Privacy Policy

This policy explains what personal data Forge Capmoor collects, why, who sees it, how long we keep it and what rights you have under the UK GDPR.

1. Who we are

The data controller is [LEGAL ENTITY NAME], trading as Forge Capmoor, of 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. You can contact us about your data at [email protected].

2. Definitions

Personal data is information that identifies you or can be used to identify you, such as your name or email address. Usage data is information collected automatically when you use the website, such as pages visited and device type. Cookies are small files stored on your device. A controller decides why and how personal data is used, and a processor handles it on the controller's instructions.

3. Information we collect and how we use it

We collect only what we need. The categories are:

CategoryExamplesPurpose
Contact detailsFirst name, surname, telephone number, email addressTo create your account, call you back and respond to enquiries
Enquiry contentWhat you write in forms and messagesTo answer your request and improve support
Verification dataIdentity and address documents, selfie imagesTo meet KYC and anti-money-laundering rules
Account and payment dataDeposits, withdrawals, strategies and settingsTo provide the service and keep records
Usage and device dataIP address, browser, pages viewedSecurity, fraud prevention and analytics

4. Legal bases (UK GDPR)

We rely on contract when we need your data to provide the service you have asked for, on legal obligation for identity checks and record keeping, and on legitimate interests for securing the platform, preventing fraud and improving our services, after balancing those interests against your rights. We rely on consent only for marketing messages and for non-essential cookies, and you can withdraw it at any time.

5. Data retention

Account and transaction records are kept for as long as your account is open and for five years afterwards, in line with anti-money-laundering law. Identity documents follow the same period. Enquiries that do not lead to an account are kept for up to 12 months. Marketing preferences are kept until you withdraw consent, and analytics data is kept for up to 26 months. When a period ends we delete or anonymise the data.

6. Data transfers

Some of our suppliers are based outside the UK. When we transfer personal data abroad we make sure it is protected, for example by using countries the UK government recognises as adequate or by using the UK International Data Transfer Agreement or Addendum together with additional safeguards.

7. Who we share data with

We share personal data with: the licensed entity that provides the trading service; identity verification and payment providers; IT, hosting and communications suppliers who act as processors; other companies in our group; professional advisers; and regulators, law enforcement and other authorities when we are legally required to or permitted to. We do not sell your personal data.

8. Disclosure

We will disclose personal data where the law requires, for example in response to a court order or a request from the FCA, HMRC or the police, and where necessary to protect our rights, prevent fraud or protect the safety of a person. We tell you where we lawfully can.

9. Security

We protect personal data with encryption, access controls, monitoring and staff training, as described on our security page. No method of transmission or storage is completely secure, so we cannot promise absolute security, but we act quickly if something goes wrong and report breaches where the law requires.

10. Your rights

Under UK data protection law you have the right to access your data, to have it corrected, to have it erased in certain cases, to restrict or object to how we use it, to receive it in a portable format and to withdraw consent. To use these rights email us at [email protected]. We reply within one month and may ask you to prove your identity first. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

11. Service providers

We use service providers for hosting, customer relationship management, telephony, email, identity verification and payment processing. They may only use your data to deliver their service to us and must protect it under a written contract.

12. Analytics

We may use analytics tools to understand how visitors use the site, which pages are helpful and where they leave. Where the tool sets non-essential cookies we ask for your consent first. Analytics reports are aggregated and are not used to make decisions about you individually.

13. Advertising and retargeting

If you consent, advertising partners may set cookies that show you our advertising elsewhere online and measure its effect. You can change your choice at any time in your browser or cookie settings, and you can opt out of interest-based advertising through your browser and industry tools.

14. Cookies

Strictly necessary cookies keep the website working, for example remembering that you are signed in. Analytics and advertising cookies are optional. You can control cookies in your browser settings, but blocking necessary ones may stop parts of the website from working.

15. Links to other websites

Our website contains links to other sites. We are not responsible for their privacy practices, and we encourage you to read their policies before you give them any personal data.

16. Children's privacy

Our services are for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

17. Changes to this policy

We may update this policy from time to time. The latest version is always on this page with its effective date, and we will tell you about significant changes directly.

18. Contact us

For any privacy question or request write to [email protected] or to 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.