Privacy Policy - Forgecircuit

1. Introduction

At ForgeCircuit, accessible via forgecircuit.com, we are firmly committed to protecting the privacy and personal data of all individuals who interact with our website, products, and services. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws. We consider privacy a fundamental right and are dedicated to maintaining the highest standards of data protection and transparency.

2. Scope and Data Controller

This Privacy Policy applies to all personal data processed through forgecircuit.com and any related services, features, or content provided by ForgeCircuit (“we”, “us”, “our”). For the purposes of the GDPR and other relevant data protection legislation, ForgeCircuit is the data controller in relation to your personal data. If you have any questions or concerns about this policy or the handling of your data, you may contact us at [email protected].

3. Categories of Personal Data We Process

We may collect, store, and process the following types of personal data:

– Usage Data: This includes information such as IP addresses, browser type and version, browsing behavior, pages viewed, date and time of access, referring URLs, session duration, error logs, and other diagnostic data gathered automatically when you visit forgecircuit.com.

– Account Data: When you create an account or register on our website, we collect personal identifiers such as your full name, postal address, email address, and telephone number.

– Profile Data: We may collect data relating to your preferences, purchase history, product usage patterns, and behavioral insights associated with your interactions on forgecircuit.com.

– Communication Data: This includes information provided when you contact us for support or information, including the contents of your messages, support queries, and records of prior contact.

– Technical Data: Information related to your device, including hardware models, operating systems, browser settings, screen resolution, device identifiers, and other similar data necessary for website optimization and compatibility.

– Transaction Data: We collect payment and delivery information including billing address, partial payment card information (handled via secure third-party processors), transaction history, and order fulfillment records.

– Preference Data: Your marketing preferences, consent flags, newsletter subscriptions, and explicitly indicated product interests.

4. Legal Bases for Processing

We rely on the following lawful bases to collect and process your personal data as required under the GDPR:

– Contractual Necessity: Where data is necessary for the performance of a contract with you (e.g., account creation, purchases).
– Consent: When you provide informed and unambiguous consent, particularly for marketing and non-essential cookies.
– Legitimate Interest: For internal analytics, security operations, improvement of services, and maintaining user experience, provided such interests are not overridden by your rights.
– Legal Obligation: Where processing is required to comply with our legal or regulatory obligations.

5. Your Rights

In accordance with data protection laws, you are entitled to exercise the following rights:

– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You can ask us to correct or update inaccurate or incomplete personal data.
– Right to Erasure: You may request deletion of your personal data when it is no longer necessary or if processing is based solely on consent.
– Right to Restrict Processing: You may request the limitation of processing under specific circumstances.
– Right to Data Portability: You may request transmission of your personal data to another controller in a structured, typically machine-readable format.
To exercise any of the above rights, please contact us at [email protected]. We will respond to all legitimate requests in accordance with applicable legal timeframes.

6. Security Measures

We implement appropriate technical and organizational safeguards in order to preserve the confidentiality, integrity, and availability of your personal data. These measures include:

– Data encryption (both in transit and at rest)
– Access controls with strict role-based permissions
– Regular system backups and disaster recovery protocols
– Mandatory privacy and security training for all personnel
– Ongoing vulnerability monitoring and patching

Although we strive to implement the highest standards of security, no method of data transmission or storage is 100% secure. Users are advised to take personal precautions when sharing sensitive information online.

7. International Data Transfers

We may store or process your personal data on servers located outside your country of residence, including jurisdictions that may not offer the same level of data protection. When transferring data internationally, we employ appropriate safeguards, such as:

– EU Standard Contractual Clauses approved by the European Commission
– Compliance with the UK GDPR and Swiss data protection frameworks
– Binding Corporate Rules or Privacy Shield certifications (where applicable)

8. Data Retention

We retain personal data only for as long as is necessary to fulfill the purposes described in this policy or to comply with legal, regulatory, or contractual requirements. Specific retention periods include:

– Account and Transaction Data: Retained for 7 years for tax and accounting compliance
– Communication and Support Data: Retained for 2 years from the date of last interaction
– Preference and Consent Data: Retained until consent is withdrawn or updated
– Usage and Technical Data: Retained for up to 26 months for analytics and service improvement
When retention is no longer necessary, your data will be securely deleted or anonymized.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance user experience, analyze traffic, and deliver personalized content. The categories of cookies used on forgecircuit.com include:

– Essential Cookies: Necessary for proper website functionality, session management, and authentication
– Functional Cookies: Enable personalization and remember user preferences
– Analytics Cookies: Help us understand how visitors engage with the site, allowing for improvements
– Performance Cookies: Monitor loading speed and responsiveness to optimize site performance

These cookies may be set by us or by third-party providers whose services we utilize.

10. Cookie Management and Legal Compliance

When you first visit forgecircuit.com, a cookie banner will inform you of the use of cookies and provide the option to manage your preferences. In compliance with GDPR and CCPA, we do not activate non-essential cookies without your explicit consent.

You may modify cookie preferences at any time via our Cookie Settings interface or through your browser settings. Users have the right to opt out of the sale or sharing of their personal data under the CCPA.

11. Children’s Data Protection

Our services are not directed to, and we do not knowingly collect personal data from, children under the age of 13. If we become aware that we have collected data from a child under this age, we will delete such information without delay. Parents or guardians who believe their child has provided personal data may contact us at [email protected] to request removal.

12. Policy Updates

We may update or amend this Privacy Policy periodically to reflect changes in our practices, legal obligations, or service offerings. Any significant changes will be communicated through notice on forgecircuit.com and/or by direct communication if appropriate. Continued use of our services following such updates constitutes acknowledgment and consent.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data rights, you may contact us at:

Email: [email protected]

We are committed to safeguarding your personal data and complying with applicable data protection laws and regulations. If you have any privacy-related concerns, we encourage you to reach out, and we will endeavor to address your inquiry promptly and transparently.