⚠️ TEMPLATE — This document is a starting-point draft. Review by qualified legal counsel before publishing or using in any PSP application. GDPR / CCPA provisions marked for counsel review.

Privacy Policy

Last updated: May 2026 · Beoree (operated by Genuine Reserve LLC)

This Privacy Policy explains how Beoree (operated by Genuine Reserve LLC, "we", "us", "our") collects, uses, and protects information when you visit beoree.com (the "Site").

1. Information We Collect

We collect the following categories of information:

Email address — when you contact us at [email protected] or submit an inquiry. Used solely to respond to your request.
IP address & general location — collected automatically by our web server and Cloudflare CDN for security and performance purposes (e.g., DDoS protection, geographic routing).
Browser & device information — collected automatically via server logs (browser type, OS, referring URL). Used for analytics and site improvement.
Age-gate preference — stored in your browser's localStorage (key: beoree-age-verified) to avoid showing the age verification prompt on repeat visits. This data never leaves your device.

We do not currently use third-party tracking pixels, advertising cookies, or social media tracking scripts.

2. How We Use Your Information

Responding to customer inquiries and processing orders.
Maintaining the security and performance of the Site.
Complying with legal obligations.
Improving Site content and user experience based on aggregate, anonymized analytics.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

3. Cookies & Local Storage

This Site uses:

Functional localStorage — age-gate preference (stored locally in your browser, not transmitted to our servers).
Cloudflare cookies — security and performance cookies set by Cloudflare (our CDN provider). These are strictly functional and not used for advertising.

We do not use advertising cookies, retargeting pixels, or third-party analytics SDKs at this time.

4. Data Sharing

We share data only with the following service providers, under strict confidentiality:

Cloudflare, Inc. — CDN, DNS, and DDoS protection. Data processed per Cloudflare's Privacy Policy.
Resend.com — transactional email delivery (when email sending is activated). Data processed per Resend's Privacy Policy.

We do not share data with advertisers, data brokers, or any other parties.

5. Data Retention

Email inquiries and associated personal data are retained for up to 3 years for customer service and legal compliance purposes, then deleted. Server logs are retained for up to 90 days.

6. Your Rights (GDPR — EU/EEA Visitors)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate data.
Right to erasure ("right to be forgotten") — request deletion of your personal data.
Right to restriction — request that we limit processing of your data.
Right to data portability — receive your data in a machine-readable format.
Right to object — object to processing of your data for certain purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Your Rights (CCPA — California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to:

Know what personal information we collect and how it is used.
Request deletion of your personal information.
Opt out of the sale of your personal information (we do not sell personal information).
Non-discrimination for exercising your CCPA rights.

To submit a CCPA request, contact us at [email protected].

8. Children's Privacy

This Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact us immediately and we will delete it.

9. Security

We implement industry-standard security measures including HTTPS/TLS encryption (via Cloudflare Origin Certificate), access controls, and regular software updates. However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. We encourage you to review this page periodically.

11. Contact Us

For any privacy-related questions, data access or deletion requests, contact us at:

[email protected]
Genuine Reserve LLC · United States