Privacy Policy
Last updated: 14 July 2026
This policy explains what personal data we collect, how we use, share and protect it, and your rights under the UAE Personal Data Protection Law.
1. Who we are
HIVE Business Center (“HIVE”, “we”, “us”) provides serviced offices, meeting rooms and UAE company-setup facilitation at i-Rise Tower, Barsha Heights (TECOM), Dubai, United Arab Emirates. HIVE is operated under Deluxe Homes Group [licence details to be added], which acts as the data controller for the personal data described in this policy.
2. Data we collect
We collect only the data we need to provide our services:
- Contact and lead details — name, email address, phone number, company name and the content of enquiries you send us (for example a tour request or setup enquiry).
- Account details — name, work email, company name and a hashed password when you create a member account.
- Booking and payment metadata — what you booked, dates and times, amounts in AED, VAT, invoice and payment status. Card payments are processed by our payment provider (Stripe); your full card details are sent directly to the provider and are never stored on HIVE systems.
- Company-setup information — where you engage us to facilitate a UAE licence or visas, the documents and details required by the relevant authority (for example passport copies and shareholder details), which you provide for that purpose.
- Access records — logs of entries made with your personal PIN or QR code, and standard technical logs (IP address, browser type, pages requested) generated when you use our website.
3. Cookies and analytics
Our website uses essential cookies only: authentication cookies that keep you signed in to your member account, and a language-preference cookie that remembers whether you chose English or Arabic. We do not use advertising cookies, marketing trackers or third-party audience-measurement analytics (such as Google Analytics or Meta Pixel).
We use Sentry, an error-monitoring service, to detect technical faults on the site. When an error occurs, Sentry receives technical diagnostic data about it; we configure it to strip email addresses, IP addresses and other personal identifiers before events are sent.
4. Why we use your data (purposes)
We use personal data to:
- respond to enquiries and arrange tours;
- create and manage your account, bookings and workspace agreements;
- take payment, issue tax invoices and keep required accounting records;
- prepare and submit company-setup applications on your instruction;
- operate building access and keep our premises and systems secure;
- send service messages about your bookings and account (we do not send marketing without your consent);
- comply with UAE legal obligations, including tax and licensing requirements.
5. Legal basis
We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). Depending on the activity, our basis is: the performance of a contract with you (accounts, bookings, workspace agreements); your consent (marketing, and submitting your documents to authorities for company setup); compliance with a legal obligation (tax, accounting and licensing records); or our legitimate interests in running and securing our premises and website, where those interests do not override your rights.
6. Who we share data with
We do not sell personal data. We share it only with:
- Our payment provider (Stripe), to process card payments and refunds.
- Government authorities and free zones, when you engage us for company setup — we submit your application documents to the relevant authority with your consent and on your instruction.
- Service providers that run our systems — website hosting (Vercel), database and authentication (Supabase), transactional email (Resend) and error monitoring (Sentry) — each acting on our instructions under contract.
- Professional advisers, insurers or public authorities where the law requires it or where necessary to establish or defend legal claims.
7. International transfers
Some of our service providers store data on servers outside the UAE. Where personal data leaves the UAE, we transfer it in accordance with the PDPL, relying on destinations with adequate protection or on contractual safeguards with the provider.
8. How long we keep data
We keep personal data only as long as needed for the purposes above: enquiry data for up to 24 months after our last contact; account and booking records for the life of your account and as required afterwards for legal claims; invoices and payment records for the periods required by UAE tax and commercial law (generally at least 5 years); company-setup files for the duration of the engagement plus any legally required period; and access logs for a short rolling period appropriate to security. Data is deleted or anonymised when no longer needed.
9. Your rights
Under the PDPL you have the right to request access to your personal data, correction of inaccurate data, deletion of data we no longer need, restriction of or objection to certain processing, a copy of data you provided in a portable format, and to withdraw consent at any time where processing is based on consent (this does not affect processing already carried out). To exercise any of these rights, contact us using the details below or via our contact page. You may also lodge a complaint with the UAE Data Office if you believe your rights have been infringed.
10. Security
We protect personal data with technical and organisational measures, including encrypted connections (HTTPS) across the site, access controls and role-based permissions on our systems, hashed passwords, payment processing handled entirely by our PCI-DSS-compliant payment provider, and personal, non-transferable access credentials for the premises. No system is perfectly secure, but we review our measures regularly and limit staff access to what each role requires.
11. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with its “last updated” date, and material changes will be highlighted or notified where required.
12. Contact
For any privacy question or to exercise your rights, contact HIVE Business Center, i-Rise Tower, Barsha Heights (TECOM), Dubai, UAE — operated under Deluxe Homes Group [licence details to be added].
You can also reach us via our contact page, or read our Terms of Service.