Privacy Policy

1. Who We Are

Data Controller: Forxa

Address: Winsford House, 450A Lichfield Road, Four Oaks, B74 4EP

Email: [email protected]

As a small business with an annual turnover below the ICO registration threshold, Forxa is not required to register with the ICO. However, we handle all personal data responsibly and in line with UK GDPR principles.

2. What Data We Collect

When you submit a catalogue request on our website, we collect:

• First name
• Email address
• Phone number
• Any project notes or information you voluntarily provide

We do not collect payment card details through our website. Payments are processed separately and securely.

We may also collect basic technical data automatically when you visit our website, such as your IP address, browser type, and pages visited (via Cloudflare infrastructure). This data is anonymised and not used to identify individuals.

3. How We Use Your Data

We use your personal data solely for the following purposes:

• To send you the Forxa product catalogue you requested
• To respond to your enquiries and process your orders
• To send you an order confirmation and invoice
• To arrange and track delivery of goods you have purchased
• To comply with our legal obligations (e.g. maintaining financial records)

We do not use your data for automated profiling, targeted advertising, or any purpose beyond fulfilling your order and enquiry.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing is necessary to fulfil your order or respond to your catalogue request
• Legitimate Interests: To manage our business, respond to enquiries, and maintain customer records
• Legal Obligation: To comply with HMRC and other legal requirements

5. Who We Share Your Data With

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share your data only with:

• Delivery couriers — solely to fulfil your order (name and delivery address only)
• EmailJS — our email sending service, used to process catalogue request form submissions
• Zoho Mail — our email provider, used to store and send business correspondence
• Cloudflare — our website host and DNS provider

All third-party services we use are contractually obligated to handle your data securely and in compliance with applicable data protection law.

6. How Long We Keep Your Data

• Catalogue requests (no purchase): 12 months from the date of request
• Customer order records: 7 years from the date of sale, as required by HMRC
• Email correspondence: 3 years from last contact

After these periods, your data will be securely deleted.

7. Your Rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of Access — request a copy of the data we hold about you
• Right to Rectification — request correction of inaccurate data
• Right to Erasure — request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing — request we limit how we use your data
• Right to Object — object to processing based on legitimate interests
• Right to Data Portability — request your data in a portable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We take the security of your personal data seriously. Measures we take include:

• All website traffic is encrypted via HTTPS (SSL/TLS)
• Email accounts are protected with two-factor authentication
• Customer data is accessible only by Forxa
• We do not store payment card details

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO as required by law within 72 hours.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at forxa.co.uk. The date at the top of this page indicates when it was last updated.