Privacy Policy
We keep this plain and specific. No legal boilerplate walls. If you have a question this document does not answer, email contact@theforgeworth.com and we will respond within one working day.
Who We Are
ForgeWorth is a digital asset transformation consultancy operated by Tino Mutasa as a sole trader, based in Beckenham, South East London. We help small business owners build the digital assets that make their business more valuable, scalable, and saleable.
Data controller: Tino Mutasa trading as ForgeWorth
Contact: contact@theforgeworth.com
Website: theforgeworth.com
What Data We Collect and Why
| Data | Where from | Why | Legal basis |
|---|---|---|---|
| Business name, email, phone | Scorecard / Contact form | To respond to your enquiry and provide the free Asset Audit | Legitimate interests |
| Business information, goals, challenges | During engagement / platform | To build and deliver your digital assets | Contract performance |
| Platform account credentials | Platform sign-up | To provide access to your client portal | Contract performance |
| Usage data (page views, feature use) | Platform / Website | To improve the service | Legitimate interests |
How We Use AI
Honest about AI — what this means for your data
We use Claude (made by Anthropic) to help us build your digital assets — things like content frameworks, business systems, and templates. Here is what that means in practice:
- We may use business-level information you share (your services, goals, target customers) to generate your assets.
- We do not input your customers' personal data into AI systems without your explicit written consent. Your clients' data stays yours.
- Anthropic processes inputs as a sub-processor under their standard API terms. Their privacy policy is at anthropic.com/privacy.
- We do not use your business information to train AI models — Anthropic's API terms prohibit this by default.
Who We Share Data With
We do not sell your data. We share data only with the processors listed below, who act strictly on our instructions.
| Processor | Role | Data location |
|---|---|---|
| Supabase | Database and file storage | London, UK (AWS eu-west-2) |
| Vercel | Platform and website hosting | EU-West (London region); global CDN for static assets |
| Web3Forms | Contact and scorecard form processing | Processes form submissions; see web3forms.com/privacy |
| Calendly | Booking and scheduling | USA (Calendly Inc.) — Standard Contractual Clauses apply |
| Anthropic | AI processing for asset delivery | USA (Anthropic PBC) — Standard Contractual Clauses apply |
International Transfers
Calendly and Anthropic are based in the United States. Transfers to these processors are covered by Standard Contractual Clauses (SCCs) approved under UK data protection law, providing appropriate safeguards for your data.
You can request a copy of the relevant safeguards by emailing contact@theforgeworth.com.
How Long We Keep Your Data
- Scorecard / enquiry data: 12 months from last contact
- Active client data: for the duration of your engagement plus 24 months
- Platform account data: until you request deletion
We do not sell your data. Ever.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your data (the "right to be forgotten")
- Restriction — ask us to restrict how we process your data while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — where consent is the legal basis, withdraw it at any time
To exercise any right, email contact@theforgeworth.com. We will respond within one calendar month, free of charge.
Request, correct, or delete your data
You have the right to access, correct, or delete any personal data we hold about you. Use the form below — or email contact@theforgeworth.com with the subject line "Data Request — [your name]". We respond within one calendar month.
We will respond within one calendar month. For urgent matters: contact@theforgeworth.com.
Complaints
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
ICO Registration Number: [TO BE ADDED after ICO registration — see ICO Registration Brief]
We would always prefer to resolve a concern directly first — please contact us before escalating.
Cookies
Our website uses no advertising or cross-site tracking cookies. We use strictly-necessary functional cookies for the site to work (e.g. form submission state), which under UK PECR do not require consent. We may also use optional analytics cookies to understand how the site is used — these load only if you accept them via our cookie banner. You can decline analytics with no effect on your use of the site, and change your mind at any time by clearing the choice stored in your browser.
Updates to This Policy
We will notify active clients of material changes by email. The "Last updated" date at the top of this page will always reflect the current version. The latest version is always at theforgeworth.com/privacy.html.