Published: 10 October 2026. Last reviewed: 14 October 2026.
Who is responsible for your information?
InForge Consulting Limited is the controller of personal information collected through this website and our own consultancy enquiries and correspondence. We are registered in England and Wales under company number 16357881. Our registered office is 124 City Road, London, England, EC1V 2NX. For privacy questions, rights requests or complaints, email info@inforge.uk or write to our registered office, marking your correspondence “Privacy”.
Information we collect
You provide information when you contact us, discuss consultancy services or register for news and industry insights. Our Contact form collects your name, email address, telephone number, company, message and how you heard about us. The Homepage enquiry component collects your industry selection and email address. The Footer newsletter form collects your email address. Form selections record policy acknowledgement and, where selected, newsletter preferences.
We also process the information you provide in subsequent correspondence and, where relevant to an engagement, contact details and business communications supplied by your organisation. Please do not include unnecessary sensitive personal information in a general enquiry.
Enquiries and newsletter registrations are handled through our website administration and business communications systems. Newsletter records include your email address and when and where you opted in. Subscription notifications sent to our internal enquiry mailbox currently include the subscriber email list, creating additional internal copies of those records.
Visiting the website also involves browser and network information such as your IP address, browser, requested pages and resource requests. Website measurement services can collect online identifiers, page and interaction information when their scripts run. Our consent controls record preference choices. See the cookies section below for current limitations.
Providing an enquiry or signing up for news is voluntary. Required form fields are needed to handle that particular request; without them we may be unable to respond or register the subscription. Optional marketing consent is not a condition of receiving an enquiry response.
Why we use information and our lawful bases
- Responding to business enquiries and prospective-client correspondence: our legitimate interests in answering requested messages, understanding consultancy needs and maintaining proportionate business records. We consider necessity, your expectations and the effect on your rights. Where you personally request steps towards a contract with us, those requested pre-contractual steps provide the contractual basis instead.
- Delivering consultancy services: contract where you are the contracting individual; legitimate interests in delivering and managing the engagement where you are a contact acting for an organisation. Separate engagement information may explain additional processing.
- Newsletter and optional electronic marketing: consent from a specific opt-in. Reading or acknowledging a Privacy Policy is not, by itself, marketing consent. You can withdraw consent or object to direct marketing at any time.
- Website measurement: legitimate interests in improving our website through immediately aggregated statistical totals, with a free objection control, and consent for optional Google Analytics 4 cookie-linked journeys. The UK PECR statistical purposes exception applies to our first-party aggregate counters; we do not apply it to GA4 individual histories.
- Remembering consent choices and maintaining the website: legitimate interests in respecting preferences, providing the requested website and protecting its operation, limited to what is necessary. This does not provide permission to use non-exempt tracking without consent.
- Legal duties and data protection requests or complaints: legal obligation where a specific duty requires processing. Proportionate records needed to establish or defend genuine legal claims may be retained on the basis of legitimate interests.
Providers and other recipients
Information is available to the people who need it for the relevant purpose. The following recipient categories are relevant to our website and business correspondence:
- Website hosting and infrastructure: hosting the website and its records, delivering resources and supporting its operation.
- Business email and communications: receiving enquiries and subscriptions, responding to correspondence and maintaining justified business records.
- Website analytics and measurement: receiving browser, page and interaction information when measurement operates, subject to the consent limitations explained below.
- IT security and operational support: handling technical information and, where necessary for an authorised support task, the relevant website records.
- Professional advisers, relevant business contacts and public authorities: only where necessary for the engagement, a specific legal obligation or a genuine legal claim.
Newsletter registration and related administration use our website and business communications systems. External fonts, sharing resources and live portfolio previews involve separate browser requests to their operators; these operators may process information for their own purposes. A live preview is a separately hosted website, rather than an InForge enquiry form.
International processing and safeguards
Website hosting, communications, analytics and externally supplied resources can involve processing outside the UK, including in the European Economic Area and the United States. A UK server location does not establish where every backup, support activity or recipient operates.
Relevant published provider arrangements include UK-recognised adequacy protection for the EEA and the UK Extension to the EU–US Data Privacy Framework for covered transfers to participating certified US recipients. Hosting and business-service terms also provide contractual transfer provisions, including standard contractual clauses with the UK Addendum where applicable. These protections are specific to the recipient, service and transfer; we do not state that every provider is certified or that all information remains in the UK.
Contact info@inforge.uk to request details of the recipients and countries relevant to your information, and a copy or explanation of the applicable transfer safeguards. Public information about the UK international-transfer framework is available from the ICO.
