This policy explains what personal data Hive Fitness Center collects through this website, the Hive app and the gym's entry system, why, who else handles it and how long it is kept.
Who we are
The controller of your personal data is HIVE D.O.O.E.L. Skopje (ХИВЕ ДООЕЛ Скопје), Londonska 4/6, Skopje – Karposh, EMBS 7945914. For anything about your data, write to info@hivefitnesscenter.com.
The website
The website sets no cookies and uses no analytics or advertising. Its fonts are served from our own domain.
Hosting. The website runs on Cloudflare. Like any web server, it handles your IP address and records each request (the page asked for, the time and technical details of your browser) to keep the site working and secure. These records are deleted automatically after at most 7 days.
Contact form. When you send a message, we receive your name, email address, message and the language of the page. The form sends it by email through Resend to our mailbox on Google Workspace, with your address as the reply-to, so we can answer you. Resend keeps a copy of each email, stored in the United States, for 30 days.
Spam check. The contact page uses Cloudflare Turnstile to tell people from bots. Cloudflare processes your IP address and technical details of your browser for us to run that check. It also uses these signals to improve its bot detection, under its own Turnstile privacy policy.
Map. When the map comes into view, your browser loads it from OpenFreeMap, which sees your IP address like any website you visit. OpenFreeMap normally deletes its server logs after 7 days. The “Open in Google Maps” and “Open in Apple Maps” links send nothing until you click them; after that, Google's or Apple's privacy policy applies.
The Hive app and the gym
Your account. You sign in with your email address and a code we email to you, sent through Resend. You give us your first and last name, and you can add a phone number. If you sign up at reception instead, staff create your account with your name, email address and, if you give it, your phone number. We keep the language you chose for the app. When you sign in, our sign-in service records your IP address and device details to protect your account.
Membership. For each plan you buy, we keep the plan, the price you paid, its status and its start and end dates.
Entry. The QR code in the app identifies you to the entrance and exit readers. It is valid for 60 seconds and contains only an account reference. If you use an access card instead, we keep the card's number linked to your account. Each time you enter and leave, we record the time, which shows you your visits and lets the app show how busy the gym is. The app shows only the number of people in the gym, never who they are.
Sauna. We keep your sauna bookings: the slot, when you booked it and whether you cancelled. The sauna door checks your booking when you scan your QR code or card.
On your phone. The app keeps your sign-in and your language on your phone, so you stay signed in.
Staff. Gym staff see your account, membership, visits, bookings and access cards in our staff system, to serve you at reception.
Why we use your data
- To provide your membership: your account, entry, visits, sauna bookings and access cards are needed to give you what you paid for.
- Because the law requires it: we keep membership records, including what you paid, for accounting.
- In our legitimate interest: to answer your messages, keep spam out of the contact form, and keep the website, the app and your account secure.
Who else handles your data
We use these services to run the website and the app. They process your data only for us, under their data processing terms:
- Supabase, our database and sign-in service, for your account and everything in the app. It stores this data in the EU, in Frankfurt.
- Cloudflare, for hosting the website and the spam check.
- Resend, for sending sign-in codes and contact messages.
- Google Workspace, for our email.
- OpenFreeMap, for the map on the website.
Some of these companies are based outside North Macedonia, so your data may be processed abroad, under the safeguards set by their data processing terms. We don't sell your data and don't use it for advertising. Apple and Google distribute the app under their own privacy policies.
How long we keep it
- Your account and its history, including visits, sauna bookings and access cards you no longer use, are kept while you have an account.
- Contact messages are kept in our mailbox until we have answered you, and at most 12 months after our last reply.
- Sign-ups that are never confirmed are deleted an hour after the last code was sent.
- When you delete your account, we delete your profile, visits, access cards and sauna bookings at once, and cancel any open membership. Membership records stay for accounting, with nothing linking them to you.
Deleting your account
In the app, go to Settings > Delete account. If you can't use the app, write to info@hivefitnesscenter.com from the email address of your account. What is deleted and what is kept is explained on Delete your account.
Your rights
Under the Law on Personal Data Protection, you can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to receive it in a portable format, and you can object to how we use it. Write to info@hivefitnesscenter.com and we will reply within a month.
If you think we handle your data unlawfully, you can complain to the Personal Data Protection Agency (azlp.mk).
Changes
When we change this policy, we update this page and the date at the top.