GDPR / Cookie Policy - HiupApp Site

GDPR Compliance

Our Role

Hiup (Olive Group Limited) acts as:

Data Controller for job seeker personal data (we determine how and why it's processed)
Data Processor for recruiter-submitted candidate data (we process it on their behalf, under their instructions)

Lawful Bases for Processing

Processing Activity	Lawful Basis
Providing the platform service	Contract performance
AI matching and screening	Contract performance + Legitimate interest
Service improvement analytics	Legitimate interest
Marketing emails	Consent
Non-essential cookies	Consent
Financial/tax records	Legal obligation

Data Protection Officer

For GDPR-related inquiries, contact our DPO:
Email: dpo@hiupapp.com
Post: Data Protection Officer, Olive Group Limited, Dublin, Ireland

Sub-Processors

We use the following sub-processors, all bound by Data Processing Agreements:

Provider	Purpose	Location
Amazon Web Services (AWS)	Cloud infrastructure, hosting	EU (Ireland)
Stripe	Payment processing	EU/US (SCCs)
SendGrid	Transactional email	EU/US (SCCs)
Cloudflare	CDN, DDoS protection	Global (SCCs)

Data Subject Rights

Exercise your rights by emailing privacy@hiupapp.com or using the in-app data settings. We respond within 30 days (extendable to 90 days for complex requests with notification).

Data Breach Notification

In the event of a personal data breach that poses a risk to individuals, we will:

Notify the Data Protection Commission within 72 hours
Notify affected individuals without undue delay if there is a high risk
Document all breaches in our internal breach register

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and understand how you use it.

Cookies We Use

Strictly Necessary (no consent required)

Cookie	Purpose	Duration
`wordpress_logged_in_*`	Authentication	Session
`wp_hiup_session`	Session management	24 hours
`hiup_cookie_consent`	Records your cookie preference	1 year

Analytics (consent required)

Cookie	Purpose	Duration
`_ga`, `_ga_*`	Google Analytics — anonymous usage data	2 years
`_hjid`	Hotjar — anonymous session recording	1 year

Marketing (consent required)

We currently do not use marketing or advertising cookies. If we introduce them in future, we will update this policy and request your consent.

Managing Cookies

On first visit: A cookie banner lets you accept or reject non-essential cookies
After consent: Update your preferences any time via the cookie settings link in the footer
Browser settings: You can delete cookies via your browser settings (this may affect site functionality)

Do Not Track

We respect the "Do Not Track" browser signal. When detected, we disable analytics cookies automatically.

Contact

For any questions about this policy:
Email: privacy@hiupapp.com
Supervisory Authority: Data Protection Commission, Ireland — www.dataprotection.ie

Questions? Contact us →