Privacy Policy

Information you provide to us. We collect personal information that you voluntarily provide when you contact us, or otherwise interact with the Site. This may include:

• Name;
• Company name;
• E-mail address;
• Company website (if provided);
• Content of your message.

Information collected automatically. When you visit the Site, we may automatically collect certain technical information, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data is used to maintain security, analyse performance, and improve the Site.

Cookies and tracking technologies. We may use cookies and similar technologies as described in Section 5 below.

We use the information we collect for the following purposes:

• to respond to enquiries and communicate with you;
• to operate, maintain, and improve the Site;
• to monitor and ensure the security of the Site and prevent fraud;
• to comply with legal obligations.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR) — processing necessary to take steps at your request before entering into a contract or to perform a contract with you.
• Legitimate interests (Art. 6(1)(f) GDPR) — processing necessary for our legitimate business interests, such as fraud prevention and improving our Site, provided these interests are not overridden by your rights.
• Consent (Art. 6(1)(a) GDPR) — where you have given explicit consent, for example to receive marketing communications or to place non-essential cookies. You may withdraw consent at any time by contacting us at contact@forgepoint-digital.com.
• Legal obligation (Art. 6(1)(c) GDPR) — where processing is required to comply with applicable law.

We do not sell your personal information to third parties. We may share your data in the following circumstances:

• Service providers. We share data with trusted third-party vendors who perform services on our behalf (e.g. hosting, form processing, email delivery). These parties are contractually bound to process data only as instructed by us.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Legal requirements. We may disclose your information where required by law, court order, or to protect the rights and safety of us or others.

The Site may use strictly necessary cookies or similar technologies required for its technical operation. We do not use advertising, analytics or tracking cookies, and no third-party tracking pixels are installed. If we introduce non-essential cookies in future, we will update this Policy and provide an appropriate consent mechanism before they are used.

We retain your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required by law. We retain personal data as follows:

• Customer support communications: 3 years from case closure
• Technical logs and fraud detection data: 3 months unless subject to investigation

When your personal data is no longer required, we will securely delete or anonymise it. Where deletion is not immediately possible (e.g. data held in backup systems), we will isolate the data from further processing until deletion becomes possible.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, and regular security reviews. No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take prompt steps to delete that data. If you believe we may have collected data from a child, please contact us at contact@forgepoint-digital.com.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access. The right to obtain a copy of the personal data we hold about you.
• Right to rectification. The right to have inaccurate or incomplete data corrected.
• Right to erasure. The right to request deletion of your personal data in certain circumstances.
• Right to restriction of processing. The right to ask us to pause processing of your data in certain circumstances.
• Right to data portability. The right to receive your personal data in a structured, machine-readable format.
• Right to object. The right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at contact@forgepoint-digital.com. We will respond within 30 calendar days. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information. You have the following rights under California law:

• Right to know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to delete. You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct. You may request correction of inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing. We do not sell personal information as defined under California law, nor do we share it for cross-context behavioural advertising.
• Right to limit use of sensitive personal information. We do not use or disclose sensitive personal information beyond purposes permitted by the CPRA.
• Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To submit a request, contact us at contact@forgepoint-digital.com. We will respond within 45 days of receiving a verifiable consumer request. Requests may be submitted on behalf of a California consumer by an authorised agent with written authorisation.

We are based in Hong Kong, and the Site and certain related systems may be hosted in the United States, or other countries outside the European Economic Area (“EEA”). Accordingly, your personal data may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your country of residence.

Where required by applicable data protection laws, we implement appropriate safeguards for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with appropriate protection levels
• Explicit consent where required

You may request information about specific safeguards by contacting contact@forgepoint-digital.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be indicated by the “Last updated” date at the top of this page. Where changes are material, we will notify you by email or by a prominent notice on the Site prior to the changes becoming effective. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: Forgepoint Digital Limited
Address: Unit 915, 9/F, Concordia Plaza, 1 Science Museum Road, Tsim Sha Tsui, Hong Kong
Email: contact@forgepoint-digital.com