Privacy Policy

Effective Date: July 2025

Business Name: Domain Forge
Legal Entity: Sole Trader (United Kingdom)

1. Introduction

This Privacy Policy explains how Domain Forge (“we”, “us”, “our”) collects, uses, and protects your information when you use our services or interact with our website.

We are committed to protecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation (UK GDPR).

2. Information We Collect

We may collect and process the following types of personal data:

• Your name and contact details (email address, phone number, etc.)
• Technical setup information (domain names, DNS records, email service settings)
• Credentials or access details necessary to complete the work
• Correspondence with you relating to the services we provide

We do not collect unnecessary data and do not track your activity via analytics or cookies, beyond the basic logs automatically captured by Cloudflare.

3. How We Use Your Data

• Provide the services you request
• Communicate with you regarding a project or enquiry
• Send occasional updates or newsletters (you can opt out at any time)
• Keep internal records and maintain service logs

4. Data Storage and Security

We take data security seriously and use industry-standard tools to protect your information.

• All sensitive information, such as login credentials, is transmitted via Bitwarden Send
• Credentials are temporarily stored in a secure 1Password vault while the project is active
• Credentials and configuration data are deleted once the project is completed and paid for in full

If you request earlier deletion, this will be treated as a termination of services and full payment will still be required for any work delivered.

Clients must not share credentials via email, SMS, or unsecured messaging platforms. Domain Forge is not responsible for any breach, data loss, or disruption caused by insecure sharing methods outside of our recommended secure channels.

5. Your Rights

You have the right to:

• Request a copy of the data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw your consent to communications at any time

To exercise these rights, email: [email protected]

6. Data Sharing and Subprocessors

We never sell your personal data. We may share limited data with trusted processors, including:

• Tally.so for intake forms
• Cloudflare for DNS and performance
• Microsoft 365 for email delivery
• Stripe for payments (where used)

These providers process data in accordance with their own privacy policies and applicable data protection laws.

7. Data Retention

We only retain the minimum amount of personal data necessary to deliver our services and meet legal obligations. Credentials and sensitive setup data are deleted promptly at project closeout or upon request.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or website notice.

9. Governing Law

This Privacy Policy is governed by the laws of England and Wales.
This policy is reviewed periodically and may be updated. The latest version will be published at domainforge.co.uk or available on request.