Privacy Policy

PRIVACY POLICY

(Updated 04/29/26)

Bun Mee LLC ("us", "we", or "our") operates the https://bunmee.co website and is a

corporation registered in the State of California. Our address is 3328 Steiner Suite 3, San Francisco, CA, 94123.

This Privacy Policy states how we process your Personal Information and informs you

of your privacy rights and how the law protects you. It sets out our policies regarding

the collection, use, and disclosure of personal information and the choices you have

associated with that data.

We are responsible for your personal information. If you have any questions about this

us through the contact form on www.bunmee.co.

We use your data to provide and improve our service. By using the service and/or our

website, you agree to the collection and use of information in accordance with this

policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy

Policy have the same meanings as in our Terms of Service.

DATA COLLECTION AND USAGE

We collect several different types of information for various purposes to provide and

improve our service to you.

Types of Data Collected

Personal Information

As part of our service to you, we may ask you to provide us with certain personally

identifiable information that can be used to contact or identify you ("Personal

Information"). Personally identifiable information may include, but is not limited to:

First name, last name, and contact details such as phone number and email address
Your place of work and job title
Your bank and payment details
For prospective franchisees: financial qualification information including net

worth, liquidity, prior business experience, and market(s) of interest

Cookies and Usage Data
Your preferences in receiving marketing materials from us such as our newsletter

or invitations to events

How Your Data Is Collected

We use different methods to collect data from and about you, including through:

Our day-to-day business dealings in providing our services to you
Filling in forms or by corresponding with us by post, phone, email, SMS/MMS, chat,

or otherwise

If you complete a survey or provide us with feedback
As you interact with our website, we may automatically collect data about your

equipment, browsing actions, and patterns. We collect this personal information by

using cookies, server logs, pixels, and other similar technologies

By using publicly accessible sources
Via a third party such as your bank, financial institution, franchise broker, or

referral partner

Through interactions with artificial intelligence (AI), machine learning, voice, or

chatbot tools we may deploy on our website or in our communications

Usage Data

We may also collect information that your browser sends whenever you visit our website

or when you access the website by or through a mobile device ("Usage Data").

This Usage Data may include information such as your computer's Internet Protocol

address (e.g., IP address), browser type, browser version, the pages of our service

that you visit, the time and date of your visit, the time spent on those pages, unique

device identifiers, and other diagnostic data.

When you visit our website with a mobile device, this Usage Data may include

information such as the type of mobile device you use, your mobile device unique ID,

the IP address of your mobile device, your mobile operating system, the type of mobile

Internet browser you use, unique device identifiers, and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies (including pixels, tags, beacons,

scripts, and software development kits) to track activity on our website and we hold

certain information. Cookies are files with a small amount of data which may include

an anonymous unique identifier.

Cookies are sent to your browser from a website and stored on your device. Other

tracking technologies are also used to collect and track information and to improve

and analyze our service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is

being sent. However, if you do not accept cookies, you may not be able to use some

portions of our website.

Examples of cookies we use:

Session Cookies. We use Session Cookies to operate our website.
Preference Cookies. We use Preference Cookies to remember your preferences and

various settings.

Security Cookies. We use Security Cookies for security purposes.
Analytics and Advertising Cookies. We use these to measure performance and deliver

relevant marketing.

USE OF DATA

Bun Mee uses the collected data for various purposes, including:

To provide and maintain our service
To notify you about changes to our service
To manage payments, fees, and charges
To allow you to participate in interactive features of our service when you choose

to do so

To gather analysis or valuable information so that we can improve our service
To monitor the usage of our service
To detect, prevent, and address technical issues, fraud, or security incidents
To inform you of changes to this policy or our Terms of Service
To make recommendations to you about goods or services which may be of interest to you
To evaluate, qualify, and communicate with prospective franchisees and franchise

referral partners

To train, improve, and operate AI, machine learning, and analytics tools used in our

business (in aggregated or de-identified form where feasible)

LEGAL BASIS FOR PROCESSING UNDER GDPR

Bunmee may process your Personal Information because:

We need to perform our services we have agreed to provide to you or are about to

provide to you

You have given us permission to do so
The processing is in our legitimate interests and it is not overridden by your

rights

For payment processing purposes
To comply with the law

We may process your personal information for more than one lawful ground depending on

the specific purpose for which we are processing your data.

Generally, we do not rely on consent as a legal basis for processing your Personal

Information other than sending marketing communications to you via email, SMS/MMS, or

other electronic channels. You have the right to withdraw from this marketing at any

time by contacting us.

RETENTION OF DATA

Bunmee will retain your Personal Information only for as long as is necessary for the

purposes set out in this Privacy Policy. We will retain and use your Personal

Information to the extent necessary to comply with our legal obligations (for example,

if we are required to retain your data to comply with applicable laws including

franchise registration and disclosure laws), resolve disputes, and enforce our legal

agreements and policies.

Bunmee will also retain Usage Data for internal analysis purposes. Usage Data is

generally retained for a shorter period of time, except when this data is used to

strengthen the security or to improve the functionality of our service and/or website,

or we are legally obligated to retain this data for longer periods.

