Forged 40 Digital
This policy explains what personal information Forged 40 Digital collects, how we use it, and your rights — including how we handle the imagery our drone captures during a survey. We handle your data lawfully and transparently under UK GDPR and the Data Protection Act 2018.
Forged 40 Digital ("F4D", "we", "us") is the data controller for the personal information described in this policy. You can contact us about anything in it, or to exercise your rights, at Dave@forged40.com.
We collect only what we need to quote for, deliver and support our services:
A drone survey is focused on the roof and building we have been asked to inspect. However, aerial imagery can incidentally capture neighbouring properties, gardens, vehicles or people. Where that imagery shows identifiable individuals or private property, it can be personal data, and we take that seriously. Because aerial capture can incidentally record third parties, we assess the privacy impact of each flight before we fly and keep such imagery to the minimum the job requires.
To respect everyone's privacy, we:
If you believe our imagery has captured you or your property and you have concerns, contact us at Dave@forged40.com and we will deal with it promptly.
We use your information on these lawful bases:
| What we do | Lawful basis |
|---|---|
| Quote for and carry out your survey, deliver reports and tours, and take payment | Performance of our contract with you |
| Answer enquiries and provide customer support | Contract, or our legitimate interest in responding to you |
| Keep business, accounting and tax records | Legal obligation |
| Capture imagery of the building and run the survey, including unavoidable incidental capture | Legitimate interests — delivering a lawfully commissioned survey, balanced against others' privacy |
| Send you occasional marketing about our services | Your consent, or our legitimate interest where you are an existing customer — you can opt out any time |
| Use anonymised example imagery in our marketing | Legitimate interests — you can ask us not to use imagery of your property |
We do not sell your data. We share it only where needed to run the business, with service providers who process data on our behalf under appropriate agreements. These may include our website host, virtual-tour hosting platform, email provider, payment and accounting providers, and — where you ask us to — your own surveyor, contractor or agent. We may also disclose information where the law requires it.
We keep enquiry data only as long as needed to respond and follow up. We keep job records, reports and invoices for as long as required for tax and legal purposes (generally six years). For Roof Watch and other recurring plans, we keep your survey archive for the life of the plan, because the year-on-year comparison is the point of the service. For one-off surveys we keep the imagery for up to 12 months after the report is delivered — long enough to answer any query or support a related claim — then delete or anonymise it, unless you have asked us to keep it or we need it for an active dispute.
Some of our service providers may store data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) so your data has equivalent protection.
Under UK data protection law you have the right to: access the personal data we hold about you; have it corrected if it is wrong; have it erased; restrict or object to how we use it; and ask for it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email Dave@forged40.com. We will respond within one month.
Our website is a simple, static site. It does not set advertising or tracking cookies and does not profile visitors. It does load web fonts from Google Fonts, which means your browser contacts Google's servers and Google may log your IP address in order to serve them; we use no other third-party tracking. When you send an enquiry through our booking form, it is delivered to us by a third-party form service (FormSubmit), which passes your message and any photos you attach straight to our email and does not use them for any other purpose. FormSubmit is a US-based service, so that enquiry is processed outside the UK; the transfer relies on the safeguards described in section 7. If we add analytics or any non-essential cookies in future, we will update this policy and ask for your consent where required.
We take reasonable technical and organisational steps to keep your information secure, including secure storage of imagery and access controls. No system is completely secure, but we work to protect your data and to deal quickly with any issue.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.
We may update this policy from time to time; the current version is always published here with the date at the top. Any questions, or to exercise your rights, email Dave@forged40.com.