Draft for review: items in dashed boxes are waiting on accountant or provider confirmation and must be resolved before launch.
Who we are
DG Forge Studio is [a trading name of David Gyuricsko, a sole trader based in the United Kingdom]. For the purposes of UK data protection law, we are the “controller” of your personal information.
Contact: david@dgforgestudio.co.uk
Postal address: [business address, to be confirmed]
[ICO registration number, if applicable]
What we collect
When you use the contact form or email us: your name, email address, phone number (if you give it), business name, the services you’re interested in, your budget and timeline choices, your message, how you heard about us, and anything else you choose to tell us.
When you visit the website: we use Cloudflare Web Analytics to understand how the site is used, such as which pages are visited and roughly where visitors are in the world. It doesn’t use cookies, doesn’t track you across other websites and doesn’t build a profile of you.
Anti-spam check: the contact form uses Cloudflare Turnstile to check that a real person is sending it. To do this, Cloudflare processes technical information about your browser and device, such as your IP address. It is not used for advertising.
Technical logs: like almost every website, our hosting provider automatically processes technical data such as IP addresses to deliver pages and protect the site from attacks.
We don’t collect special category data (such as health information) and we ask you not to include it in your message.
How we use it, and why we’re allowed to
| What we use it for | Legal basis |
|---|---|
| Replying to your enquiry and sending a quote | Our legitimate interest in responding to people who contact us, and steps you’ve asked us to take before entering a contract |
| Delivering work if you become a client | Performance of a contract |
| Keeping business and accounting records | Legal obligation |
| Understanding how the website is used, in aggregate | Legitimate interest in improving the site |
| Protecting the website and form from spam and abuse | Legitimate interest in keeping the site secure |
We won’t add you to a mailing list or send you marketing unless you’ve clearly asked us to. We never sell your personal information.
Who we share it with
We only share personal information with service providers that help us run the website and reply to you. They act on our instructions and must keep it secure:
- Cloudflare, for website hosting, security, the anti-spam check, analytics and email routing
- [Resend], for delivering emails sent from the contact form
- [Email provider, e.g. Google or Zoho], for our email inbox
We may also share information if the law requires it, or with our accountant for business records.
International transfers
Some of these providers are based in, or store data in, the United States or other countries outside the UK. Where that happens, we rely on the safeguards that UK law allows, such as the UK’s data adequacy arrangements or approved contract terms, so your information stays protected.
How long we keep it
- Enquiries that don’t lead to work: up to [12 months] after our last contact, then deleted.
- Client records: for [6 years] after the end of the financial year the work was done in, as required for tax and accounting.
- Analytics: aggregated statistics only, kept by Cloudflare according to its own retention settings.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that’s wrong
- ask us to delete your information
- ask us to restrict or stop using your information
- object to us using your information based on legitimate interests
- ask for your information in a portable format
To use any of these rights, email david@dgforgestudio.co.uk. We’ll reply within one month. There’s normally no charge.
Cookies
This website doesn’t use cookies for analytics, advertising or tracking, so there’s no cookie banner. Cloudflare may set strictly necessary security cookies to protect the site and the contact form; these don’t track you and can’t be switched off without breaking those protections.
Keeping your information safe
The website uses HTTPS encryption, form submissions are sent securely, and access to enquiries is limited to David. No system is perfectly secure, but we take sensible steps to protect your information.
Complaints
If you’re unhappy with how we’ve handled your information, please contact us first and we’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, or 0303 123 1113.
Changes to this policy
If we change how we use personal information, we’ll update this page and the date at the top.