Privacy Policy

Last updated: May 11, 2026 | Effective date: May 11, 2026

Bee360 Services Ltd (“Bee360,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.bee360.com or use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

1. Who We Are

2. Information We Collect

Information you provide directly

• Name, job title, and company name
• Email address and phone number
• Messages submitted via contact or demo request forms
• Information shared during sales calls or email correspondence

Information collected automatically

• IP address and approximate location
• Browser type and version, OS, device type
• Pages visited, time spent on site, referring URLs
• Clickstream data and interaction events
• Video engagement data when watching embedded Vimeo content

This data is collected via cookies and tracking technologies. See our Cookie Policy for full details.

Information from third parties

We may receive information about you from CRM partners, marketing platforms, or publicly available business sources to supplement the information we hold.

3. How We Use Your Information

• Provide, operate, and improve our website and services
• Respond to your inquiries and fulfill demo or contact requests
• Send marketing and promotional communications (where you have consented or where permitted by law)
• Analyse website traffic and user behaviour to improve performance
• Prevent fraud, enforce our terms, and comply with legal obligations
• Manage our customer relationships via our CRM system

4. Third-Party Services & Data Sharing

We do not sell your personal information to third parties. We may share your information with service providers, our parent company (Bee360 GmbH, Germany), professional advisors, authorities when required by law, and successor entities in a merger or acquisition. The key third-party services we use are described below.

Website Hosting — Vercel

This site is hosted by Vercel Inc. (340 Pine Street, Suite 401, San Francisco, CA 94104, USA). Vercel automatically receives server access logs (IP address, browser type, requested URL, timestamp) for every page load. Legal basis: legitimate interest in secure site operation (UK GDPR Article 6(1)(f)). Retention: up to 30 days. Cross-border transfer: USA — safeguarded by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA). See vercel.com/legal/privacy-policy.

Website Analytics — Vercel Analytics (planned)

We plan to use Vercel Analytics to analyse anonymised page-view data (truncated IP, URL, referrer, device category — no individual user profiles). This service is not yet active; when enabled it will be gated behind cookie consent. Data is retained for up to 90 days on Vercel infrastructure (USA). Legal basis: consent, where required under UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR), or legitimate interest (UK GDPR Article 6(1)(f)) in site improvement.

CRM & B2B Lead Identification — Pipedrive

We use Pipedrive (Pipedrive OÜ, Paldiski mnt 80, 10617 Tallinn, Estonia, EU) for two purposes:

• CRM: Contact details and sales inquiry data submitted via forms are stored in Pipedrive. Legal basis: pre-contractual measures / legitimate interest (UK GDPR Article 6(1)(b)/(f)). Retention: 3 years from last interaction.
• Web Visitor Tracking (LeadFeeder): When you accept marketing cookies, a tracking script from sc.lfeeder.com (US CDN) identifies the company associated with your IP address for B2B lead generation. Data processed: IP address, pages visited, time on site, referrer. Retention: 3 years or until consent is withdrawn. Legal basis: consent (UK GDPR Article 6(1)(a); PECR).

Although Pipedrive OÜ is an EU entity, the LeadFeeder script is served from US infrastructure. Cross-border transfers from the UK to the US are safeguarded by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA). See pipedrive.com/en/privacy.

Embedded Videos — Vimeo

Some pages embed videos hosted by Vimeo Inc. (555 West 18th Street, New York, NY 10011, USA). When a page with an embedded player loads, Vimeo receives your IP address, browser information, and viewing behaviour even if you do not press play. Vimeo may set cookies (vuid — 2 years; player — 1 year). These embeds are loaded only after you accept marketing cookies. Transfers to the US are covered by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA). See vimeo.com/privacy.

5. Your Data Protection Rights (UK GDPR)

These rights apply under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

How to submit a request: Email privacy@bee360.com (or info@bee360.com) with the subject line “Data Protection Rights Request”. We will respond within one month, as required by UK GDPR Article 12(3).

6. Data Retention

• Contact form submissions and sales inquiries: 3 years from last interaction
• Website analytics data: up to 90 days (Vercel Analytics, when enabled)
• CRM records: duration of business relationship plus 3 years
• Cookie consent records: 12 months

When data is no longer required, we securely delete or anonymise it.

7. International Data Transfers

Bee360 Services Ltd is based in the United Kingdom. If you access our services from outside the UK, your information may be transferred to and processed in the United Kingdom. As part of the Bee360 group, we also transfer data to our parent company, Bee360 GmbH, within the European Union. Such transfers, and transfers to service providers located outside the UK (including the United States — see Section 4), are subject to appropriate safeguards, including Standard Contractual Clauses under UK GDPR Article 46 and the UK International Data Transfer Addendum (IDTA), and are carried out in compliance with UK GDPR and the Data Protection Act 2018.

8. Security

We implement commercially reasonable technical and organisational security measures to protect your personal information against unauthorised access, loss, destruction, or alteration. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@bee360.com and we will delete it promptly.

10. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our site. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated “Last updated” date. For material changes, we will provide more prominent notice.

12. Contact Us