TRANSFER OF DATA

Your information, including Personal Information, may be transferred to – and

maintained on – computers located outside of your state, province, country, or other

governmental jurisdiction where the data protection laws may differ from those of your

jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information

represents your agreement to that transfer.

Bunmee will take all steps reasonably necessary to ensure that your data is treated

securely and in accordance with this Privacy Policy. No transfer of your Personal

Information will take place to an organization or a country unless there are adequate

controls in place including the security of your data and other personal information.

TEXT MESSAGING AND ELECTRONIC COMMUNICATIONS POLICY

Mobile information, including phone numbers and SMS/MMS opt-in data, will not be

shared with third parties or affiliates for marketing or promotional purposes. All

categories of information described in this policy exclude text messaging originator

opt-in data and consent; this information will not be shared with any third parties.

If you wish to be removed from receiving future text communications, you can opt out

by replying STOP or UNSUBSCRIBE to any message. For email communications, use the

unsubscribe link provided in any marketing email. You may also contact us directly to

opt out of any electronic communications.

We may also use voice calls, push notifications, in-app messages, chat, and emerging

communication channels for service-related and marketing purposes, subject to

applicable consent requirements.

LEGAL REQUIREMENTS

Bunmee may disclose your Personal Information in the good faith belief that such

action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of Bunmee LLC
Prevent or investigate possible wrongdoing in connection with the website or service
Protect the personal safety of users of the service or the public
Protect against legal liability

DISCLOSURE TO SERVICE PROVIDERS

We may employ third-party companies and individuals to facilitate our service

("Service Providers"), provide the service on our behalf, perform service-related

services, or assist us in analyzing how our service is used. Service Providers may

include third parties which provide:

Payment processing services
Information technology, cloud hosting, cybersecurity, and infrastructure services
Marketing, advertising, customer relationship management (CRM), email, SMS/MMS,

voice, chat, and other communication platforms

Analytics, attribution, lead-routing, and business intelligence services
Artificial intelligence, machine learning, and automation tools
Professional advisors such as lawyers, attorneys, bankers, auditors, accountants,

and insurers

Franchise development and broker referral networks
Tax authorities and regulatory bodies as required

These third parties have access to your Personal Information only to perform these

tasks on our behalf and are obligated not to disclose or use it for any other purpose.

The specific Service Providers we use change from time to time as our business and

the technology landscape evolves. A current, illustrative list of categories and example

providers appears below under "Current Service Provider Examples." We may add, remove,

or replace Service Providers at any time without separately updating this policy,

provided that any new Service Provider is engaged under terms consistent with this

SECURITY OF DATA

The security of your data is important to us, but remember that no method of

transmission over the Internet or method of electronic storage is 100% secure. While

we strive to use commercially acceptable means to protect your Personal Information,

we cannot guarantee its absolute security.

We have put in place appropriate security measures to prevent your personal

information from being accidentally lost, used, or accessed in an unauthorized way,

altered, or disclosed. In addition, we limit access to your personal information to

those employees, agents, contractors, and other third parties who have a business

need to know. They will only process your personal information on our instructions

and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal information breach

and will notify you and any applicable regulator of a breach where we are legally

required to do so.

Our Policy on "Do Not Track" Signals under CalOPPA

We do not currently respond to Do Not Track ("DNT") browser signals. Do Not Track is

a preference you can set in your web browser to inform websites that you do not want

to be tracked. You can enable or disable Do Not Track by visiting the Preferences or

Settings page of your web browser. We do, however, honor Global Privacy Control (GPC)

signals where required by applicable law.

CURRENT SERVICE PROVIDER EXAMPLES

The following are examples of current Service Providers across the categories

described above. This list is illustrative and may change without notice. The privacy

practices of each provider are governed by that provider's own privacy policy, which

we encourage you to review.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our service

and/or website, including:

Google Analytics – https://policies.google.com/privacy

We may add or substitute analytics providers (including server-side analytics, product

analytics, and AI-driven analytics tools) at our discretion.

Behavioral Remarketing and Advertising

Bunmee uses remarketing services to advertise on third-party websites and platforms

after you visit our website. We and our third-party vendors use cookies, pixels, and

similar technologies to inform, optimize, and serve ads based on your past visits to

our website. Current and past examples include:

Google Ads – https://policies.google.com/privacy.

Opt out via https://adssettings.google.com/.

Meta (Facebook, Instagram) – https://www.facebook.com/privacy/explanation.

Opt out via https://www.facebook.com/help/568137493302217.

LinkedIn Ads – https://www.linkedin.com/legal/privacy-policy.
TikTok Ads – https://www.tiktok.com/legal/privacy-policy.
Microsoft (Bing) Ads – https://privacy.microsoft.com/en-US/privacystatement.
Quora Ads – https://www.quora.com/about/privacy.

You may also opt out via the Digital Advertising Alliance

(http://www.aboutads.info/choices/), the Digital Advertising Alliance of Canada

(http://youradchoices.ca/), or the European Interactive Digital Advertising Alliance

(http://www.youronlinechoices.eu/).

