Last Updated: March 29, 2026
Our Privacy Statement
Aurelian Forge is committed to protecting the privacy of your personal information. We have written this Privacy Policy to let you know how we use your personal data.
When we say “we”, “us”, or “our” in this Privacy Statement, we mean Aurelian Forge Limited or its subsidiaries or any of them as the context so requires.
This Privacy Policy describes how we collect, use, and process your personal data when you visit our website or use our contact form.
1. Data We Collect and Why
We collect information to provide a secure and functional experience. The data we collect includes:
- Contact Information: When you submit our contact form, we collect your Name and Email Address. We use this solely to respond to your inquiry.
- Technical Data (IP Address): We automatically collect your IP Address and browser user-agent string while you browse. This is used for security purposes, such as identifying malicious traffic and preventing bot attacks.
- Analytics Data: If you consent via our cookie banner, we collect anonymized data through Google Analytics to understand how visitors use our site.
2. Legal Basis for Processing (GDPR)
Under the GDPR, we process your data based on the following legal grounds:
- Legitimate Interest: We process your IP Address for security and bot protection (via Cloudflare). This is necessary to maintain the safety and integrity of our website.
- Consent: We process your Name and Email when you voluntarily submit them via our contact form. We also process Analytics cookies only if you have given explicit consent.
3. Third-Party Service Providers
We share certain data with trusted third parties to operate our site:
- Cloudflare: Processes your IP address to protect our site from DDoS attacks and bots.
- Google Analytics: Processes usage data (if consented) to help us improve our services.
- Email Service Provider: When you submit a form, your data is routed through our secure email server to reach us.
4. Data Retention
- Inquiry Data: We keep contact form submissions for as long as necessary to fulfil your request or for a maximum of 1 month unless a business relationship is established.
- Security Logs: IP addresses collected for bot protection are typically deleted or anonymized within 30 days.
5. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: You can request a copy of the data we hold about you.
- Rectification: You can ask us to correct inaccurate information.
- Erasure: You can request that we delete your personal data.
- Withdrawal of Consent: You can opt-out of analytics tracking at any time via our Cookie Settings.
6. International Data Transfers
Our service providers (Google and Cloudflare) are based in the United States. We ensure that these transfers are protected by standard contractual clauses or the EU-U.S. Data Privacy Framework to ensure your data remains protected.
7. Contact Us
For any questions regarding this policy or your data, please contact us at: info@auforge.co.uk.