Data Protection Policy
ForgeForward
Effective Date: Jan 1st, 2026
Our Commitment
ForgeForward is committed to protecting the personal data of our clients, prospects, and website visitors. This policy explains how we collect, use, store, and protect personal information in connection with our website design and digital marketing services for contractors.
We operate offices in New York, USA and Antwerp, Belgium. As a result, we are subject to applicable data protection laws in both jurisdictions, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA).
What Personal Data We Collect
When you interact with ForgeForward, we may collect the following categories of personal data:
- Contact information: name, email address, phone number
- Business information: company name, service area, business type
- Communication records: messages sent through our contact form, emails, and SMS
- Usage data: pages visited, time spent on site, referring URLs, browser and device type
- Cookies and tracking data: as described in our Privacy Policy
How We Use Your Data
We use your personal data only for the following purposes:
- To respond to enquiries submitted through our contact form or booking system
- To deliver the website design and marketing services you have engaged us for
- To send appointment reminders, project updates, and service-related communications
- To send marketing messages where you have given consent (and you can opt out at any time)
- To improve our website and service offering based on usage analytics
- To comply with legal obligations
Legal Basis for Processing (GDPR)
For individuals in the EEA, we rely on the following legal bases to process your personal data:
- Contract: processing necessary to deliver services you have engaged us for
- Legitimate interests: analytics, fraud prevention, and improving our services
- Consent: marketing communications, SMS messaging, and cookies where required
- Legal obligation: compliance with applicable law
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Client project data is retained for a minimum of 5 years following the end of a client engagement for accounting and legal purposes. Marketing contact data is retained until you withdraw consent or request deletion.
Data Sharing
We do not sell your personal data. We may share data with trusted third-party service providers who assist us in delivering our services, including hosting providers, email platforms, CRM tools, and advertising platforms. All subprocessors are contractually required to protect your data and may only use it as directed by ForgeForward.
We may disclose personal data where required by law, court order, or to protect the rights, property, or safety of ForgeForward, our clients, or the public.
International Data Transfers
Your data may be transferred to and processed in countries outside the EEA, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to maintain the same level of protection required by GDPR.
Your Rights
If you are located in the EEA or another jurisdiction with applicable data protection law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (right to erasure)
- Restrict or object to certain processing activities
- Receive your data in a portable format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your local data protection authority
To exercise any of these rights, please contact us at hello@forgeforward.io. We will respond within 30 days.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Cookies
Our website uses cookies and similar tracking technologies. For full details, please refer to our Privacy Policy. You can manage your cookie preferences through your browser settings at any time.
Changes to This Policy
We may update this Data Protection Policy from time to time. Material changes will be communicated via email or a notice on our website. The effective date at the top of this page will reflect the most recent revision.
Contact and Data Controller
ForgeForward is the data controller for personal data processed in connection with our services. If you have any questions about this policy or how your data is handled, please contact us:
Email: hello@forgeforward.io
Phone: +1 (646) 951-7542
175 Varick Street, Suite 415, New York, NY 10014, United States
Londenstraat 3, 2000 Antwerpen, Belgium