Confidentiality Policy

1. Data controller

The data controller is HivePark LLC.

Email: [email protected] · Phone: +995 598 38 97 79

2. Data we process

For driver registration and support we process:

Phone number and personal ID number (11 digits)
Front and back photos of your ID card
Front and back photos of your driver’s license
A selfie for verification
Consents (Terms of Service, confidentiality, optional marketing)
Technical data: IP address, browser, device, language settings

3. Purposes of processing

HivePark is a taxi fleet that helps drivers register and operate on the Yandex Go / Yandex Pro platform (RideTech Georgia) and provides fleet support.

Creating a driver profile via the Yandex Fleet API
Phone verification by SMS OTP
Communication and support
Direct marketing — only with separate consent
Website security and reliable operation

4. Legal bases

Performance of a contract — registration and fleet services
Consent — marketing messages (optional)
Consent — site analytics with Google Analytics (optional and separate from registration)
Legitimate interest — security, fraud prevention, service improvement

5. Recipients

Your data may be shared only with the following recipients for the stated purposes:

RideTech Georgia (Yandex Go / Yandex Pro) — for the driver profile via the Yandex Fleet API; further processing follows their own policies
SMS provider — phone number and OTP message text only
Google (Google Analytics) — only after a separate acceptance: the page address without query parameters or a fragment, the referring site’s origin without its path, query, or fragment, a fixed page title, and Google’s analytics cookies. Names, phone numbers, personal ID numbers, bank details, balances, documents, and OTPs are not sent.

6. Storage and security

Registration data and documents are stored in HivePark systems for onboarding and support. We use HTTPS, access controls, and secure file storage.

7. Retention

Registration and document data — while the driver relationship is active and thereafter until deletion is requested or law requires otherwise
Marketing consent records — for the marketing period and a reasonable time after opt-out
OTP codes — short-lived and invalidated after verification

8. Direct marketing

Marketing SMS or calls are sent only with a separate, optional consent. You can register without it. You may withdraw consent at any time via [email protected] or +995 598 38 97 79.

9. Your rights

Under Georgia’s Law on Personal Data Protection you may request information, a copy, correction, deletion, restriction, withdraw consent, and lodge a complaint with the Personal Data Protection Service (pdps.ge). We respond within the statutory timeframe.

10. Changes to this policy

We may update this policy. The updated version will be published on this page with the relevant date.

11. Analytics

Google Analytics 4 runs only after a visitor chooses Accept. Reject leaves the site, registration, and the driver portal usable.

The purpose is to see which pages are opened. After acceptance, Google receives the cleaned page address, the referring site’s origin without its path, query, or fragment, a fixed page title, and its own analytics cookies (_ga). The choice is stored in our hp_analytics cookie.

Reject, or Analytics choice at the bottom of the page, stops further collection and removes this integration’s Google analytics cookies. This consent is separate from registration and from marketing messages.