Privacy Policy | Forge & Co. Digital

1. Who We Are

Forge & Co. Digital Ltd ("we", "us", "our") is a UK-registered company (Company No. 16711890) that provides video production, IT solutions, and advertising services for small and medium-sized businesses. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services.

Data Controller: Forge & Co. Digital Ltd
Email: forgeandcoteam@gmail.com
Address: United Kingdom

2. What Data We Collect

We may collect the following types of personal data:

Contact Information: Name, email address, phone number, company name
Business Information: Industry, business type, current tools and systems
Payment Information: Processed securely by Stripe, PayPal, Square, or SumUp. We do not store full card details.
Communication Data: Emails, messages, and feedback you send us
Technical Data: IP address, browser type, device information, pages visited
Project Data: Business processes and other information shared for project delivery

3. How We Collect Your Data

Directly from you when you fill out forms on our website
When you email us or communicate with us
Through cookies and similar technologies when you browse our website
From third-party payment processors when you make a payment
From analytics tools that help us understand website usage

4. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery: To provide, manage, and support the services you have requested
Communication: To respond to enquiries, send project updates, and provide customer support
Payment Processing: To process deposits and invoices
Marketing: To send occasional updates about our services (with your consent, which you can withdraw at any time)
Legal Compliance: To comply with legal obligations, resolve disputes, and enforce agreements
Improvement: To analyse and improve our website and services

5. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your data based on the following lawful bases:

Contract: Processing necessary to fulfil our contract with you
Consent: Where you have given explicit consent (e.g., marketing emails)
Legitimate Interests: For business operations, fraud prevention, and service improvement
Legal Obligation: To comply with applicable laws and regulations

6. How We Share Your Data

We do not sell your personal data. We may share it with:

Service Providers: Payment processors (Stripe, PayPal, Square, SumUp), email services, hosting providers, and CRM systems
Professional Advisers: Accountants, lawyers, and insurers when necessary
Legal Authorities: When required by law or to protect our rights

All third parties we work with are contractually bound to process your data only for specified purposes and in accordance with UK GDPR.

7. International Transfers

Some of our service providers may process data outside the UK. When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

8. Data Retention

Client Data: Retained for 7 years after the end of our business relationship (for legal and tax purposes)
Enquiry Data: Retained for 2 years unless you request deletion
Marketing Data: Retained until you unsubscribe or request deletion
Analytics Data: Retained for 26 months

9. Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Request your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time (without affecting lawful processing before withdrawal)

To exercise any of these rights, email us at forgeandcoteam@gmail.com. We will respond within 30 days.

10. Cookies

Our website uses cookies and similar technologies to:

Ensure the website functions properly (essential cookies)
Remember your preferences
Analyse how visitors use our website (analytics cookies)

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

11. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

SSL/TLS encryption for all website traffic
Secure payment processing through PCI-compliant providers
Access controls and authentication for admin systems
Regular security reviews and updates

While we take all reasonable precautions, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.

12. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with the "last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you have a complaint about how we handle your personal data, please contact us first. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):

ICO Website: ico.org.uk
ICO Phone: 0303 123 1113

15. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: forgeandcoteam@gmail.com
Company: Forge & Co. Digital Ltd
Company Number: 16711890