We may add or substitute advertising platforms at our discretion as the digital

advertising ecosystem evolves.

Communication, CRM, and Messaging Platforms

Bunmee uses third-party Service Providers to manage prospect, customer, and franchisee

relationships and to send communications related to account management, franchise

development, marketing, and service updates. These platforms may include, without

limitation:

Customer Relationship Management (CRM) and marketing automation platforms (current example: HubSpot – https://legal.hubspot.com/privacy-policy)
SMS, MMS, RCS, and automated text messaging platforms
Email service providers and email marketing platforms
Voice, chat, video conferencing, and live chat platforms
AI-driven communication, scheduling, and lead-qualification tools
Calendar, booking, and scheduling platforms
Survey, feedback, and review management platforms
Push notification and in-app messaging providers
Any successor, replacement, or additional platforms used for similar purposes

We reserve the right to change, add, or remove any communication or messaging platform

at any time. Information shared with these platforms is governed by the platform's own

platform to use your information only for the purposes we specify.

Payment Processors

We will not store or collect your full payment card details. That information is

provided directly to our third-party payment processors whose use of your personal

information is governed by their Privacy Policy. These payment processors adhere to

the standards set by PCI-DSS as managed by the PCI Security Standards Council, which

is a joint effort of brands such as Visa, Mastercard, American Express, and Discover.

PCI-DSS requirements help ensure the secure handling of payment information.

Other Service Providers

We also use third-party processors for standard business uses such as: computing and

cloud service providers, cybersecurity, billing, payroll, scheduling, task management,

team collaboration, document signature, file storage, accounting, legal services,

newsletter management, AI productivity tools, and other industry-standard business

software and partners. We add or remove third-party processors from time to time, and

do so in accordance with applicable law.

LINKS TO OTHER SITES

Our website and services may contain links to other sites that are not operated by us.

If you click a third-party link, you will be directed to that third party's site. We

strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy

policies, or practices of any third-party sites or services.

CHILDREN'S PRIVACY

Our service does not address anyone under the age of 18 ("Children") for purposes of

franchise sales or business inquiries.

We do not knowingly collect personally identifiable information from anyone under the

age of 13 in violation of the Children's Online Privacy Protection Act (COPPA). If

you are a parent or guardian and you are aware that your child has provided us with

Personal Information, please contact us. If we become aware that we have collected

Personal Information from a child under 13 without verification of parental consent,

we take steps to remove that information from our servers.

CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any material

changes by posting the new Privacy Policy on this page and updating the "Updated"

date at the top.

For material changes, we will let you know via email and/or a prominent notice on our

website prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes

to this Privacy Policy are effective when they are posted on this page.

YOUR RIGHTS UNDER THE CALIFORNIA CONSUMER PRIVACY ACT (CCPA/CPRA)

If you are a resident of California, certain rights are conferred on you by the

California Consumer Privacy Act, as amended by the California Privacy Rights Act

("CCPA"). A California resident has the following rights under CCPA:

The Right to Know: You may request information from Bunmee about our collection and

use of Personal Information in the preceding twelve-month period by calling

(844) 628-6639 or by using the contact form on www.bunmee.co.

The Right to Delete: You may request deletion of certain personal information.
The Right to Correct: You have the right to request correction of inaccurate

personal information.

The Right to Opt-Out of Sale or Sharing: Bunmee does not sell Personal Information.

To the extent that any sharing of personal information for cross-context behavioral

advertising is considered a "sale" or "sharing" under CCPA, you may opt out by

contacting us or using any "Do Not Sell or Share My Personal Information" link

provided on our website.

The Right to Limit Use of Sensitive Personal Information: To the extent we collect

sensitive personal information, you may request that we limit its use.

The Right to Non-Discrimination: Bunmee will not discriminate against any person

for exercising their CCPA rights.

If you wish to be informed about what Personal Information we hold about you and if

you want it to be removed from our systems, please contact us through the contact

form at www.bunmee.co.

OTHER US STATE PRIVACY RIGHTS

Residents of certain other US states – including but not limited to Virginia,

Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Jersey,

Tennessee, Indiana, Minnesota, Maryland, Rhode Island, Kentucky, and New Hampshire –

may have similar rights under their respective state privacy laws, including rights

to access, correct, delete, port, and opt out of targeted advertising, sale, or

profiling. To exercise any of these rights, please contact us through the contact

form at www.bunmee.co. We will respond within the time period required by applicable

law and may need to verify your identity before fulfilling your request.

GDPR AND OTHER INTERNATIONAL RIGHTS

In certain circumstances, you have the following data protection rights:

The right to access, update, or delete the information we have on you.
The right of rectification.
The right to object.
The right of restriction.
The right to data portability.
The right to withdraw consent.

Please note that we may ask you to verify your identity before responding to such

requests.

You have the right to complain to a Data Protection Authority about our collection

and use of your Personal Information.

CONTACT US

If you have any questions about this Privacy Policy, please submit an inquiry through

our website contact form at www.bunmee.co or contact us at:

Bun Mee LLC

33328 Steiner Suite 3,

San Francisco, CA 94123

Phone:(844) 628-6639