Privacy Policy

Effective Date: January 1, 2025
Last Updated: March 5, 2025

BeeProductive (operated by SC BeeProductive Operations SRL, Aleea Barajul Sadului 7 bl M4 sc A et 9 ap 40, Bucharest, Romania, 032742) is committed to protecting your personal data. This Privacy Policy applies to all websites operated by BeeProductive under the same legal entity — including beeproductive.eu (and all subdomains), stingoperationsystem.com, and contentrepurposingsystem.com — and explains what data we collect, why we collect it, how we use it, and your rights under applicable law — including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Please read this carefully. By using our website or services, you acknowledge this policy.

1. Data Controller

The data controller for your personal information is:

2. What Data We Collect

We collect the following categories of personal data:

• Identity & Contact: Name, email address, phone number

• Payment Information: Credit/debit card details (processed and encrypted by Stripe — we do not store raw card data)

• Form Data: Any information you voluntarily submit through our contact, application, or opt-in forms

• Usage Data: IP address, browser type, pages visited, time on site (via cookies and analytics tools)

• Communications: Messages you send to us via email or SMS

3. How We Collect Data

• Directly from you when you fill in a form, book a call, purchase a product, or contact us

• Automatically when you visit our website (cookies, tracking pixels, analytics)

• From third-party platforms if you connect or interact with us through them

4. Lawful Basis for Processing (GDPR)

Under GDPR, we process your personal data on the following legal bases:

• Contract Performance: To deliver services or products you have purchased

• Legitimate Interests: To improve our services, send relevant content, and operate our business

• Consent: For SMS communications and email marketing — you can withdraw at any time

• Legal Obligation: Where required by law

5. How We Use Your Data

• To provide and improve our services and products

• To communicate with you about your purchase, booking, or inquiry

• To send marketing emails or SMS (only with your explicit consent)

• To process payments via Stripe

• To comply with legal and regulatory obligations

• To analyze website performance and user behavior

6. SMS / Mobile Data

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Third-Party Data Processors

We do not sell your personal data. As a data controller, we work with the following third-party data processors who handle your personal data solely on our behalf and under our instruction:

• Stripe — Payment processing. Handles credit/debit card data in a PCI-DSS compliant environment. We do not store raw card data. Privacy Policy: stripe.com/privacy

• GoHighLevel (GHL) — CRM, marketing automation, email/SMS delivery, funnel and form hosting. Stores contact records, form submissions, and communication history. Privacy Policy: gohighlevel.com/privacy

• N8N, Zapier, Make — Workflow automation and data processing. Used to connect internal systems and automate operational tasks. May process contact data as part of triggered workflows.

• Google Analytics (GA4) — Website analytics and traffic measurement. Collects anonymized usage data via cookies. Privacy Policy: policies.google.com/privacy

• Meta (Facebook) Pixel — Advertising analytics and retargeting. Tracks conversion events and builds ad audiences. Privacy Policy: facebook.com/privacy/policy

• Microsoft Clarity — Session recording and heatmapping. Collects anonymized interaction data to improve site usability. Privacy Policy: privacy.microsoft.com/en-us/privacystatement

• ClickUp — Project management. May store client names and project-related communications. Privacy Policy: clickup.com/privacy

All processors are contractually bound to process data only as instructed, maintain appropriate security measures, and comply with applicable data protection law.

• Legal Authorities: Where required by law or to protect our legal rights

• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred — we will notify you in advance

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic. You can manage your cookie preferences at any time via our cookie consent banner or your browser settings.

For full details on the cookies we use, see our standalone Cookie Policy.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Our retention schedule is as follows:

• Purchase records and financial data: 7 years from transaction date (required under Romanian accounting law)

• Active client records: Retained for the duration of the relationship and up to 5 years after the last interaction

• Leads and contacts who did not purchase: Up to 3 years from last engagement, then deleted or anonymized

• SMS opt-in records and consent logs: Retained for the duration of the messaging relationship plus 4 years after opt-out

• Form submissions (no subsequent purchase): Up to 36 months from submission

You may request deletion of your personal data at any time (subject to legal retention obligations) by contacting us at support@beeproductive.eu. Requests will be fulfilled within 30 days.

10. Your Rights (GDPR — EU/EEA Residents)

If you are located in the EU or EEA, you have the following rights under the GDPR:

• Right to Access (Art. 15): Request a copy of the personal data we hold about you

• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data

• Right to Erasure — 'Right to Be Forgotten' (Art. 17): Request deletion of your personal data. We will fulfill this within 30 days unless we are required to retain it by law. Where full deletion is not possible, we will anonymize the data

• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format (e.g., CSV or JSON)

• Right to Restrict Processing (Art. 18): Request that we limit how we process your data

• Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing

• Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting prior lawful processing

11. How to Submit a Data Subject Access Request (DSAR)

To exercise any of your data rights, submit a written request using the process below:

• Email: support@beeproductive.eu

• Subject line: 'Data Subject Request — [Your Name]'

• Include: your full name, the email address on file, and a description of the right you wish to exercise

• We will acknowledge your request within 5 business days

• We will fulfill your request within 30 days. In complex cases we may extend by an additional 60 days — we will notify you if this applies

• We may need to verify your identity before processing the request

Right to Be Forgotten procedure: Upon receiving a valid erasure request, we will delete or anonymize your personal data from all active systems within 30 days, with the exception of data we are legally required to retain (financial records, fraud prevention). We will confirm deletion in writing.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Romanian data protection authority: Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP) — anspdcp.ro.

12. Your Rights (CCPA — California Residents)

If you are a California resident, you have the following rights under the CCPA:

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, or disclose

• Right to Delete: Request deletion of personal information we have collected from you, subject to exceptions

• Right to Opt Out of Sale: We do not sell personal information. You may still submit a formal request at any time

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

13. International Data Transfers

If you are based in the EU/EEA, your data may be transferred to and processed in countries outside the EEA (e.g., the United States, where some of our service providers operate). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

14. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Payments are handled entirely by Stripe, which is PCI-DSS compliant. Despite our efforts, no transmission over the internet is completely secure.

15. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated effective date. For significant changes, we may notify you by email or site banner.

17. Contact & Data Requests

For privacy-related questions, to exercise your rights, or to submit a Data Subject Access Request: