Privacy Policy — Forge and Form (Pty) Ltd

Effective date: 4 October 2025

1. Introduction

   • This Privacy Policy explains how Forge and Form (Pty) Ltd ("we", "us", "our") collects, uses, stores and discloses personal information when you visit or make a purchase from our website, use our services, or interact with us.

   • Company: Forge and Form (Pty) Ltd. Company registration: [insert registration number]. Address: [insert physical address]. Contact: [insert email].

2. Scope & Legal Basis

   • This policy applies to personal data collected online and offline in connection with our business.

   • We process personal information where necessary to perform a contract with you, to comply with legal obligations, to pursue legitimate interests (such as fraud prevention, analytics, product improvement), or with your consent where required.

3. Information we collect

   • Contact and identity: name, billing/shipping address, email, phone number.

   • Transaction data: order details, payment method (we do not store full card numbers), invoices.

   • Technical data: IP address, device/browser type, cookies and similar technologies, pages visited and referring URL.

   • Marketing preferences and communications you send us (e.g., support messages).

   • Optional: product reviews, photos you upload, and any other information you choose to provide.

4. How we use personal information

   • To fulfil orders, process payments, arrange shipping and provide customer service.

   • To communicate about orders, account, promotions (if you opt-in), and security updates.

   • To detect and prevent fraud and illegal activity.

   • To improve our site and services through analytics.

   • To comply with legal and tax obligations.

5. Sharing & disclosure

   • Service providers: payment processors, couriers, hosting providers, and analytics vendors — only to the extent needed to perform their service.

   • Legal requirements: where required by law, court order, or a competent authority.

   • Business transfers: in the event of sale, merger, or reorganization, personal data may be transferred subject to confidentiality obligations.

6. Cookies & tracking

   • We use cookies and similar technologies for site functionality, analytics, and optionally marketing.

   • You can manage cookie preferences via your browser settings; blocking cookies may reduce site functionality.

7. Data retention

   • We retain personal data as long as necessary for the purposes above, to comply with legal obligations (tax, accounting), or to resolve disputes. Typical retention for order records: 5–7 years (adjust according to local law).

8. Your rights

   • Depending on applicable law, you may have the right to access, correct, delete, restrict processing of, or port your personal data, and to object to processing. To exercise rights, contact [insert privacy email].

   • We will respond to requests as required by law and may ask for identity verification.

9. Security

   • We use appropriate administrative, technical and physical safeguards to protect personal data. No method of transmission or storage is 100% secure — absolute security cannot be guaranteed.

10. International transfers

    • Personal data may be transferred to third parties in other countries. When we do, we take steps to ensure appropriate safeguards are in place.

11. Children

    • Our services are not intended for children under 13 (or higher age as required by local law). We do not knowingly collect personal data from children.

12. Changes

    • We may update this policy. The "Effective date" above shows the last revision.

13. Contact

    • Kindly make contact via the online form submission