Legal
Privacy Policy
Last updated: 16 June 2026
This policy explains what personal data FORGE collects, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
FORGE is a trading name operated by Aaron F, a sole trader based in the United Kingdom.
Data controller: Aaron F, trading as FORGE
Contact: agent01101001@forgeisagentic.tech
Website: forgeisagentic.tech
If you have any questions about how we handle your data, please contact us at the address above.
2. What data we collect
We collect the following personal data when you complete our onboarding questionnaire:
- Your business name
- Your location (town, city, or region)
- Your email address
- Links to your existing online presence (e.g. social media profiles, Google Maps listing)
- Any additional notes or preferences you choose to share
- Your selected service package
We do not collect payment card details. Payments are processed securely by PayPal. We do not store or have access to your payment information.
3. Why we collect it and our legal basis
We collect and process your personal data for the following purposes:
- To deliver the service you have purchased — Legal basis: performance of a contract (UK GDPR Article 6(1)(b)). We use your business name, location, and preferences to build your website, brand kit, and marketing materials.
- To send your invoice and project updates — Legal basis: performance of a contract. We use your email address to communicate about your order.
- To improve our service — Legal basis: legitimate interests (UK GDPR Article 6(1)(f)). We may review anonymised briefs to improve our output quality.
We will never use your data for unsolicited marketing without your explicit consent.
4. Who we share your data with
We use a small number of trusted third-party services to operate our business. Each acts as a data processor on our behalf:
- FormSubmit.co — receives a copy of your brief by email so we are notified of new orders. View their privacy policy at formsubmit.co.
- PayPal — processes your payment. Your payment data is handled directly by PayPal under their privacy policy at paypal.com.
- Vercel — hosts this website. They may log basic server data (IP address, browser type) as part of normal hosting operations. View their privacy policy at vercel.com.
- Canva — used to create brand kit assets as part of Standard and Full Deploy packages.
- HubSpot — used to set up your CRM as part of Standard and Full Deploy packages. We create a HubSpot account on your behalf using the details you provide.
We do not sell your personal data to any third party.
5. How long we keep your data
We retain your personal data for as long as is necessary to deliver your order and comply with our legal obligations:
- Order and brief information is retained for up to 6 years for accounting and legal purposes (as required by HMRC).
- Email correspondence is retained for up to 2 years after your last interaction with us.
You may request deletion of your data at any time (see Your Rights below), subject to any overriding legal obligations.
6. Cookies
Our website uses a small number of cookies to function correctly:
- Strictly necessary cookies — required for the website to operate. These cannot be disabled.
- Analytics cookies — we may use Vercel Analytics to understand how visitors use our site. This data is anonymised and does not identify you personally. You can opt out via our cookie banner.
We do not use advertising cookies or share cookie data with advertising networks.
7. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate or incomplete data.
- Right to erasure — you can ask us to delete your data, subject to legal obligations.
- Right to restrict processing — you can ask us to limit how we use your data.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to object — you can object to processing based on legitimate interests.
To exercise any of these rights, contact us at agent01101001@forgeisagentic.tech. We will respond within 30 days.
8. How to complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
We would appreciate the opportunity to resolve any concerns directly before you contact the ICO — please reach out to us first.
9. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent version. Continued use of our website after changes have been posted constitutes your acceptance of the updated policy.