Last updated: 3 August 2026
HX | Hive eXperience ("HX", "we", "us", "the Platform") is operated by Elevated Experience Ltd, a company registered in Jersey, Channel Islands. This Privacy Policy explains, in full, how we collect, use, share, store, and protect personal information for everyone who uses the Platform, wherever in the world they use it from, at hive.elevatedexperience.vip and any associated apps or services.
HX is used by members and communities in many countries. This policy is written to meet our obligations under the Data Protection (Jersey) Law 2018, and, for members based in the United Kingdom or European Economic Area, the UK GDPR and EU GDPR. Rather than offering a different, lesser standard of protection to people outside those regions, we apply the same core protections and rights described in this policy to every HX member globally.
Elevated Experience Ltd is the Data Controller for all personal information processed through HX, wherever our members are based. That means we, not any individual Hive owner or Hive administrator, are legally responsible for deciding how and why personal data is processed on the Platform (see Section 6 for what this means in practice for community-level administrators).
Business Registration: Elevated Experience Ltd is registered with the Jersey Financial Services Commission (JFSC) under the Registration of Business Names (Jersey) Law 1956, registration number 36688.
Data Protection Registration: Separately, Elevated Experience Ltd is registered with the Jersey Office of the Information Commissioner (JOIC) under registration number 19141. You can verify this registration at jerseyoic.org.
Lead supervisory authority: Because we are established in Jersey, the Jersey Office of the Information Commissioner (JOIC) is our lead data protection supervisory authority. If you are based in the UK or EEA, you may also have the right to raise a complaint with your own local data protection authority, in addition to or instead of JOIC, see Section 14.
Wherever GDPR or an equivalent standard applies to you, we only process your personal data where we have a valid legal basis to do so. Depending on what we're doing with your data, that basis is one of the following:
| Basis | When we rely on it |
|---|---|
| Contract | Creating and running your account, hive membership, messaging, event registration, and marketplace or course purchases, this is the core basis for most of what HX does. |
| Consent | Optional profile fields you choose to add, marketing communications you opt into, and, where required locally, non-essential cookies or similar technology. |
| Legitimate interests | Keeping the Platform secure, preventing fraud and abuse, maintaining essential technical logs, and improving reliability, always balanced against your right to privacy. |
| Legal obligation | Retaining certain financial and transaction records, and responding to lawful requests from regulators or law enforcement. |
We collect the following categories of information:
Your name, email address, password (securely hashed, never stored in plain text), date of birth (used only to confirm you meet our minimum age requirement, see Section 12), country, optional phone number, profile photo, headline, biography, skills, experience, and, if you list one, verified business details and handle/URL.
Posts, comments, reactions, messages, group chat and Circle (sub-thread) content, event registrations and attendance, course enrolments and progress, testimonials, reviews, and any other content you create within a specific Hive or across the Platform.
Transaction history for anything you buy or sell (events, marketplace listings, courses), and payout details needed to pay you if you sell something. We do not directly process or store full payment card details ourselves, all payments are handled by our payment providers (currently PayPal, and card processing partners they use); we store only what's needed to reconcile a transaction, such as a PayPal email address, order status, and amount.
Essential device and session information, such as IP address, browser/device type, timestamps, and error logs, collected strictly to keep the Platform secure, functioning, and able to diagnose problems. We do not use this data to build behavioural advertising profiles, see Section 4.
This is a deliberate, structural commitment, not just a policy statement:
We do not sell your personal information to third parties. HX is a multi-tenant platform, meaning many independent communities ("Hives") run on the same underlying service, each with its own membership and its own administrators. We share information in the following, limited circumstances:
When you join a Hive, that Hive's owner and administrators can see the same profile and activity information any other member of that Hive can see (your profile, posts, and participation within that Hive), plus membership-management information needed to run the community, such as your join date, role, and any reports filed about you within that Hive. A Hive administrator cannot see your activity in other Hives you belong to, your private messages with people outside a shared group chat, or your account-level data such as your password or full payment details. Hive administrators act as data processors for their own community's day-to-day moderation, Elevated Experience Ltd remains the Data Controller throughout.
