwards.
• Order, shipping, and billing records — up to 7 years (tax and financial records).
• Marketing preferences and suppression lists — until you ask us to delete them or as needed to honor opt-outs.
• Security logs — typically 30–90 days.

When retention is no longer required, we delete or de-identify the information.

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), row-level access controls on our database, restricted admin access, and reliance on PCI-DSS-compliant processors for payment data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security. You're responsible for keeping your account credentials confidential; please notify us immediately at joinhiveshare@gmail.com if you suspect unauthorized access.

We're based in the United States and our service providers may process personal information in the U.S. and other countries. If you access the Services from outside the U.S., you understand that your information may be transferred to and processed in the U.S. and other jurisdictions whose data-protection laws may differ from yours. Where required, we rely on appropriate transfer mechanisms (such as the EU Standard Contractual Clauses).

Depending on where you live, you may have rights regarding your personal information: to access, correct, delete, or port your data; to restrict or object to certain processing; to withdraw consent where processing is based on consent; and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising (we don't sell or share as those terms are defined under U.S. state laws).

How to exercise your rights. Email joinhiveshare@gmail.com. We'll verify your identity before responding and will reply within the timeframes required by law. You won't be discriminated against for exercising a right. If we deny a request, you may appeal by replying to our response.

California residents (CCPA/CPRA). You have the rights described above, including the right to know, delete, correct, and limit use of sensitive personal information, and the right to non-discrimination. Categories of personal information we collect, use, and disclose are described in Sections 1–3.

EEA / UK / Switzerland residents (GDPR/UK GDPR). You have the rights described above and the right to lodge a complaint with your local supervisory authority. Our legal bases are described in Section 2.

Nevada residents. We do not sell personal information as defined by Nevada law.

The Services aren't directed to or intended for children under 13 (or under 16 in the EEA/UK). We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we'll delete it.

We don't use your personal information to make decisions that produce legal or similarly significant effects about you solely through automated means.

We may update this Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date and, where appropriate, we'll notify you by email at least 30 days before taking effect. Your continued use after the effective date means you accept the updated Policy.

Questions, requests, or complaints about this Policy or our privacy practices? Contact us at joinhiveshare@gmail.com.