Privacy Policy

ForgeWeb ("we", "us", "our") designs, builds, and hosts websites for businesses. We are the data controller responsible for the personal data described in this policy. If you have any questions, you can reach us at enquiries@forgeweb.uk.

We only collect what we need to respond to you and to provide our services:

• Information you give us. This includes your name, email address, business details, and anything you include when you email us or fill in a form on our site.
• Technical data. When you visit a site we host, our servers automatically record basic information such as your IP address, browser type, and the pages you view. This is standard server log data used to keep the service secure and reliable.
• Cookies. Our own marketing site uses only essential cookies needed for it to function. We don't use advertising or tracking cookies.

We use your information to:

• Reply to your enquiries and provide quotes;
• Design, build, host, and maintain your website;
• Send you service-related messages, such as invoices, renewal reminders, and support updates;
• Keep our services secure and diagnose technical problems.

We do not sell your personal data, and we don't send marketing emails unless you've asked us to.

Under UK data protection law, we rely on the following lawful bases: contract (to provide the services you've asked for), legitimate interests (to run and secure our business), and consent (where you've opted in, such as to marketing). We also process some data to meet our legal obligations, such as keeping financial records.

We only share data with trusted third parties who help us run our service, and only as far as needed. These may include:

• Hosting and infrastructure providers who store and serve your website;
• Form and email delivery services that handle messages sent through your site;
• Payment and accounting providers who process invoices.

We may also disclose information where we're required to by law. We never sell your data to anyone.

The websites we host may be served from data centres in different regions, including the UK, Europe, the United States, and Australia. Where data is transferred outside the UK, we take steps to make sure it remains protected to a comparable standard.

We keep personal data only for as long as we need it, typically for the duration of our working relationship, plus any period required to meet legal, accounting, or reporting obligations. Server logs are kept for a short period and then deleted or anonymised.

Under UK data protection law you have the right to access the personal data we hold about you, to ask us to correct or delete it, to object to or restrict how we use it, and to request a copy in a portable format. To exercise any of these rights, email us at enquiries@forgeweb.uk and we'll respond within one month.

We use appropriate technical and organisational measures to protect your data, including secure hosting, encryption in transit (HTTPS), and limited access. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.

We may update this policy from time to time. When we do, we'll change the "last updated" date at the top of this page.