CA-C-000046
Bumble — Bumble Privacy Policy
Entity
Date detected
March 21, 2026
Effective date
March 21, 2026
Severity
Medium
Share 𝕏 Share in Share

What Changed

Bumble quietly removed the UK from the list of server locations in their Privacy Policy on March 21, 2026. The policy previously stated that their network includes servers in the US, UK, and the EU; it now only mentions the US and the EU. This matters because UK users may have different data protection expectations, and the removal of UK servers could affect where their personal data is physically stored and processed.

Why It Matters

UK users may no longer have their data processed on UK soil, which changes the legal framework governing their data protection rights. This removal lacks any explanation of alternative safeguards, leaving a transparency gap that could concern regulators and affected users alike.

Consumer Impact

Bumble has removed the UK from its stated server locations, meaning UK users' personal data may no longer be processed or stored within the UK. This could affect the legal protections that apply to your data under UK data protection law, including the UK GDPR. If you are a UK user concerned about where your data is stored, you can submit a subject access request to Bumble to ask for more information about how and where your personal data is processed.

Institutional Analysis (Compliance & legal intelligence)

Assessment

Bumble removed the UK as a declared server location in its Privacy Policy effective March 21, 2026. This touches UK GDPR Art. 13(1)(f) and Art. 44-49, which govern transparency about data transfers and the conditions for international transfers. If Bumble is no longer processing data on UK infrastructure, this may alter the international transfer mechanism required for UK user data flowing to non-UK servers. Compliance teams with UK user data flows through Bumble or using Bumble as part of a vendor stack should assess whether existing DPAs and transfer mechanisms remain adequate. Attention is warranted.

Regulatory Exposure

1. UK GDPR Art. 13(1)(f): Requires data controllers to inform data subjects of intended transfers to third countries and the safeguards in place. Removal of UK servers may trigger new or updated transfer disclosures.

🔒

Compliance intelligence locked

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000046.

Evidence Verification

✓ Verified
Previous Version
013fa835409d8ac590a3d4ebebd9481341218f932d0937cf622fa812e22f6fd4
March 19, 2026 14:58 UTC
✓ Verified
Current Version
5dd453abd78efd6d811ea40e15112baaf2ce4a0812d8323dc755aa665dd55f5b
March 21, 2026 06:06 UTC
✓ Verified
Change Detected
March 21, 2026 06:06 UTC
✓ Verified
Source Document
https://bumble.com/en-us/privacy
How to Cite
ConductAtlas Policy Archive
Entity: Bumble | Document: Bumble Privacy Policy | Record: CA-C-000046
Captured: 2026-03-21 06:06:42 UTC
URL: https://conductatlas.com/change/2026-03-21-bumble-bumble-privacy-policy-46/
Accessed: April 4, 2026

Full Changes

1 sentences modified
View complete diff →

Document Context

Document
Bumble Privacy Policy
Entity
Bumble
Captured
March 21, 2026
Source URL
https://bumble.com/en-us/privacy

Get alerted when Bumble changes their policies

Create a free account and add Bumble to your watchlist. We'll email you the moment something changes.