Privacy policy

  1. Who We Are and Scope of This Notice

FN-X Inc. (“we,” “us,” or “our”) is committed to safeguarding your privacy. This Privacy Notice applies to all personal data we collect through our website — www.bumblebeast.co — and any related services we offer (together, our “Service”). It explains what data we collect, how we use it, with whom we share it, and your rights in relation to that data.

  1. Data We Collect

2.1 Personal Data You Provide

Contact Information: name, email, phone, mailing address when you request quotes or support.

Payment Data: credit card or bank details processed by our payment processors.

Account Credentials: username and password, if you create an account.

Communications Content: any messages you send us via forms, chat, or email.

Why we cite: Under GDPR Article 13, controllers must list categories of personal data collected directly from individuals .

2.2 Automatically Collected Data

Usage Data: pages visited, time stamps, IP address, browser/OS type.

Cookies & Similar Technologies: session cookies, analytics cookies (e.g., Google Analytics), and functional cookies for preferences.

Why we cite: The FTC recommends disclosing cookie and tracking use in privacy policies .

2.3 Data From Third Parties

Business Contact Data: from authorized resellers or partners per your request.

Authentication Data: if you log in using third-party services (e.g., LinkedIn).

Citing IAPP guidance: Collecting data from third parties must be disclosed under U.S. best practices .

  1. How We Use Your Data

Service Provision: to set up and manage subscriptions, billing, and customer support.

Improvement & Development: to analyze usage, test features, and develop new functionality.

Communications: to send order confirmations, service alerts, marketing (where consented), and surveys.

Legal Obligations: to comply with financial regulations, tax laws, and respond to lawful requests by public authorities.

As per CCPA: “business or commercial purpose” uses must be outlined in the notice at collection .

  1. Legal Bases for Processing (GDPR)

Contractual Necessity: to perform our subscription and maintenance contracts.

Legitimate Interests: to operate, maintain, and improve our Service (balanced against your rights).

Consent: where required for marketing communications and non-essential cookies (you can withdraw consent at any time).

GDPR Article 6 references: Lawful bases for processing personal data .

  1. Sharing Your Data

5.1 Service Providers

We share data with: payment processors, cloud-hosting vendors, analytics providers, and customer-support platforms—each under strict confidentiality and only for the purposes above.

5.2 Legal Requirements

We may disclose data if required to comply with a subpoena, court order, or other legal process, or if necessary to protect the rights, property, or safety of FN-X Inc., our users, or others.

5.3 Business Transfers

If FN-X Inc. undergoes a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, subject to confidentiality and data-protection obligations.

Following FTC guidelines: disclosures of sharing with third parties must be specific .

  1. International Data Transfers

When we transfer your personal data outside your country (e.g., U.S. to EU or vice versa), we protect it using:

Standard Contractual Clauses (SCCs) issued by the European Commission, or

Privacy Shield frameworks, where applicable, or

Binding Corporate Rules for internal transfers.

Citing European Commission: approved SCCs for data transfers .

  1. Data Retention

We retain personal data only as long as necessary to fulfill the purposes in Section 3, comply with legal obligations (e.g., financial recordkeeping for up to 7 years under U.S. tax law), resolve disputes, and enforce agreements.

U.S. retention laws: IRS requires business records retention for up to 7 years .

  1. Your Rights

8.1 Under GDPR (EU/UK Residents)

Access: request a copy of your data.

Rectification: correct inaccurate data.

Erasure (“Right to be forgotten”): delete data if no longer needed.

Restriction & Portability: limit processing or receive data in portable format.

Objection: to processing based on legitimate interests or direct marketing.

8.2 Under CCPA (California Residents)

Know & Access: request categories of data collected.

Deletion: ask us to delete personal data (with exceptions).

Opt-out: direct us not to sell (we do not sell data).

Non-discrimination: you won’t be penalized for exercising these rights.

Details on CCPA rights: California Attorney General guidance .

  1. Cookies & Tracking

You can control cookies via your browser settings. We use:

Essential Cookies: enable site functionality.

Analytics Cookies: help us understand usage (e.g., Google Analytics).

Marketing Cookies: for personalized promotions (only with your consent).

Compliance with ePrivacy Directive: disclosure of cookies .

  1. Security Measures

We implement industry-standard technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction, such as encryption in transit (TLS) and at rest, access controls, and regular security assessments.

NIST guidance: recommended controls under NIST SP 800-53 .

  1. Changes to This Notice

We may update this Privacy Notice to reflect legal or operational changes. We’ll post the revised notice with the “Last Updated” date and, if material, notify users by prominent notice or email.

  1. Contact Information

If you have questions or wish to exercise your rights, please contact us at:

Hao Cao, FN-X Inc.

Email: hao@bumblebeast.co

Address: 21624 Lassen St, Chatsworth, CA 91311

This Privacy Notice was last updated on May 7, 2025.