Legal
GDPR Information Notice
Last updated: 23 April 2026
About This Notice
This notice is provided in accordance with Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It sets out the information you are entitled to receive when TekForge collects and processes your personal data.
This notice should be read alongside our Privacy Policy.
Data Controller
| Controller | David Thrower, trading as TekForge |
| Address | Needham Market, Suffolk, UK |
| info@tekforge.uk | |
| ICO Registration | Pending registration — sole trader processing personal data |
Categories of Personal Data Processed
| Identity data | Your name |
| Contact data | Email address |
| Commercial data | Project enquiry details, budget range, project type |
| Technical data | IP address (processed by Cloudflare and Vercel infrastructure — not stored by TekForge) |
Purposes and Lawful Bases
We process your personal data for the following purposes and on the following lawful bases under Article 6 UK GDPR:
| Purpose | Lawful Basis |
| Responding to a contact form enquiry | Legitimate interests (Art. 6(1)(f)) — responding to a business enquiry you initiated |
| Providing services under a contract | Contractual necessity (Art. 6(1)(b)) — processing necessary to perform the contract |
| Compliance with legal obligations (e.g. tax records) | Legal obligation (Art. 6(1)(c)) — required by HMRC and UK law |
We do not process any special category data (Article 9 UK GDPR) and do not carry out automated decision-making or profiling.
Data Retention
| Enquiry correspondence (no contract formed) | 3 years from last contact |
| Client records (contract formed) | 7 years from end of contract (HMRC requirement) |
| Technical/infrastructure logs | As determined by Vercel and Cloudflare — not controlled by TekForge |
Recipients of Personal Data
Your data may be shared with the following recipients acting as data processors on our behalf:
| Resend (Resend Inc.) | Email delivery service — contact form submissions | Standard Contractual Clauses |
| Vercel (Vercel Inc.) | Website hosting and CDN | Standard Contractual Clauses + DPA |
| Cloudflare (Cloudflare Inc.) | DNS, CDN, DDoS protection | Standard Contractual Clauses + DPA |
No personal data is transferred to countries outside the UK/EEA without appropriate safeguards.
Your Rights Under UK GDPR
You have the following rights in relation to your personal data. To exercise any of them, contact us at info@tekforge.uk. We will respond within one calendar month (extendable by a further two months for complex requests).
Right of access (Art. 15)
Request a copy of personal data we hold about you, along with information about how it is used.
Right to rectification (Art. 16)
Request correction of inaccurate or incomplete personal data.
Right to erasure (Art. 17)
Request deletion of your personal data where there is no overriding legal reason to retain it.
Right to restriction (Art. 18)
Request that we restrict processing of your data in certain circumstances.
Right to data portability (Art. 20)
Receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Right to object (Art. 21)
Object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right not to be subject to automated decisions (Art. 22)
We do not carry out automated decision-making or profiling — this right is not applicable.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. TekForge currently relies on legitimate interests rather than consent as the primary lawful basis for enquiry processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time:
| Website | ico.org.uk |
| Telephone | 0303 123 1113 |
| Post | Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
We would welcome the opportunity to address any concern directly before a formal complaint is made. Please contact us first at info@tekforge.uk.
See also our full Privacy Policy for a plain-English explanation of how we handle your data.