1. Who we are
The data controller is ShoForge, a sole proprietorship in formation, based in Antwerp, Belgium.
- Email: shoforge@gmail.com
- Phone and WhatsApp: +32 465 61 37 97
2. What data we collect
We only collect what we need to answer your question or carry out an assignment:
- Calendly: when you book a call, Calendly shares your name, email address and chosen time slot with us.
- Online payments: when you pay online, Stripe processes your payment. We receive your name, email address, billing address, phone number, any VAT number you enter and the payment status, never your full card details.
- Chat with Forge: the messages you type in the chat on this site, used only to answer you. We don't store chat conversations.
- WhatsApp and email: whatever you share in your message.
- Technical data: limited server logs from our hosting partner (IP address, browser type, date and time), used only for the security and operation of the site. No tracking cookies.
3. Why we process this data
We don't send marketing emails and we don't use your data for advertising.
- To answer your question or follow up on a quote (performance of a contract, GDPR art. 6.1.b).
- To keep contact details within existing client relationships (legitimate interest, GDPR art. 6.1.f).
- To meet legal obligations such as accounting and tax, if and when you become a client (GDPR art. 6.1.c).
4. Who we share your data with
We work with these external processors, each with their own privacy policy:
- Calendly: handles your appointment booking.
- Cloudflare: hosts and protects the website.
- Stripe: processes online payments.
- Anthropic: generates the chat assistant's answers from the messages you type.
- Google (Gmail): for our email.
- WhatsApp (Meta): only when you choose to contact us on WhatsApp.
5. How long we keep your data
We never sell data and only share it with parties needed to deliver the service.
- Enquiries without follow-up: up to 12 months after the last contact.
- Ongoing client relationships: for the duration of the collaboration plus 7 years (legal retention period for accounting).
- Server logs: usually no more than 30 days.
6. Security
We store data in secure cloud environments. All communication with the website runs over HTTPS. Access to your data is limited to ShoForge.
7. Cookies and analytics
We only use essential cookies (see our cookie policy) and no analytics platform such as Google Analytics. The fonts on this site are self-hosted, so no data goes to Google when the page loads. If we add a privacy-friendly analytics tool later, we'll update this document and ask for your consent first.
8. Your rights
Under the GDPR you have the right to:
- access your data (art. 15)
- have your data corrected (art. 16)
- have your data deleted (art. 17)
- restrict processing (art. 18)
- take your data with you (art. 20)
- object to processing (art. 21)
9. Exercising your rights
Email shoforge@gmail.com to exercise any of these rights. We respond within 30 days.
10. Complaints
If you believe we don't process your data correctly, you can file a complaint with the Belgian Data Protection Authority: www.dataprotectionauthority.be, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.
11. Changes
We may update this privacy policy. The version date at the top shows the latest change. We inform clients by email about important changes.
12. Contact
Questions about this privacy policy? Email shoforge@gmail.com or message us on WhatsApp at +32 465 61 37 97.