Privacy Policy

1. Scope and applicable principles

This policy applies to NoticeHub’s public website, organisation accounts, dashboards and related communications. NoticeHub processes personal data in line with applicable Maldives law, including the Personal Data Protection Act, using principles of fairness, transparency, purpose limitation, data minimisation, accuracy, security and appropriate retention.

2. Information NoticeHub collects

• Account information: name, email address, password hash, verification status, session and security information.
• Organisation information: business name, sector, representative details, phone numbers, address, website, public email and logo.
• Verification information: organisation type, official documents, review status and administrative decisions.
• Publishing information: drafts, listing content, documents, links, deadlines, amendments, moderation history, page views and download totals.
• Billing information: plans, invoices, transaction references, transfer dates, payment-confirmation files, review decisions, credits, subscriptions and receipts.
• Communications: support enquiries, notification preferences and messages related to account activity.
• Technical and security information: IP-derived security records, request identifiers, timestamps, device or browser information available in standard web requests, rate-limit records and audit events.

NoticeHub does not need your account password in readable form and will never ask you to send a password or email verification code to support.

3. Where information comes from

Most information comes directly from you or an authorised organisation user. NoticeHub also creates operational records when you use the service, receives transaction evidence you submit, and may compare organisation identity information with existing NoticeHub records or official evidence. Public job information is received from Jobsicle.

4. Why information is used

NoticeHub uses information where necessary to provide the requested service, manage its relationship with users, comply with legal duties, protect legitimate security and operational interests, or act on consent where consent is the appropriate basis.

• Create accounts and verify email addresses.
• Confirm organisation identity and prevent duplicate or impersonating registrations.
• Prepare, moderate, publish and manage Notices and Tenders.
• Issue invoices, review payments and administer publishing entitlements.
• Send required service, transaction and security notifications.
• Answer support requests, maintain auditability, prevent fraud and investigate misuse.
• Maintain, troubleshoot and improve reliability and accessibility.

5. Matching and administrative review

NoticeHub compares organisation names to identify exact and similar existing records. Exact duplicates may be stopped, while strong similarities can be referred to an administrator. Matching assists fraud prevention and data quality; review staff can assess supporting context before an organisation is approved as a new record.

6. What becomes public

Approved listing content, public documents, selected organisation profile information and a verified badge may be visible to anyone and indexed by search engines. Publishers should remove unnecessary personal or confidential information before submission.

Passwords, private drafts, verification evidence, payment-confirmation files, internal audit logs and administrative notes are not intended for public display. Dashboard and administration pages are marked to prevent search indexing and require authorisation.

7. Sharing, processors and legal disclosure

NoticeHub does not sell personal data. Information may be handled by carefully selected hosting, email, storage, security or technical service providers only as needed to operate NoticeHub and subject to appropriate safeguards. Data may also be disclosed where required by Maldives law, a competent authority or court, or where reasonably necessary to protect rights, safety and service integrity.

Some infrastructure or service providers may process information outside the Maldives. Where that occurs, NoticeHub will use safeguards required by applicable law and limit the information to what the service needs.

8. Sessions, logs and similar technology

NoticeHub uses a secure session cookie to keep users signed in and protect account workflows. It may also use local browser storage for interface functions such as returning to a previous listing position. Essential security and operational records are created on the server. NoticeHub does not describe these essential functions as advertising cookies.

9. Security

NoticeHub uses measures including HTTPS, secure password hashing, hardened sessions, CSRF protection, access and ownership controls, rate limiting, security headers, private document storage, upload validation, audit logging, redaction and restricted administration permissions.

No online system can guarantee absolute security. Protect your credentials, sign out on shared devices and contact NoticeHub promptly if you suspect unauthorised access.

10. Retention

Information is kept only for as long as reasonably needed for the purpose collected, account and publishing integrity, dispute handling, fraud prevention, security or applicable legal obligations. Temporary registrations and abandoned staged files are subject to scheduled cleanup.

Some invoice, receipt, payment and transaction records may need to be retained for at least five years where Maldives tax record-keeping rules apply. Security, moderation and audit records may be retained for an appropriate period where needed to establish a reliable history or protect legal rights. A valid deletion request does not require removal of information that NoticeHub must retain by law or for another permitted reason.

11. Your privacy rights

Subject to the conditions and exceptions in applicable Maldives law, you may request information about processing and access to your personal data, correction of inaccurate data, erasure, restriction, objection, or withdrawal of consent where processing relies on consent.

NoticeHub may need to verify your identity and authority before acting on a request. Some organisation or transaction records cannot be changed or deleted immediately where this would affect another person, a public record, security, legal claims or a retention obligation. You can update eligible information and notification preferences from the dashboard.

12. Children

NoticeHub organisation accounts and publishing tools are intended for people with legal authority to act for an organisation. NoticeHub does not knowingly invite children to create organisation publishing accounts or submit verification and payment documents.

13. Policy changes

NoticeHub may update this policy as services or legal requirements change. The effective date identifies the current version. Material changes may also be communicated through the website, dashboard or email where appropriate.

14. Privacy contact

To ask a privacy question or make a rights request, email hello@noticehub.mv or use the NoticeHub Contact page. Please do not send passwords, verification codes or unnecessary identity documents in an initial message.