How long we keep information
InForge generally retains personal information provided through website enquiries and prospective-client correspondence for up to three years following the last meaningful interaction, where retention remains necessary for a lawful business purpose. Information may be deleted earlier when no longer required. Different periods may apply where legal obligations or other justified purposes require them.
This is a manual review policy, not a statement that records are automatically deleted. Our documented process records the last meaningful interaction, provides for review at least annually and deletion or anonymisation when information is no longer needed. Exceptions for legal obligations or genuine disputes must be documented and reviewed.
Newsletter information is retained while you remain subscribed and it remains necessary. Following withdrawal or an objection, only information needed to respect the objection, demonstrate the relevant consent history or meet a justified legal purpose should be retained. Minimal suppression information may be needed to avoid contacting you again. An unsubscribe request does not justify retaining an active marketing list entry indefinitely.
Client engagement records, contracts, accounting and tax records have separate retention criteria based on the engagement, applicable legal duties and genuine claim requirements; the three-year enquiry period does not apply universally. Privacy request and complaint records are retained only as needed to handle the matter and demonstrate compliance. Website logs, backups and analytics reporting data have purpose-specific provider or account settings; no unverified fixed period is stated here. Browser cookie expiry is separate from server-side retention.
Your choices and rights
Email info@inforge.uk to request access, correction, erasure or restriction, or to object to processing. Portability applies in qualifying circumstances. Rights depend on the purpose and lawful basis; some information may need to be retained to meet a legal obligation. We may request proportionate information to verify your identity.
Objecting to direct marketing and withdrawing consent
You can object to direct marketing at any time, without giving a reason. Email info@inforge.uk to stop newsletters or other direct marketing. We handle these requests manually. You may also use an unsubscribe option where one is provided in a particular message.
You can withdraw consent without affecting the lawfulness of earlier processing. Marketing withdrawal or an objection does not prevent us from answering an enquiry you have requested. You can change cookie choices through the Consent Preferences control.
Cookies and external resources
We use Google Analytics 4 to understand consented website traffic, referral sources, page interactions, engagement and genuine enquiries, helping us improve the website and user experience. Optional Analytics requires your specific consent; it can be selected independently in Customise and withdrawn through Consent Preferences. Advertising storage, advertising user data and personalisation remain denied on staging, and Google Signals is suppressed by the staging tag.
Separate first-party counters combine website-improvement measurements immediately into anonymous daily totals, without visitor identifiers or individual histories. They operate under the UK statistical purposes exception. Our legitimate interest is understanding use and improving navigation and content with minimal data. Stop anonymous statistics in the consent controls or Cookies Policy provides a free, persistent objection. Hostinger processes these requests on our behalf; ordinary security and hosting logs are separate. Aggregate totals are retained for up to 400 days. GA4 event and user retention is currently 14 months with reset on new activity, and the existing daily BigQuery export has separate retention controls.
Google receives optional analytics data through its service infrastructure. The shared account’s data-sharing settings remain an account-level review item; no blanket claim is made that all downstream sharing is disabled. We do not reconstruct unconsented journeys or treat cookieless pings as automatically exempt. External fonts, sharing resources and independently hosted portfolio previews also involve separate browser requests.
The Dove Home Care portfolio preview is a screen recording hosted by InForge, rather than a connection to the Dove website. It does not load that website’s advertising or review-widget technologies into this page. Clicking the recording opens the independently operated website in a separate tab, where its own privacy information and cookie choices apply. Following a link is not consent to that website’s cookies. Other live portfolio previews remain separately hosted resources.
Read our Cookies Policy for the technologies, purposes, storage periods and how to accept, reject or change preferences. Browser privacy settings can restrict or clear storage, but do not replace valid consent.
Security
We use HTTPS and access controls to support secure handling of information. No internet service can provide an absolute security guarantee. Please avoid sending unnecessary confidential or sensitive information through a general website form.
Complaints
Send a data protection complaint to info@inforge.uk or our registered office. We will acknowledge receipt within 30 days, make appropriate enquiries and investigate without undue delay, keep you informed and tell you the outcome without undue delay. These complaint-handling commitments reflect the UK requirements in force from June 2026.
You can also complain to the Information Commissioner’s Office, the UK data protection regulator, including if you are dissatisfied with our response. Its telephone number is 0303 123 1113 and its postal address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Your right to complain to the ICO is not removed by our internal process.
Keeping this notice up to date
We review this notice when relevant practices, services or legal requirements change. The date above identifies publication and the latest review. Significant changes to the purposes or handling of your information will be explained as appropriate.