Last updated: May 2026
ForgeFox ("we", "us", "our") is operated by ForgeFox Ltd, a company registered in England and Wales (company no. 17271363). Registered office: 124 City Road, London, EC1V 2NX. We are committed to protecting your personal data and complying with the UK GDPR and the Data Protection Act 2018.
This policy applies to:
Operators: Name, email address, business name, payment information (processed by Stripe — we never store card details), business address, and usage data relating to your ForgeFox account.
End customers (collected on behalf of operators): Name, email address, phone number, booking history, signed waiver documents — which may include special category / health data (for example, medical conditions or contraindications declared in a fitness or activity waiver, where the operator collects it) — and any notes added by the operator. This data belongs to the operator — ForgeFox processes it as a data processor on their behalf. The operator, as data controller, is responsible for the lawful basis and for obtaining any consent required, including explicit consent for health data under Article 9 UK GDPR, under a Data Processing Agreement with us.
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except where necessary to provide the service (Stripe for payments, Supabase for database hosting, Vercel for application hosting, Brevo for email delivery, Twilio for SMS/WhatsApp messaging, Cloudflare Stream for video hosting, PostHog for product analytics, and Upstash for rate-limiting).
Data is stored on Supabase infrastructure hosted in the European Union. Each operator's data is isolated using row-level security — no operator can access another's data. Data is encrypted at rest and in transit.
Operator data is retained for the duration of your subscription and for up to 12 months after cancellation for legal and accounting purposes, after which it is permanently deleted.
If you cancel your subscription, you can export all your customer data at any time before deletion. We will also send you an automatic data export on cancellation.
Under UK GDPR you have the right to:
To exercise any of these rights, email us at info@forgefox.uk. We will respond within 30 days.
ForgeFox uses essential cookies only — to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded on operator booking pages.
For any privacy-related questions:
Email: info@forgefox.uk
ForgeFox Ltd, 124 City Road, London, EC1V 2NX, United Kingdom
We may update this policy from time to time. We will notify active subscribers of material changes by email. The date at the top of this page shows when it was last updated.