Privacy Policy

Last updated: May 11, 2026 | Effective date: May 11, 2026

Bee360 GmbH (“Bee360,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.bee360.com or use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

1. Who We Are

2. Information We Collect

Information you provide directly

• Name, job title, and company name
• Email address and phone number
• Messages submitted via contact or demo request forms
• Information shared during sales calls or email correspondence

Information collected automatically

• IP address and approximate location
• Browser type and version, OS, device type
• Pages visited, time spent on site, referring URLs
• Clickstream data and interaction events
• Video engagement data when watching embedded Vimeo content

This data is collected via cookies and tracking technologies. See our Cookie Policy for full details.

Information from third parties

We may receive information about you from CRM partners, marketing platforms, or publicly available business sources to supplement the information we hold.

3. How We Use Your Information

• Provide, operate, and improve our website and services
• Respond to your inquiries and fulfill demo or contact requests
• Send marketing and promotional communications (where you have consented or where permitted by law)
• Analyse website traffic and user behaviour to improve performance
• Prevent fraud, enforce our terms, and comply with legal obligations
• Manage our customer relationships via our CRM system

4. Third-Party Services & Data Sharing

We do not sell your personal information to third parties. We may share your information with service providers, our UK representative (Bee360 Services Ltd), professional advisors, authorities when required by law, and successor entities in a merger or acquisition. The key third-party services we use are described below.

Website Hosting — Vercel

This site is hosted by Vercel Inc. (340 Pine Street, Suite 401, San Francisco, CA 94104, USA). Vercel automatically receives server access logs (IP address, browser type, requested URL, timestamp) for every page load. Legal basis: legitimate interest in secure site operation (UK GDPR Article 6(1)(f)). Retention: up to 30 days. Cross-border transfer: USA — safeguarded by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA). See vercel.com/legal/privacy-policy.

Website Analytics — Vercel Analytics (planned)

We plan to use Vercel Analytics to analyse anonymised page-view data (truncated IP, URL, referrer, device category — no individual user profiles). This service is not yet active; when enabled it will be gated behind cookie consent. Data is retained for up to 90 days on Vercel infrastructure (USA). Legal basis: consent, where required under UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR), or legitimate interest (UK GDPR Article 6(1)(f)) in site improvement.

CRM — Pipedrive

We use Pipedrive (Pipedrive OÜ, Paldiski mnt 80, 10617 Tallinn, Estonia, EU) to store contact details and sales inquiry data submitted via forms. Legal basis: pre-contractual measures / legitimate interest (UK GDPR Article 6(1)(b)/(f)). Retention: 3 years from last interaction.

Web Visitor Tracking — Leadfeeder

When you accept marketing cookies, a tracking script from sc.lfeeder.com identifies the company associated with your IP address for B2B lead generation. This service is provided by Leadfeeder, operated by Dealfront Group GmbH (Durlacher Allee 73, D-76131 Karlsruhe, Germany, EU). Data processed: IP address, pages visited, time on site, referrer. Retention: 3 years or until consent is withdrawn. Legal basis: consent (UK GDPR Article 6(1)(a); PECR).

Dealfront Group GmbH is a German (EU) company. Per its own privacy notice, data processed through this service is stored and processed exclusively on servers within the European Union — no transfer outside the UK/EEA takes place for this processing, so no Standard Contractual Clauses or International Data Transfer Addendum (IDTA) are required. See leadfeeder.com/privacy/privacy-notice.

Embedded Videos — Vimeo

Some pages embed videos hosted by Vimeo Inc. (555 West 18th Street, New York, NY 10011, USA). When a page with an embedded player loads, Vimeo receives your IP address, browser information, and viewing behaviour even if you do not press play. Vimeo may set cookies (vuid — 2 years; player — 1 year). These embeds are loaded only after you accept marketing cookies. Transfers to the US are covered by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA). See vimeo.com/privacy.

Embedded Reviews — Gartner Peer Insights

Some solution pages embed the Gartner Peer Insights review widget (Gartner, Inc., 56 Top Gallant Road, Stamford, CT 06902, USA). When loaded, this widget receives your IP address and browser information and may set cookies. This embed is loaded only after you accept functional cookies. Transfers to the US are covered by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA). See gartner.com/en/about/privacy/policy.

Advertising & Audience Insights — LinkedIn Insight Tag

When you accept marketing cookies, we load the LinkedIn Insight Tag (Partner ID 8240274) from snap.licdn.com, which reports to px.ads.linkedin.com. This tag is operated by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) for UK and EEA visitors. Its primary purpose is to generate LinkedIn's “Website Demographics” report — an aggregated, non-identifying breakdown of job title, seniority, industry, and company size for LinkedIn members who visit our site. A secondary, planned use is measuring conversions from LinkedIn ad campaigns. Data processed: IP address, browser and device information, pages visited, and — for matched LinkedIn members — anonymised/aggregated professional attributes; we do not receive individually identifiable profiles. Cookies set: bcookie (2 years), li_fat_id, UserMatchHistory, and AnalyticsSyncHistory (30 days each). Retention: 3 years or until consent is withdrawn. Legal basis: consent (UK GDPR Article 6(1)(a); PECR). LinkedIn Ireland further transfers data to its US parent, LinkedIn Corporation (1000 W. Maude Avenue, Sunnyvale, CA 94085, USA); this transfer is covered by Standard Contractual Clauses under UK GDPR Article 46, including the UK International Data Transfer Addendum (IDTA) — the same safeguard used for Vimeo and Gartner Peer Insights above. See linkedin.com/legal/privacy-policy.

5. Your Data Protection Rights (UK GDPR)

These rights apply under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

How to submit a request: Email privacy@bee360.com (or info@bee360.com) with the subject line “Data Protection Rights Request”. We will respond within one month, as required by UK GDPR Article 12(3).

6. Data Retention

• Contact form submissions and sales inquiries: 3 years from last interaction
• Website analytics data: up to 90 days (Vercel Analytics, when enabled)
• CRM records: duration of business relationship plus 3 years
• Cookie consent records: 12 months

When data is no longer required, we securely delete or anonymise it.

7. International Data Transfers

Bee360 GmbH is based in Germany, within the European Union. If you access our services from the United Kingdom, your information is transferred from the UK to the EU for processing by us, and may also be shared with our UK representative, Bee360 Services Ltd. Such transfers, and transfers to service providers located outside the UK/EU (including the United States — see Section 4), are subject to appropriate safeguards, including Standard Contractual Clauses under UK GDPR Article 46 and the UK International Data Transfer Addendum (IDTA), and are carried out in compliance with UK GDPR and the Data Protection Act 2018.

8. Security

We implement commercially reasonable technical and organisational security measures to protect your personal information against unauthorised access, loss, destruction, or alteration. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@bee360.com and we will delete it promptly.

10. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our site. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated “Last updated” date. For material changes, we will provide more prominent notice.

12. Contact Us