1. Who we are

ForgeSafe Security & Digital Solutions Ltd ("ForgeSafe", "we") is registered in England and Wales, company number 17546591, registered office 128, City Road, London, EC1V 2NX, UNITED KINGDOM. We are the data controller for the personal data described here. Contact: enquiries@forgesafeds.org.

2. The data we collect

• Business contact details: name, job title, company, work email address, work phone number, company website and professional profile. We collect them from public sources (company websites, professional networks) and from our B2B data provider, Apollo.io.
• What you send us when you reply to an email, contact us or book a call.
• If you use CyberBrain:
  • For a free scan on our website: the address of the site you submit, the scan results (score, number and titles of the findings) and your IP address, which we use to limit abuse (3 free scans per day). If you ask for the detailed results, your email address.
  • For customer accounts: your email address, your password (stored only in hashed form) and your role; the websites and code repositories you register, with the confirmation that you are authorised to test them; scan results, reports and the technical data collected during scans; and, if you set them, your company name, logo and colour for the reports.
  • We never store credentials for your systems. Code repositories are only read, on a temporary environment that is destroyed after the scan.
• Cookies: we only use cookies that are strictly necessary for the site to work. In practice, our sites set no advertising or analytics cookies: they only use your browser's local storage to remember your language choice and, in the CyberBrain app, to keep you signed in. On your first visit, forgesafeds.org asks the ipapi.co service for your country, based on your IP address, to choose the display language; nothing is stored.

3. Why we use it, and our legal basis

• To contact businesses about security services that may be relevant to them: our legitimate interest in promoting our services to other businesses. We only contact people in their professional role.
• To provide our services and respond to your requests: performance of a contract, or steps before entering into one.
• To meet legal obligations, such as accounting records.

4. Stopping our emails

You can stop our emails at any time by replying "STOP" or writing to enquiries@forgesafeds.org. We then add your email address to a suppression list, so that we never contact you again.

5. Who we share it with

We do not sell your data. We use service providers who process it on our behalf: Apollo.io (prospecting and email sending), Microsoft (email) and Vercel and Render (website and CyberBrain hosting).

6. International transfers

Some of these providers are based outside the UK, including in the United States. Where this happens, we rely on recognised safeguards, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.

7. How long we keep it

We delete prospect data 24 months after our last interaction. Suppression-list entries are kept for as long as needed to respect your choice. Client data is kept for the length of the contract, then for the periods required by law.

8. Your rights

You can ask to access, correct or delete your data, to restrict its use, or to receive a copy. You can object at any time to the use of your data for direct marketing. Write to enquiries@forgesafeds.org. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local authority (in Côte d'Ivoire: ARTCI, artci.ci).

9. Changes

We may update this policy. The date at the top shows the latest version.