PRIVACY
POLICY

Last updated: 25 February 2026

1. What information we collect

We collect personal data when you:

• Fill in the contact form or free audit request form on our website
• Send us an email directly
• Sign a client contract or accept a quote
• Use our client portal

The types of personal data we may collect include:

• Your name and the name of your business
• Your email address and phone number
• Your website URL (when requesting an audit)
• Any information you include in messages or project briefs
• Payment information (processed securely via our payment provider — we do not store card details)

2. How we use your information

We use your personal data to:

• Respond to your enquiry or audit request
• Deliver the services you have engaged us to provide
• Send you your quote, contract, invoices, and project updates
• Comply with our legal and financial obligations

We do not use your data for automated profiling, and we do not use it to send unsolicited marketing communications. If we want to send you anything beyond your requested service, we will ask your permission first.

3. Legal basis for processing (UK GDPR)

• Contract performance — processing your data is necessary to deliver the services you have requested
• Legitimate interests — responding to your enquiry and following up on a free audit request
• Legal obligation — retaining financial records as required by HMRC

4. Who we share your data with

We do not sell your personal data. We may share it with:

• Our hosting provider (Fasthosts) — who stores the website and any form submissions on servers in the UK/EU
• Email providers — to deliver communications to you
• Accountancy software — for invoicing and financial records

All third parties we use are required to handle your data securely and in accordance with UK data protection law.

5. How long we keep your data

• Enquiries that do not become projects: deleted after 12 months
• Client project data: retained for 6 years from project completion (HMRC financial records requirement)
• Free audit requests: retained for 6 months, then deleted unless a project begins

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Request deletion of your data (where we have no legal obligation to retain it)
• Object to processing based on legitimate interests
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at build@forgeweb.online. We will respond within 30 days.

7. Cookies

Our website uses only essential cookies required for basic functionality (such as remembering your cookie preference). We do not currently use any tracking, analytics, or advertising cookies. See our Cookie Policy for full details.

8. Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Form submissions are transmitted securely. We do not store payment card details.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. Significant changes will be notified to active clients by email.

10. Contact & complaints

For any privacy-related questions, contact us at build@forgeweb.online.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.