TekForge is a freelance web and application development studio operated by David Thrower, based in Needham Market, Suffolk, UK.

For the purposes of UK data protection law, David Thrower (trading as TekForge) is the data controller responsible for your personal data.

Contact: info@tekforge.uk

We only collect personal data that you provide to us directly. This includes:

• Name and email address submitted via the contact form
• Project details and budget information included in your message
• Any other personal information you choose to include in your message

We do not use cookies beyond those strictly necessary for the website to function. We do not use analytics cookies, advertising cookies, or third-party tracking of any kind.

We use your personal data only for the purpose for which it was provided:

• To respond to your enquiry
• To provide you with information about our services that you have requested
• To fulfil a contract with you, where one exists

We will never sell, rent, or share your personal data with third parties for marketing purposes.

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Legitimate interests — responding to business enquiries you have initiated
• Contractual necessity — where processing is necessary to perform a contract with you
• Legal obligation — where we are required by law to retain certain records

We retain enquiry data (contact form submissions and related correspondence) for up to 3 years from the date of last contact, unless a contractual relationship is established, in which case we retain records for 7 years in accordance with HMRC requirements.

You may request deletion of your data at any time. See Section 8 for your rights.

Contact form submissions are processed via Resend (an email delivery service) and delivered to a secure email inbox. We do not store form data in a database unless you become a client.

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption on all web traffic
• Secure, access-controlled email systems
• No retention of payment card data (all payments handled by Stripe)

This website uses the following third-party services, each of which may process limited personal data as part of their operation:

• Resend — email delivery for contact form submissions (EU/UK data processing)
• Vercel — website hosting and CDN (data processed in accordance with Vercel's DPA)
• Cloudflare — DNS, CDN, and DDoS protection (processes IP addresses)

We do not use Google Analytics, Facebook Pixel, or any other behavioural tracking or advertising technology.

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data
• Right to restriction — to request that we limit how we use your data
• Right to object — to object to our processing of your data based on legitimate interests
• Right to data portability — to receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at info@tekforge.uk. We will respond within one calendar month.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We recommend checking this page periodically.