Apply

Privacy Policy.

Forge Privacy Policy

Last updated: [October 23rd 2025]

This Privacy Policy has three parts:

  1. For Clients (students and enrollees)

  2. For Visitors (website users)

  3. Other Applicable Information


Data Controller

Forge Conducting (“Forge”, “we”, “our”, “us”) is the data controller for personal data collected through our programmes, events, and website.

Contact:
[email protected]

Forge complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Your Rights

You have the following rights under data-protection law:

  • The right to access personal data we hold on you

  • The right to correct and update your data

  • The right to have your data erased

  • The right to object to processing

  • The right to data portability

  • The right to withdraw consent at any time (where processing is based on consent)

  • The right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO contact details:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113 Website: www.ico.org.uk


Part 1: For Clients

Data We Collect

  • Basic personal data: name, contact details, email address, job title.

  • Sensitive personal data (only with consent, where relevant to course delivery): e.g. race or ethnic origin, religious beliefs, health information.

  • Course-related information: enrolment details, participation, payments, and contributions during training sessions.

We only collect data necessary to deliver our services and fulfil legal or contractual obligations. Without this data, we may be unable to provide the requested services.


Use of Data

Personal data is processed by Forge staff only. Third parties may only access data where strictly necessary (e.g. IT hosting, payment processing).

The lawful bases for processing are:

Purpose Lawful Basis
To provide educational services and manage enrolments Contractual necessity (Art 6(1)(b))
To meet legal or regulatory obligations Legal obligation (Art 6(1)(c))
To share relevant course information or updates Legitimate interest (Art 6(1)(f))
To send marketing communications Consent (Art 6(1)(a))
To record course sessions for educational delivery Contractual necessity (Art 6(1)(b))
To distribute excerpts of recordings for educational or promotional purposes (including via subscriber-only or paywalled platforms) Explicit consent (Art 6(1)(a))

Recording and Media Use

Forge records certain course activities, including online sessions (e.g. Zoom meetings), seminars, and rehearsal reviews.
These recordings form an essential part of the Forge learning experience and may capture your image, voice, and contributions.

Educational Recordings

Recordings are created for educational and administrative purposes — for example, to enable participant review, tutor feedback, and programme quality assurance.
The lawful basis for this processing is contractual necessity (UK GDPR Article 6(1)(b)), as recording is integral to delivering Forge’s educational services.

Subscriber or Paywalled Educational Distribution

From time to time, Forge may wish to make short excerpts of educational recordings available through subscriber-only, paywalled, or restricted-access services designed to extend learning opportunities to a wider professional audience.
This activity may include the use of participants’ images, voices, or contributions in an educational context.
Distribution through such channels is based on your explicit consent (UK GDPR Article 6(1)(a)).

Promotional Use

Forge may also use short excerpts of recordings for promotional purposes, including but not limited to Forge’s website, newsletters, or social media.
Promotional use likewise relies on explicit consent (UK GDPR Article 6(1)(a)).

You can choose whether to give this consent at enrolment and may withdraw it at any time by contacting [email protected].
Withdrawal does not affect the lawfulness of any use made prior to withdrawal.

All recordings will be used only in contexts consistent with Forge’s mission to support conductor training and professional development.
Forge will never sell or license recordings to unrelated third parties.
All recordings are handled and stored securely in accordance with this Privacy Policy.


Data Retention

We will retain your personal data for up to six years unless legally required to hold it longer (for example, up to 20 years in jurisdictions such as the US or Australia).
If you have consented to marketing communications, we will retain your details until you opt out.


Data Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access.
Access is limited to authorised Forge personnel and trusted suppliers who are bound by confidentiality and data-processing agreements.


Data Sharing

We only share data where necessary:

  • With trusted suppliers (e.g. IT hosting, payment processing, newsletters)

  • With regulators or legal authorities if required

  • With overseas partners where necessary, subject to safeguards

We never sell or distribute your data for commercial marketing.


International Transfers

Forge uses cloud-based services that may process or store personal data outside the UK or EU.
Where this occurs, appropriate safeguards (such as adequacy decisions, the UK International Data Transfer Addendum, or Standard Contractual Clauses) are in place to protect your rights.


Part 2: For Website Visitors

Website Data Collection

We collect personal data voluntarily provided via our website, such as:

  • Name

  • Email address

  • Contact details

  • Information submitted via forms or attachments

Cookies and analytics tools may also be used to understand website traffic and improve services.
You can adjust your browser settings to refuse cookies.

We do not collect excessive or irrelevant data.
If you believe we have, please contact us.


Website Data Use

We use this data internally to respond to enquiries, manage enrolments, or provide requested information.
It is not shared for unrelated purposes unless required by law or stated in this policy.
We do not collect sensitive information from visitors unless legally required (e.g. for recruitment).


Part 3: Other Applicable Information

Data Sharing and International Transfers

We may share personal data with:

  • Government or regulatory bodies (UK, EU, US, Australia, as required)

  • Trusted service providers supporting our operations

Any transfer of data outside the UK or EU is protected by appropriate safeguards (adequacy decisions, Standard Contractual Clauses, or the UK International Addendum).

Forge does not sell or compile user data for third-party marketing.


Policy Updates

We may update this policy from time to time. The latest version will always be published on our website, with the date of the most recent revision shown above.