TekForge is a freelance web and application development studio operated by David Thrower, based in Needham Market, Suffolk, UK.

For the purposes of UK data protection law, David Thrower (trading as TekForge) is the data controller responsible for your personal data.

Contact: info@tekforge.uk

I only collect personal data that you provide to me directly. This includes:

• Name and email address submitted via the contact form
• Project details and budget information included in your message
• Any other personal information you choose to include in your message

I do not use cookies beyond those strictly necessary for the website to function. I do not use analytics cookies, advertising cookies, or third-party tracking of any kind.

I use your personal data only for the purpose for which it was provided:

• To respond to your enquiry
• To provide you with information about my services that you have requested
• To fulfil a contract with you, where one exists

I will never sell, rent, or share your personal data with third parties for marketing purposes.

Under UK GDPR, I rely on the following lawful bases to process your personal data:

• Legitimate interests — responding to business enquiries you have initiated
• Contractual necessity — where processing is necessary to perform a contract with you
• Legal obligation — where I am required by law to retain certain records

I retain enquiry data (contact form submissions and related correspondence) for up to 3 years from the date of last contact, unless a contractual relationship is established, in which case I retain records for 7 years in accordance with HMRC requirements.

You may request deletion of your data at any time. See Section 8 for your rights.

Contact form submissions are processed via Resend (an email delivery service) and delivered to a secure email inbox. I do not store form data in a database unless you become a client.

I use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption on all web traffic
• Secure, access-controlled email systems
• No retention of payment card data (all payments handled by Stripe)

This website uses the following third-party services, each of which may process limited personal data as part of their operation:

• Resend — email delivery for contact form submissions (EU/UK data processing)
• Vercel — website hosting and CDN (data processed in accordance with Vercel's DPA)
• Cloudflare — DNS, CDN, and DDoS protection (processes IP addresses)

I do not use Google Analytics, Facebook Pixel, or any other behavioural tracking or advertising technology.

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access — to request a copy of the personal data I hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data
• Right to restriction — to request that I limit how I use your data
• Right to object — to object to my processing of your data based on legitimate interests
• Right to data portability — to receive your data in a structured, machine-readable format

To exercise any of these rights, please contact me at info@tekforge.uk. I will respond within one calendar month.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. I recommend checking this page periodically.