Privacy Policy
Last updated: 25 July 2026
This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and the rights you have over it.
Who we are
Specialist Forge is a trading name of New Window Marketing Limited, Registered in England and Wales, company number 10152936. We are the data controller for the personal data described in this policy. You can reach us at hello@specialistforge.com.
What we collect
Information you give us
When you submit the discovery call form on this site, we collect:
- Your name and work email address
- Your company name and, if you provide it, company website
- Your role and company size
- What you are interested in, and anything you write in the free-text field
If you subscribe to The Forge Journal, we collect the email address you enter. If you email us directly, we hold the contents of that correspondence.
Information collected automatically
Our web server records standard technical information for security and reliability, including your IP address, the pages requested, and your browser type. When you submit a form, your IP address is recorded alongside the submission so we can prevent abuse and rate-limit automated traffic.
This site stores a small amount of information in your browser's local storage: your cookie choice, and any articles you save for later on the blog. This never leaves your device and we cannot read it.
Why we use it, and our lawful basis
- To respond to your enquiry and provide our services. Lawful basis: taking steps at your request prior to entering a contract, and legitimate interests in responding to business enquiries.
- To send you The Forge Journal, if you subscribed. Lawful basis: consent. Every issue includes an unsubscribe link, and you can withdraw consent at any time.
- To keep the site secure and prevent spam. Lawful basis: legitimate interests in protecting our systems.
- To understand how the site is used and improve it. Lawful basis: consent, where analytics cookies are used.
Cookies and analytics
We do not use advertising or cross-site tracking cookies. Analytics, where used, is loaded only after you accept via the notice shown on your first visit. Declining does not limit your use of the site in any way. You can change your choice at any time by clearing this site's data in your browser.
Who we share it with
We do not sell personal data. We share it only with service providers who process it on our behalf:
- Resend delivers the notification email generated by the contact form.
- Microsoft 365 hosts our email, where your enquiry is received and stored.
- DigitalOcean hosts this website on servers located in the United Kingdom.
Where a provider processes data outside the UK or EEA, that transfer is covered by appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
We may also disclose personal data where we are legally required to do so, or to establish or defend legal claims.
How long we keep it
- Enquiries that do not become clients: up to 24 months from your last contact with us, then deleted.
- Client records: for the duration of the engagement and for six years afterwards, to meet UK accounting and legal requirements.
- Newsletter subscribers: until you unsubscribe.
- Server and form logs: up to 12 months.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased in certain circumstances
- Restrict or object to how we process it
- Receive your data in a portable format
- Withdraw consent at any time, where consent is the basis we rely on
To exercise any of these, email hello@specialistforge.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address it first.
Security
This site is served over HTTPS. Form submissions are transmitted encrypted, stored with restricted file permissions on our server, and relayed to a mailbox protected by access controls. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.
Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes affecting how we use data you have already given us will be notified to you directly where we hold contact details for you.