Privacy Policy

1. Who we are

BeeCRM ("we", "us", "our") is a trading name of [Company Name to be confirmed], registered in England & Wales. Our registered address is [Address to be confirmed]. You can contact us at [email protected].

2. Data we collect

Account data

When you create a BeeCRM account, we collect your name, email address, company name, and password (securely hashed).

Usage data

We collect data on how you use BeeCRM, features accessed, actions taken, errors encountered, to improve the product.

Communication data

If you contact us, we keep your message and our reply. If you subscribe to updates, we store your email and preferences.

Technical data

IP address, browser type, device info, referrer, and timestamps, collected automatically for security and analytics.

3. How we use your data

• Provide and maintain BeeCRM
• Authenticate you and keep your account secure
• Respond to support requests
• Send service updates (security, billing, major changes)
• Improve the product with anonymised usage insights
• Comply with legal obligations

We do not sell your data. We do not use it for advertising. We do not share it with third parties except as described below.

4. Legal basis (UK GDPR)

• Contract: Providing the service you signed up for
• Legitimate interest: Product improvement, security, fraud prevention
• Consent: Marketing emails (you can unsubscribe anytime)
• Legal obligation: Accounting, tax, law enforcement requests

5. Data sharing

We share data only with:

• Sub-processors who help run BeeCRM (hosting, email delivery, analytics), under DPAs
• Legal authorities when required by law
• A potential acquirer in a merger/sale (you'll be notified)

Current sub-processors: [To be listed, e.g. AWS UK, SendGrid, PostHog]

6. International transfers

All data is stored and processed in the UK. If we ever use sub-processors outside the UK/EEA, we'll ensure appropriate safeguards (standard contractual clauses, adequacy decisions) and update this policy.

7. Retention

• Account data: Kept while your account is active
• Deleted accounts: Fully removed within 30 days
• Backups: Purged within 90 days of deletion
• Support tickets: Kept for 2 years after resolution
• Analytics: Aggregated/anonymised after 13 months

8. Your rights

Under UK GDPR, you have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent (where applicable)

To exercise these rights, email [email protected]. We'll respond within 30 days.

9. Security

See our Security page for details on encryption, access controls, backups, and infrastructure.

10. Cookies

See our Cookie Policy for details on what we use and why.

11. Changes to this policy

We'll notify you of material changes by email or in-app notice at least 30 days before they take effect. The latest version is always at this URL.

12. Complaints

If you're unhappy with how we handle your data, contact us first at [email protected]. You also have the right to complain to the ICO: ico.org.uk.