1. Who we are 

Forge 365 (“Forge”, “we”, “us”) is the data controller for personal data collected through forge.software. This policy explains what we collect, why, how long we keep it and your rights under UK GDPR and the Data Protection Act 2018.

      • Company name: Forge 365

      • Registered address: Metro Office Donegall Square East, Belfast, Northern Ireland

      • Company number: NI739176

      • Privacy contact: hello@forge.software

    2. What data we collect 

    We collect personal data in two ways only.

    When you submit a form. If you fill in a contact, demo or download form and opt in, we collect the details you give us, such as:

        • Name

        • Work email address

        • Company name and job title

        • Your message or enquiry

      When you browse our site. With your consent, Google Analytics collects usage data, such as pages visited, time on site, referring website, approximate location (city/country), device and browser type, and a pseudonymised online identifier. We do not use this to identify you personally.

      3. How we use your data and our lawful basis

      We rely on your consent (UK GDPR Article 6(1)(a)) for all the processing below. You can withdraw consent at any time without affecting processing that happened before.

      Purpose Data used Lawful basis
      Responding to your enquiry or demo request Form details Consent
      Sending marketing emails you opted in to Name, email, company Consent
      Understanding how our website is used, to improve it Google Analytics data Consent (via cookie banner)

      We never sell your personal data.

      4. Cookies and Google Analytics

      We only set Google Analytics cookies after you accept them in our cookie banner. Strictly necessary cookies, which make the site work, do not need consent.

      Cookie Provider Purpose Expires
      _ga Google Analytics Distinguishes unique visitors 2 years
      _ga_<container-id> Google Analytics Keeps session state 2 years

      You can change or withdraw your cookie choice at any time via [Cookie settings link], or block cookies in your browser. You can also install the Google Analytics opt-out browser add-on.

      Google processes this data as our processor. Read more in how Google uses data from sites that use its services.

      5. How long we keep it, who we share it with, and transfers

      Retention. We keep personal data only for as long as your consent allows and no longer than needed for the purpose you gave it for.

          • Form submissions: kept for [X months] from your last interaction with us, or until you withdraw consent, whichever is sooner. Then we delete or anonymise them.

          • Google Analytics data: kept for [14 months], Google Analytics’ retention setting for our account.

        Sharing. We share data only with service providers who process it on our behalf under a written contract:

            • Google (Google Analytics) — website analytics

            • [CRM/marketing platform, e.g. HubSpot] — storing enquiries and sending emails you opted in to

            • Microsoft (Microsoft 365) — email and internal storage

          We may also disclose data if the law requires it.

          International transfers. Some providers may process data outside the UK, including in the US. Where they do, we rely on safeguards such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.

          6. Your rights

          Under UK GDPR you have the right to:

              • Access the personal data we hold about you

              • Have inaccurate data corrected

              • Have your data deleted

              • Restrict or object to how we use it

              • Receive your data in a portable format

              • Withdraw consent at any time, including by clicking “unsubscribe” in any email

            To use any of these rights, email us on info@forge.software. We will respond within one month.

            Security. We use appropriate technical and organisational measures to protect your data, including access controls and encryption within Microsoft 365.

            Complaints. If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

            Changes to this policy. We may update this policy. The latest version will always be on this page, with the date it was last updated at the top.