We use a small number of infrastructure and service providers to operate the Platform, each of whom processes data on our behalf, under a Data Processing Agreement (DPA) or equivalent contractual safeguard, and only to the extent necessary to provide their service to us:
We may disclose information where required by law, regulation, court order, or other valid legal process, or where necessary to protect the rights, property, or safety of HX, our members, or the public.
Jersey is recognised by both the UK and the European Commission as providing an adequate level of data protection, which permits the free flow of personal data between Jersey, the UK, and the EEA without additional safeguards being required.
Some of our infrastructure and service providers (Section 6) may process or store data in countries outside Jersey, the UK, or the EEA, including the United States. Where a transfer is made to a country that does not benefit from an adequacy decision, we ensure an appropriate safeguard is in place before the transfer occurs, such as Standard Contractual Clauses (SCCs) approved by the European Commission (and the corresponding UK Addendum to those clauses), or an equivalent mechanism recognised under the Data Protection (Jersey) Law 2018. You can request further detail on the safeguards applying to a specific transfer by contacting us, see Section 14.
Where we store data: Your data is stored securely using Supabase, a cloud database platform built on PostgreSQL, hosted on Amazon Web Services (AWS) infrastructure, in secure, SOC 2 compliant data centres.
Authentication: We use Supabase Authentication, which provides industry-standard security including bcrypt password hashing, JWT token-based sessions, and Row Level Security (RLS) policies enforced at the database level.
Row Level Security: Database-level security policies ensure members can only read, create, update, or delete data that belongs to them, or that they've been granted access to through genuine community membership.
Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS). Data at rest is encrypted using AES-256 encryption.
Media storage: Images, voice notes, and video messages are stored via Supabase Storage with access controls, served only via authenticated URLs.
Access control: Only a small number of authorised personnel and platform administrators can access personal data directly, and only where necessary to operate, secure, or support the Platform.
We retain your personal data for as long as your account is active, or as needed to provide you with our services. Certain financial and transaction records may be retained for longer where we are required to do so for tax, accounting, or other legal or regulatory purposes, even after an account is deleted.
You can permanently delete your own account at any time from Account Settings, this removes your profile from every Hive directory and community you belong to. Deletion is immediate and automated, your personal data is erased at the moment you confirm, except for the limited records described above that we are required to keep for longer. See how to delete your account for step-by-step instructions, including what to do if you can't sign in.
If you'd like a copy of the personal data we hold about you before or instead of deleting your account, contact us at the address in Section 14 and we will provide it in a commonly used, machine-readable format within one month, as required under Section 10.
As a Jersey-registered Data Controller, we process your personal data in accordance with the Data Protection (Jersey) Law 2018 and, where applicable, the UK GDPR and EU GDPR. We extend the same rights described here to every HX member globally, regardless of where you live. You have the right to:
To exercise any of these rights, contact us at hx@hx.elevatedexperience.vip. We will respond within one month, as required by law.
The Platform uses browser local storage to remember your preferences, such as dark/light mode, your active Hive, and view state, and essential session cookies/tokens for authentication only. We do not use third-party advertising or tracking cookies of any kind.
The Platform is not intended for use by anyone under the age of 16, and we do not knowingly collect personal information from children under 16. Age is confirmed at sign-up, and if we become aware that we've collected personal information from a child under 16, we will delete it.
Some Hives on HX are run by charities, non-profits, or organisations working with younger people. Where a Hive is intended for members below our platform-wide minimum age of 16, or has its own stricter age or safeguarding requirements, it is the responsibility of that Hive's owner and administrators to implement and enforce those additional protections at the community level, on top of, never instead of, this platform-wide minimum.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date above; for significant changes, we will also notify you in-app or by email before they take effect.
If you have any questions about this Privacy Policy or our data practices, or wish to exercise any of the rights in Section 10, please contact us:
Elevated Experience Ltd
Registered in Jersey, Channel Islands · JFSC Business Registration No. 36688 · JOIC Data Protection Registration No. 19141
Email: hx@hx.elevatedexperience.vip
If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Jersey Office of the Information Commissioner (JOIC), our lead supervisory authority, at jerseyoic.org. If you are based in the UK or EEA, you may also have the right to complain to your own local data protection authority.