G-HIVE LTD trading as G-Hive
Privacy Notice
This notice explains how we handle personal data for Bee-Bright and related G-Hive sessions, bookings, enquiries and applications.
Effective and last updated: 1 October 2026
Who is responsible for your information
The controller is G-HIVE LTD, trading as G-Hive, company number 16507868, registered in England and Wales. Our registered office is 120 De Montfort Way, Coventry, United Kingdom, CV4 7DT.
For privacy questions, contact us at admin@goldengenerationhive.net.
Information we collect
- Parent or guardian identity and contact details.
- Each child’s name and date of birth or age.
- Programme, session and interest choices.
- Booking references and attendance or cancellation records.
- Accessibility, dietary, medical, emergency or safeguarding information when it is provided to us.
- Declarations, permissions and consent choices.
- Payment amounts and status, Stripe payment references and refunds. We do not receive or store your full card number or card security code (CVC).
- Tutor or facilitator application information, where applicable.
- Communications, complaints and necessary administration notes.
- Technical and security information needed to operate and protect our services, such as limited device, request and misuse-prevention data.
Why we use personal data
We use personal data to answer enquiries; manage registrations, capacity and waiting lists; take payments and issue refunds; send operational messages; support safety and accessibility; manage attendance and safeguarding; assess tutor and facilitator applications; prevent fraud or misuse; meet legal, accounting and regulatory duties; and administer our services.
Our lawful bases
Depending on the activity, we rely on performance of a contract or steps requested before a contract, legal obligation, our legitimate interests in safely administering and improving services, consent for optional uses, or vital interests in an emergency. Where we need to use special-category data, such as health information, we also rely on an appropriate UK data-protection condition, including explicit consent where suitable, protecting vital interests, or establishing, exercising or defending legal claims.
Children’s information
Children’s information is normally supplied by a parent or guardian. We ask only for what is reasonably needed and keep collection proportionate to the activity.
Photos, recordings, research participation and marketing require separate, specific permission where applicable. They are not bundled into the required booking consent.
Who receives personal data
Information is shared only where needed with authorised G-Hive staff, tutors and safeguarding personnel; our database provider Supabase, Lovable and hosting providers; Stripe and payment services; communication providers; and professional advisers, insurers, auditors or accountants. We may disclose information to public authorities when lawfully required or justified.
We do not sell personal data.
International transfers
Some suppliers may process information outside the United Kingdom. Where this happens, we use recognised UK safeguards, such as an adequacy regulation or approved contractual protections, and assess supplementary measures where required.
How long we keep information
- Unsuccessful applications and general enquiries are normally kept for 12 months.
- Booking, payment, refund and contract records are normally kept for six years after the relevant financial year or relationship.
- Routine attendance information is reviewed after the programme.
- Safeguarding records are kept according to the applicable safeguarding and legal retention schedule.
- Marketing preferences are kept until consent is withdrawn or no longer valid.
- We keep information longer only where this is legally or operationally justified, then securely delete or anonymise it.
Security and data breaches
We use proportionate organisational and technical controls to restrict access and protect information. When retention ends, information is securely deleted or anonymised. If a personal-data breach occurs, we assess, contain and document it, notify the Information Commissioner’s Office where required, and tell affected people when the law requires it.
Your rights and complaints
Under UK data-protection law, you may have rights to access, correct or erase your information; restrict or object to its use; receive portable data; and withdraw consent at any time. Withdrawing consent does not affect earlier lawful use. We may need to verify your identity before responding, and some rights have legal exceptions.
Contact admin@goldengenerationhive.net. You can also complain to the Information Commissioner’s Office.
Changes to this notice
We may update this notice when our services, suppliers or legal responsibilities change. We will publish the revised notice here and update the date above. We will give a more direct notice where a change materially affects how we use personal data.