Privacy Policy

1. Data Controller

The data controller for personal data collected via hivevaultarc.com is:

2. Data We Collect

We collect only the data strictly necessary for the purposes described below:

• Contact form — name, email address, phone number (optional), company name (optional), industry (optional), team size (optional), and message.
• Server logs — IP address, browser type and version, pages visited, and request timestamps.
• Analytics data — anonymised page paths, referrers, device and browser categories, and coarse location data collected through Vercel Web Analytics. The service does not store IP addresses or use cookies to identify visitors.

3. Purposes of Processing

Your data is processed for the following purposes:

• Responding to your contact requests and enquiries about our services.
• Drafting and delivering commercial proposals and service agreements.
• Improving website performance and user experience.
• Complying with applicable legal and regulatory obligations.

4. Legal Basis for Processing

Each processing activity rests on a legal basis compliant with Article 6 of the GDPR and Article 4 of Law 09-08:

• Consent — you voluntarily submit information through the contact form.
• Performance of a contract — processing necessary to fulfil an agreed service engagement.
• Legitimate interest — security logs and aggregated, cookieless analytics used to protect and improve the site.

5. Cookies and Tracking Technologies

The public site does not currently use advertising or analytics cookies. Vercel Web Analytics measures page views with anonymised, aggregated data and does not place a cookie or retain a persistent identifier that follows a visitor across websites or days. If a future feature requires optional cookies, this policy and the consent controls will be updated before those cookies are enabled.

6. Data Retention

7. Data Sharing and Recipients

We never sell your personal data. Authorised recipients are strictly limited to the technical sub-processors necessary to operate the site:

• Vercel Inc. — site hosting and deployment (Covina, California, United States).
• Vercel Analytics — anonymised audience measurement.

None of your data is shared with third parties for advertising or marketing purposes.

8. International Data Transfers

Data hosted on Vercel servers in the United States involves a transfer outside the European Economic Area, governed by Standard Contractual Clauses approved by the European Commission under Article 46 of the GDPR. For transfers outside Morocco, Hive Vault Arc complies with Article 43 of Law 09-08 and applicable CNDP authorisations.

9. Your Rights

Under the GDPR (Articles 15–22) and Law 09-08, you have the following rights:

To exercise your rights, send your request to contact@hivevaultarc.com. We are committed to responding within 30 days.

10. Supervisory Authorities

If you believe the processing of your data infringes your rights, you may lodge a complaint with the competent authority:

11. Data Security

Hive Vault Arc implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, or accidental destruction:

• Encryption of data in transit via HTTPS/TLS.
• Strict access controls on systems holding personal data.
• Documented security incident response procedures.
• Regular review of user access rights.

12. Automated Decision-Making and Profiling

hivevaultarc.com does not carry out fully automated decision-making or profiling within the meaning of Article 22 of the GDPR. No algorithm makes decisions with legal or similarly significant effects on you based on your data.

13. Changes to This Policy

Hive Vault Arc may update this Privacy Policy to reflect changes in its practices or applicable legal obligations. In the event of a material change, a notice will be provided by email where appropriate or on the site. The “Last updated” date will be revised accordingly.

14. Contact Us

For questions regarding this policy or to exercise your rights, contact our team: