Privacy Policy

ForgeSpan Platform Engineering (“ForgeSpan”, “we”, “us”) is a business established in the United Kingdom. For the purposes of applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, ForgeSpan is the controller of personal information described in this policy unless we tell you otherwise.

Information we collect

When you contact us, we may collect your name, work email address, company, telephone number, service interests, and the project or support context you choose to provide. We also receive technical information necessary to operate and protect the website, such as browser and device details, approximate request timing, and security or form-delivery logs.

Please do not send passwords, access tokens, special-category personal data, or confidential production data through a general website enquiry form.

How we use information and our lawful bases

• Responding to enquiries and preparing proposals: to take steps at your request before entering a contract and, where appropriate, for our legitimate interests in operating a business relationship.
• Delivering an agreed service: to perform a contract and meet our obligations to the organisation engaging us.
• Protecting the website and preventing misuse: for our legitimate interests in security, service integrity, and fraud prevention, balanced against your rights.
• Meeting legal obligations: where processing is required by law or to establish, exercise, or defend legal claims.

Enquiry forms

Information submitted through our contact and support forms is used to assess and respond to the request, route it to the appropriate team, and keep a record of the conversation. Form delivery may be provided by our website platform. The provider processes information on our behalf under its own security and data-processing arrangements.

Submitting an enquiry does not create a service contract. We do not use the information in an enquiry to send unrelated marketing without an appropriate basis and, where required, your consent.

Cookies and similar technologies

Our website and the services that help operate it may use essential cookies or similar technologies for security, request handling, and basic website functionality. The form security service may use technical signals to assess automated or abusive traffic. We do not use advertising cookies as essential. If non-essential tracking technologies are introduced, we will provide notice and obtain consent where required by law. You can manage cookies through your browser settings; disabling essential features may affect form or site operation.

Service providers and international transfers

We use third-party processors for website hosting, form delivery, security and bot protection, and communications. They receive only information needed to provide their service and are expected to protect it under contractual terms. We may also disclose information where required by law or where necessary to protect rights, safety, or the security of our services.

Some providers may process information outside the United Kingdom. Where restricted transfers apply, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy regulation or approved contractual clauses, as applicable.

Retention

We keep enquiry information for as long as needed to respond and manage a potential or existing business relationship. As a general guide, enquiries that do not lead to an engagement are normally reviewed for deletion after 24 months. Contract and financial records may be retained for longer where required by law or for legitimate record-keeping and legal purposes. Security logs are retained for a proportionate period based on operational need.

Security

We use access controls and proportionate technical and organisational safeguards designed to protect personal information against unauthorised access, loss, or misuse. No internet transmission or storage system can be guaranteed completely secure. Please use the telephone route for urgent production incidents and do not include sensitive credentials in web enquiries.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, or object to processing of your personal information, and to data portability. Where processing is based on consent, you may withdraw it. You may also complain to the UK Information Commissioner's Office. We may need to verify your identity before acting on a request and some rights are subject to legal exceptions.

Children and policy changes

Our services and website are directed to business audiences and are not intended for children. We may update this policy when our practices or legal requirements change. The effective date above indicates the latest revision; material changes will be communicated through appropriate channels.

Contact about privacy

For a privacy request or question, use our contact page or telephone +17312621260. Our business contact address is: 71-75 Shelton Street Covent Garden LONDON - WC2H 9JQ United Kingdom (GB).