Privacy Policy
Last updated: October 2, 2026
This Privacy Policy explains how BestPentesting USA, a service operated by BugFoe Private Limited ("we", "us", "our"), a company registered in India, collects, uses, shares and protects personal information when you visit bestpentestingcompanies.us (the "Site") or contact us. It is written for visitors in the United States, including residents of states with comprehensive privacy laws such as California, and also explains the rights of visitors from the European Union under the GDPR. Questions: sales@bugfoe.com.
1. Who is responsible for your information
BugFoe Private Limited, based in Ahmedabad, Gujarat, India, decides how personal information collected through the Site is used (in GDPR terms, it is the controller). We are established in India and offer our services to organizations in the United States.
2. Information we collect
- Identifiers and professional information you provide: name, work email, company, phone number, service interest, compliance needs, timeline, company size and any message you submit through our forms or by email.
- Internet or network activity: IP address, browser type, device information, pages visited and timestamps, used for security, spam prevention and rate limiting.
- Cookies and similar technologies: described in our Cookie Policy.
We do not intend to collect sensitive personal information through the Site. Please don't include confidential system details, credentials, health information or other people's personal information in form submissions.
3. How we use your information
| Purpose | Legal basis for EU visitors (GDPR) |
|---|---|
| Responding to quote and contact requests, preparing proposals | Legitimate interests in responding to business inquiries; steps prior to entering a contract |
| Delivering and managing services you buy | Performance of a contract |
| Protecting the Site from spam, fraud and abuse | Legitimate interests |
| Measuring site usage and improving content (if analytics is enabled) | Consent where required; otherwise legitimate interests |
| Displaying advertising on Resources articles (if enabled) | Consent where required |
| Complying with legal obligations | Legal obligation |
We use personal information only for the purposes above or purposes compatible with them. We will not send you marketing emails unless you have asked for them or the law otherwise allows it, and every marketing email includes a simple way to unsubscribe.
4. Advertising (Google AdSense)
We may display advertising on our Resources articles using Google AdSense. Advertising is never shown on our service, quote or contact pages.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our Site and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info.
- Learn more: How Google uses information from sites or apps that use its services.
Visitors in the European Economic Area, the United Kingdom and Switzerland are shown a consent message from a Google-certified consent management platform before advertising or analytics cookies are used, and can change their choices at any time via the "Privacy and cookie settings" link on pages showing ads.
5. "Do Not Sell or Share My Personal Information"
We do not sell personal information for money, and we do not sell or rent the contact details you submit through our forms. However, some state privacy laws, including California's, may treat allowing Google and its partners to use advertising cookies on our Resources articles for personalized or cross-context behavioral advertising as a "sale" or "sharing" of personal information. To opt out of this:
- Turn off personalized ads at Google Ads Settings, or use the industry opt-out at www.aboutads.info;
- Block or delete advertising cookies in your browser settings; or
- Email sales@bugfoe.com with the subject "Do Not Sell or Share" and we will help.
We do not knowingly sell or share the personal information of consumers under 16.
6. Analytics
If enabled, we use Google Analytics 4 to understand aggregate use of the Site. Google Consent Mode ensures that analytics cookies are not set for visitors from the EEA, the UK and Switzerland until they agree.
7. Sharing your information
We share personal information only with:
- Our hosting provider (Hostinger) and email service providers that process it on our behalf;
- Google, where you use pages with analytics or advertising, as described above;
- Professional advisers, and authorities where the law requires it.
8. International transfer to India
Our team is based in India, so personal information you submit from the United States or elsewhere is transferred to and processed in India, and wherever our service providers operate. Privacy laws in India may differ from those in your state or country. For visitors from the EU, we protect these transfers with appropriate safeguards such as the EU standard contractual clauses where the GDPR requires it. Contact us for more information.
9. Retention
We keep inquiry data for up to 24 months after our last contact unless an ongoing business relationship requires longer. Client engagement data is kept as set out in the contract. Security logs are kept for up to 12 months.
10. Your US state privacy rights
Depending on where you live, and on whether a state's law applies to us, you may have the right to:
- Know and access the personal information we hold about you and how we use it;
- Delete personal information we collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information and of targeted advertising, as described in section 5;
- Not be discriminated against for exercising any of these rights.
California residents have these rights under the California Consumer Privacy Act as amended by the CPRA, and a growing number of other states give their residents similar rights. If your state gives you similar rights, you can use the same process below. To make a request, email sales@bugfoe.com with the subject "Privacy Request". We may need to verify your identity before acting on a request, and you may use an authorized agent. If we decline a request, you can ask us to reconsider by replying to our response.
11. Rights of visitors from the EU
If the GDPR applies to you, you have the right to access, correct or erase your personal data, to restrict or object to processing based on legitimate interests (including direct marketing), to data portability and to withdraw consent at any time. Email sales@bugfoe.com with the subject "Privacy Request" and we will respond within one month. You may also complain to your local data protection authority.
12. Security
The Site is served only over HTTPS. Form submissions are protected against spam and abuse, stored with restricted access, and handled only by staff who need them to respond to you. No method of transmission or storage is completely secure, but we work to protect your information appropriately.
13. Children
The Site is intended for businesses and is not directed at children under 13. We do not knowingly collect children's personal information.
14. Changes
We may update this policy and will change the "Last updated" date above. Material changes will be highlighted on this page.