Privacy Policy.
This Privacy Policy has three parts:
-
For Clients (students and enrollees)
-
For Visitors (website users)
-
Other Applicable Information
Part 1: For Clients
With the introduction of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Forge is required to explain how we collect, use, and protect your personal data.
Your Rights
You have the following rights under data protection law:
-
The right to access personal data we hold on you
-
The right to correct and update your data
-
The right to have your data erased
-
The right to object to processing
-
The right to data portability
-
The right to withdraw consent at any time
-
The right to lodge a complaint with the Information Commissioner’s Office (ICO):
-
Phone: 0303 123 1113
-
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
-
Data We Collect
-
Basic personal data: name, contact details, email address, job title.
-
Sensitive personal data (only with consent, where relevant to course delivery): e.g. race or ethnic origin, religious beliefs, health information.
We only collect data necessary to deliver our services and fulfil legal or contractual obligations. Without this data, we may be unable to provide the requested services.
Use of Data
Personal data is processed by Forge staff only. Third parties may only access data where strictly necessary (e.g. IT hosting, payment processing). The legal bases for processing are:
-
Contractual necessity (to provide you with the course)
-
Legal obligation
-
Legitimate interest (e.g. sharing relevant course updates)
-
Consent (where required, e.g. use of recordings for promotional or subscription purposes)
Recording and Media Use
Forge records certain course activities, including Zoom meetings, seminars, and rehearsal reviews. These recordings may capture your image, voice, and contributions, which are classed as personal data under data protection law.
With your explicit consent obtained at enrolment, Forge may use excerpts from these recordings for:
-
Educational purposes: sharing within your cohort, or making recordings available to Forge members through subscription or other paywalled services.
-
Promotional purposes: including use on social media, newsletters, and Forge’s website.
You may withdraw consent at any time by contacting [email protected]. Withdrawal will not affect the lawfulness of prior use.
Data Retention
We will retain your personal data for up to 6 years unless legally required to hold it longer (e.g., up to 20 years in the US or Australia). If you have consented to marketing communications, we will retain your details until you opt out.
Data Sharing
We only share data where necessary:
-
With trusted suppliers (e.g. IT hosting, payment processing, newsletters)
-
With regulators or legal authorities if required
-
With overseas partners where necessary, subject to safeguards
We never sell or distribute your data for commercial marketing.
International Transfers
Forge uses cloud-based services that may process or store personal data outside the UK/EU. Where this occurs, appropriate safeguards (such as adequacy decisions or Standard Contractual Clauses) are in place to ensure your rights are protected.
Part 2: For Website Visitors
We respect your privacy and are committed to handling your data responsibly.
Website Data Collection
We collect personal data voluntarily provided via our website, such as:
-
Name
-
Email address
-
Contact details
-
Information submitted via forms or attachments
We do not collect excessive or irrelevant data. If you believe we have, please contact us.
Website Data Use
We use this data internally to respond to enquiries, manage enrolments, or provide information. It is not shared for unrelated purposes unless required by law or stated in this policy.
We do not collect sensitive information from visitors unless legally required (e.g. recruitment).
Part 3: Other Applicable Information
We may share personal data with:
-
Government or regulatory bodies (UK, EU, US, Australia, as required)
-
Trusted service providers supporting our operations
Forge does not sell or compile user data for third-party marketing.