Privacy Policy
Last updated: [insert date on publish]
Hivig (“Hivig,” “we,” “us,” or “our”) is operated by Naganarai Media Tech Private Limited. This policy explains what personal data we collect through hivig.com, why, how it is used and protected, and the rights available to you, wherever you are located. It is written to address obligations under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).
1. Who we are
Naganarai Media Tech Private Limited, operating Hivig, is the data fiduciary (under DPDP), data controller (under GDPR), and business (under CCPA/CPRA) responsible for the personal data described in this policy.
Contact for privacy matters: [insert grievance officer / privacy contact email — required under the DPDP Act]
2. What we collect
| Data | Collected when | Purpose |
|---|---|---|
| Email address | Subscribing to the Hivig brief / waitlist | Sending the newsletter and product updates |
| Name, email, company, message | Submitting a consultancy enquiry | Responding to your enquiry, scoping engagements |
| Name, credentials, professional affiliation | Applying as a Verified Expert Contributor | Editorial vetting, attribution on published content |
| Company and listing details | Submitting or claiming a Vendor Profile | Displaying vendor-submitted factual data, distinct from the independent Hivig Score |
| Usage data (pages viewed, device, browser, approximate location, referrer) | Automatically, via cookies and analytics | Understanding site usage, improving content and performance |
| Cookies and similar technologies | Automatically, per your cookie preferences | See Section 6 |
We do not knowingly collect any special category / sensitive personal data (health, biometric, financial account details, etc.) through this site.
3. Legal basis for processing
Under GDPR, we rely on: your consent (newsletter sign-up, non-essential cookies), legitimate interest (basic site analytics, responding to enquiries you initiate), and contractual necessity (delivering a consultancy engagement you request).
Under the DPDP Act, we process personal data on the basis of your consent, given freely, specifically, and through clear affirmative action, or where processing falls under a legitimate use recognized by the Act (for example, you voluntarily providing data to receive a service you requested).
Under CCPA/CPRA, we disclose the categories above and your rights in Section 5; we do not sell or share personal data for cross-context behavioral advertising.
4. How we share data
We do not sell personal data. We share data only with:
Service providers who process data on our behalf under contract (e.g., email delivery platform, hosting and analytics providers such as Vercel), strictly to provide the service.
Legal or regulatory authorities, where required by law.
A successor entity, in the event of a merger, acquisition, or asset sale, subject to the same protections described here.
Where any service provider processes data outside your country of residence (including transfers from the EU/UK/India to the United States or elsewhere), we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms recognized under applicable law.
5. Your rights
If you are in the EU/UK (GDPR): you have the right to access, rectify, erase, restrict, or port your data, to object to processing based on legitimate interest, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your local supervisory authority.
If you are in India (DPDP Act): you have the right to access a summary of your personal data and its processing, to correction and erasure, to grievance redressal directly with us, and to nominate another individual to exercise your rights in the event of death or incapacity. You may withdraw consent at any time, as easily as it was given.
If you are a California resident (CCPA/CPRA): you have the right to know what personal data is collected, to request deletion, to correct inaccurate data, to opt out of sale or sharing (we do not sell or share, per Section 4), to limit use of sensitive personal information, and to not be discriminated against for exercising these rights.
To exercise any of these rights, contact [insert privacy contact email]. We will respond within the timeframe required by applicable law.
6. Cookies
We use the following categories of cookies:
Strictly necessary — required for the site to function (e.g., remembering your cookie preferences). Always active.
Analytics — helps us understand aggregate site usage. Active only with your consent.
Functional — remembers preferences (e.g., saved filters on Intel or the Race). Active only with your consent.
Marketing — not currently used. If introduced, this policy will be updated and fresh consent requested.
You can accept, reject, or customize non-essential cookies when you first visit the site, and change your choice at any time via Cookie Preferences in the site footer. See Section 8 for how consent choices are recorded.
7. Data retention
We retain personal data only as long as necessary for the purpose it was collected: newsletter contact data until you unsubscribe, enquiry-form data for the duration of the engagement discussion plus a reasonable follow-up period, and contributor/vendor profile data for as long as the profile remains active on the platform. You may request earlier deletion at any time (Section 5).
8. How consent is recorded
When you make a cookie choice, we store that choice (which categories you accepted) together with a timestamp, so we do not re-prompt you on every visit. This choice is re-requested if our cookie categories change materially, or after 12 months, whichever comes first.
9. Security
We apply reasonable technical and organizational measures (encryption in transit, access controls, and vendor due diligence) to protect personal data. No system is completely secure, and we cannot guarantee absolute security.
10. Children’s privacy
Hivig is intended for working professionals and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the site and applicable law evolve. Material changes will be reflected by an updated “Last updated” date, and where required, we will seek fresh consent.
12. Contact
Naganarai Media Tech Private Limited
[insert registered address]
[insert grievance officer / privacy contact email]
If you are in the EU/UK and believe we have not resolved your concern, you may contact your local data protection supervisory authority.