The Forge, Banff Privacy Policy

Effective Date: 18/01/2025

The Forge Banff CIC ("we," "our," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you subscribe to our mailing list. It is important that you read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

This Privacy Policy is compliant with the UK General Data Protection Regulation (UK GDPR) and applies to all personal data we collect from individuals who subscribe to our mailing list.

1. Data Controller

The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) is:

The Forge Banff CIC

Company Number SC793023

The Forge

Kingswell Lane

Banff

AB45 1DX

[email protected]

2. What Personal Data Do We Collect?

When you subscribe to our mailing list, we may collect and process the following personal data:

Full Name
Email Address
Telephone Number
IP Address (for security and verification purposes)
Preferences (such as preferred types of communications or frequency of emails)

We do not collect sensitive personal data unless explicitly stated or required.

3. How Do We Use Your Data?

We use your personal data to send you communications related to our services, products, promotions, and updates. Specifically, we use your data for the following purposes:

To send you newsletters, updates, and other promotional content you have requested or agreed to receive.
To respond to your queries or requests.
To improve our marketing efforts and tailor content to your preferences.

We may also use your information to ensure that the content we send is relevant and in line with your interests.

4. Legal Basis for Processing Your Data

We rely on the following legal bases under the UK GDPR to process your personal data:

Consent: By subscribing to our mailing list, you consent to receive communications from us. You can withdraw this consent at any time by unsubscribing or contacting us directly.
Contractual Necessity: In some cases, we may need your data to fulfil a request or contract with you.

5. How Long Do We Retain Your Data?

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. If you choose to unsubscribe from our mailing list, we will delete your personal data from our records within a reasonable time, typically within [X] months, unless we are required to retain it for legal reasons.

6. How We Protect Your Data

We implement a range of technical and organisational measures to ensure that your personal data is secure. These measures include encryption, firewalls, and secure servers. However, no method of transmission over the Internet or method of electronic storage is 100% secure, so while we strive to protect your personal data, we cannot guarantee its absolute security.

7. Who Do We Share Your Data With?

We do not sell or rent your personal data to third parties. We may, however, share your data with the following types of third parties for the purposes outlined in this Privacy Policy:

Service Providers: We may share your data with third-party providers who assist us in sending emails, managing our mailing list, and improving our marketing services. These third parties are contractually obligated to protect your data and use it only for the purposes for which it was shared.
Legal Obligations: We may disclose your data if required to do so by law or in response to a valid legal request, such as a court order or government investigation.

8. Your Rights Under the UK GDPR

You have the following rights regarding your personal data under the UK GDPR:

Right to Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You have the right to request corrections to any inaccuracies in your personal data.
Right to Erasure: You have the right to request the deletion of your personal data, subject to certain legal restrictions.
Right to Restrict Processing: You have the right to request that we limit how we process your personal data.
Right to Object: You can object to the processing of your personal data in certain circumstances.
Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details provided below.

9. Unsubscribing from Our Mailing List

If you no longer wish to receive communications from us, you can unsubscribe at any time by:

Clicking the “unsubscribe” link in any of our email communications, or
Contacting us directly at [email protected].

Upon unsubscribing, we will remove you from our mailing list and cease sending marketing communications to you.

10. International Transfers

We do not transfer your personal data outside of the UK or European Economic Area (EEA). If, in the future, such transfers are necessary, we will ensure appropriate safeguards are in place to protect your data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Effective Date" at the top will be updated accordingly. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.

12. Contact Us