Privacy Policy
1. Who we are
Forge Partners Group Ltd (company number 17424310), registered office 167-169 Great Portland Street, London W1W 5PF, trades as Forge Partners (“we”, “us”, “our”). This privacy policy explains how we collect, use, store and protect personal data when you visit our website at forgepartners.co.uk (the “Site”) or get in touch with us.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Forge Partners Group Ltd is the data controller of any personal data you provide to us.
Contact: [email protected]
2. What this policy covers
This policy applies to personal data collected through the Site and through enquiries you make to us by email or telephone. It does not cover third-party websites that the Site may link to. If you follow a link to another site, you should read its own privacy policy.
3. What personal data we collect
We collect personal data in two ways: information you give us directly, and information collected automatically when you use the Site.
3.1 Information you give us
If you contact us by email or telephone, we collect the following:
- Your name
- Your email address and telephone number
- The content of any message you send us or anything you tell us
You do not need to contact us to browse the Site. You only provide this information if you choose to get in touch.
3.2 Information collected automatically
When you visit the Site, our hosting provider (Cloudflare) processes technical information needed to deliver and protect the Site, which may include:
- Your IP address
- Browser type and version
- Device type and operating system
- Pages requested and the referring website
We do not use analytics or advertising cookies. Our separate Cookie Policy explains the limited cookies that may be set.
4. Why we use your personal data and our legal basis
Under UK GDPR, we must have a lawful basis for processing personal data. The sections below set out how we use your data and the legal basis we rely on.
4.1 Responding to enquiries
Purpose: To read your message, reply to it, and continue any conversation that follows.
Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is responding to enquiries from people who have actively chosen to contact us.
4.2 Running and protecting the Site
Purpose: To deliver the Site, keep it secure and prevent abuse.
Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)).
4.3 Complying with legal obligations
Purpose: To meet our legal and regulatory duties, including responding to lawful requests from authorities.
Legal basis: Legal obligation (UK GDPR Article 6(1)(c)).
5. Who we share your data with
We do not sell your personal data. We share it only with:
- Cloudflare, our website hosting provider, which processes data on our behalf as a processor under UK GDPR (see Section 7).
- Our email provider, which hosts our company inbox.
- Professional advisers (such as lawyers, accountants or auditors) where reasonably necessary.
- Law enforcement or regulators, where we are legally required to do so.
We do not share your personal data with third parties for marketing purposes.
6. How long we keep your personal data
We keep personal data only for as long as we need it for the purposes set out in this policy.
- Enquiries and related correspondence: up to three years from your last contact with us, unless the conversation leads to an ongoing business relationship, in which case we retain it for as long as that relationship continues plus seven years after it ends, to meet legal and tax record-keeping requirements.
- Technical information processed by Cloudflare: retained by Cloudflare for a limited period in line with its own retention practices.
Where we no longer need personal data, we delete or anonymise it.
7. International transfers of personal data
Our hosting provider, Cloudflare, is based in the United States and operates a global network. This means that some of the personal data processed through the Site may be transferred to and processed in countries outside the United Kingdom and the European Economic Area.
When this happens, we rely on the safeguards that Cloudflare has put in place, including Standard Contractual Clauses approved for use under UK law, to ensure that your data continues to be protected to a standard equivalent to UK law.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access: to ask us for a copy of the personal data we hold about you.
- Right to rectification: to ask us to correct personal data that is inaccurate or incomplete.
- Right to erasure: to ask us to delete your personal data in certain circumstances.
- Right to restrict processing: to ask us to pause our use of your data while a concern is resolved.
- Right to object: to object to processing based on legitimate interests.
- Right to data portability: to receive personal data you provided to us in a structured, commonly used and machine-readable format.
- Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before the withdrawal.
To exercise any of these rights, please email [email protected]. We will respond within one month.
You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe we have not handled your personal data properly. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
9. Rights for visitors from the United States
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas or another US state with a comprehensive privacy law, you may have additional rights under that law, including:
- The right to know what personal information we collect about you and how it is used.
- The right to request deletion of your personal information.
- The right to correct inaccurate personal information.
- The right to opt out of the sale or sharing of personal information for targeted advertising. We do not sell personal information, and we do not use it for targeted advertising.
- The right not to be discriminated against for exercising your privacy rights.
To exercise any of these rights, email us at [email protected] and tell us which state you reside in. We may need to verify your identity before responding.
10. How we protect your data
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include encrypted connections to the Site (HTTPS), access controls on our email systems, and the security measures provided by Cloudflare as our hosting provider.
No system is completely secure. If we become aware of a personal data breach that is likely to affect your rights, we will notify the ICO within 72 hours and, where required, notify you directly.
11. Children
The Site is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Cookies
Full details are set out in our separate Cookie Policy, which is available from the footer of every page.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will update the “Last updated” date at the top of this policy. If the changes are significant, we will draw them to your attention through a notice on the Site.
14. How to contact us
If you have any questions about this policy or how we handle your personal data, please contact us:
Email: [email protected]
Postal address: Forge Partners Group Ltd, 167-169 Great Portland Street, London W1W 5PF