Privacy Policy
Last updated: October 2, 2026
This Privacy Policy explains how BestPentesting, a service operated by BugFoe Private Limited ("we", "us", "our"), a company registered in India, collects, uses, shares and protects personal data when you visit bestpentestingcompanies.com (the "Site") or contact us. Questions: sales@bugfoe.com.
1. Who is responsible for your data
BugFoe Private Limited is the data controller (and "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023) for personal data collected through the Site.
2. Data we collect
- Information you provide: name, work email, company, phone number, service interest, compliance needs, timeline, company size and any message content you submit through our forms or by email.
- Technical data: IP address, browser type, device information, pages visited and timestamps, used for security, spam prevention and rate limiting.
- Cookies and similar technologies: described in our Cookie Policy.
We do not knowingly collect sensitive personal data through the Site, and we ask you not to include confidential system details, credentials or personal data of others in form submissions.
3. How we use your data and legal bases
| Purpose | Legal basis (GDPR / DPDP) |
|---|---|
| Responding to quote and contact requests, preparing proposals | Consent; steps prior to entering a contract |
| Delivering and managing services you purchase | Performance of a contract |
| Protecting the Site from spam, fraud and abuse | Legitimate interests; legitimate uses |
| Measuring site usage and improving content (if analytics is enabled) | Consent where required; legitimate interests |
| Displaying advertising on Insights articles (if enabled) | Consent where required |
| Complying with legal obligations | Legal obligation |
4. Advertising (Google AdSense)
We may display advertising on our Insights articles using Google AdSense. Advertising is never shown on our service, quote or contact pages.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our Site and/or other sites on the Internet.
- Users may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info or www.youronlinechoices.eu.
- Learn more: How Google uses information from sites or apps that use its services.
Visitors in the European Economic Area, the United Kingdom and Switzerland are shown a consent message from a Google-certified consent management platform before advertising or analytics cookies are used, and can change their choices at any time via the "Privacy and cookie settings" link that appears on pages showing ads.
5. Analytics
If enabled, we use Google Analytics 4 to understand aggregate usage of the Site. We use Google Consent Mode so that, where consent is required, analytics cookies are not set until you agree. IP addresses are not logged or stored by Google Analytics 4.
6. Sharing your data
We do not sell or rent personal data. We share it only with:
- Our hosting provider (Hostinger) and email service providers that process data on our behalf;
- Google, where you interact with pages using analytics or advertising, as described above;
- Professional advisers, and authorities where required by law.
7. International transfers
We are based in India. If you submit data from outside India, it will be processed in India and wherever our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.
8. Retention
Enquiry data is kept for up to 24 months after our last contact unless a business relationship requires longer. Client engagement data is retained according to the contract. Security logs are kept for up to 12 months.
9. Your rights
Depending on your location — including under the EU/UK GDPR, India's DPDP Act 2023 and US state privacy laws such as the CCPA/CPRA — you may have the right to access, correct, update, erase or port your personal data, to withdraw consent, to object to or restrict processing, to nominate another person to exercise your rights, and to lodge a complaint with a supervisory authority or the Data Protection Board of India. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under the CCPA, except through Google advertising cookies on Insights pages, which you can opt out of as described above.
To exercise your rights or contact our grievance officer, email sales@bugfoe.com with the subject "Privacy Request". We respond within 30 days.
10. Security
The Site is served exclusively over HTTPS. Form submissions are protected against spam and abuse, stored with restricted access, and handled only by staff who need them to respond to you.
11. Children
The Site is intended for businesses and is not directed to children under 18. We do not knowingly collect their data.
12. Changes
We may update this policy and will change the "Last updated" date above. Material changes will be highlighted on this page.