Privacy Policy

Introduction

ForceCraft ("we", "us", or "our") is a UK-based Salesforce consulting business. We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, and safeguard your information when you visit forceraft.com or engage our services.

By using our website, you agree to the practices described in this policy.

Data Controller

ForceCraft is the data controller for personal data collected through this website. If you have any questions about how we handle your data, please contact us at [email protected].

What Data We Collect

We may collect the following types of personal data:

  • Contact information - name, email address, phone number, and company name when you submit a contact form or reach out to us directly.
  • Communication records - the content of emails, messages, or enquiries you send us.
  • Technical data - your IP address, browser type, and operating system may be logged by our hosting provider for security purposes.

We do not collect personal data through our analytics tool (see the Analytics section below).

How We Use Your Data

We use your personal data for the following purposes:

  • Responding to your enquiries and providing consulting services.
  • Communicating with you about projects, proposals, and service delivery.
  • Complying with legal obligations.
  • Improving our website and services.

Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

  • Legitimate interest - to respond to enquiries and provide our services.
  • Contractual necessity - to fulfil our obligations under a consulting engagement.
  • Consent - where you have provided explicit consent, such as subscribing to communications.
  • Legal obligation - to comply with applicable laws and regulations.

Analytics

This website uses Umami, a privacy-friendly analytics tool. Umami does not use cookies, does not collect personal data, and does not track individual visitors across sessions. All data collected by Umami is aggregated and anonymous. No personally identifiable information is gathered through our analytics.

This means you can browse our website without being tracked or profiled.

Cookies

We use only essential cookies required for the proper functioning of our website (Ghost CMS). We do not use advertising, marketing, or third-party tracking cookies. For more details, please see our Cookie Notice.

Data Sharing

We do not sell, rent, or trade your personal data. We may share your data with:

  • Hosting providers - who store and serve our website on our behalf.
  • Professional advisers - such as accountants or legal counsel, where necessary.
  • Law enforcement - if required by law or to protect our legal rights.

All third parties who process data on our behalf are required to handle it in accordance with applicable data protection laws.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions and project-related communications are typically retained for the duration of the business relationship and up to six years afterwards for legal and accounting purposes.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access - request a copy of the data we hold about you.
  • Right to rectification - request correction of inaccurate data.
  • Right to erasure - request deletion of your data where there is no compelling reason to continue processing.
  • Right to restrict processing - request that we limit how we use your data.
  • Right to data portability - request your data in a structured, commonly used format.
  • Right to object - object to processing based on legitimate interest.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

International Transfers

ForceCraft operates remotely and serves clients worldwide. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection laws.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]
Website: forceraft.com

Last updated: February 2026