Privacy Policy

This policy explains what personal data Forge IT collects through this website, why, and what you can do about it. It applies to visitors of this website and to anyone who contacts us through it.

Who we are

Forge IT is a software company based in Portugal. For the purposes of the EU General Data Protection Regulation (GDPR), Forge IT is the data controller for the personal data collected through this website. You can reach us at hello@forgeit.pt.

What we collect

When you contact us through the contact form, we collect the details you provide: your name, email address, company, an optional budget indication and your message. Like most websites, our hosting provider also processes standard technical logs — such as IP address and browser information — to keep the site secure and running.

Why we use it

We use your contact details to respond to your enquiry and, if the conversation continues, to prepare a proposal or take steps towards a contract. The legal basis is the performance of pre-contractual steps at your request and our legitimate interest in running and promoting our business (Article 6(1)(b) and (f) GDPR). Technical logs are processed under our legitimate interest in keeping the website secure and available.

How long we keep it

Enquiry details are kept for up to 24 months after our last exchange, unless they lead to a business relationship — in that case we keep what is needed for the contract and for the retention periods required by Portuguese law.

Who we share it with

We do not sell your data and we do not share it for advertising. Your enquiry is processed by the providers that run this website and deliver our email — hosting and email providers acting as data processors under contracts that protect your data. Some of these providers may process data outside the EU; where they do, we rely on adequacy decisions or standard contractual clauses.

Your rights

You have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time. To exercise any of these rights, email hello@forgeit.pt. You also have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados).

Aggregate website analytics

We use Vercel Web Analytics to understand aggregate visits to public pages. It records the page URL without query strings or fragments, referrer, timestamp, general location, browser, operating system and device type. We configure it not to send names, contact-form values, user profiles or custom events. Vercel describes this data as anonymous and aggregate, without association to an individual or IP address, and does not use third-party cookies; its temporary visitor-session hash is discarded after 24 hours. Contact us to learn more about this processing.

Optional analytics with your consent

If you accept the analytics banner, we also use PostHog, hosted in the European Union, to understand when a contact form is submitted, from which page and in which language. We record the page path without query strings or fragments, the language of the page and the identifier of the form — never your name, your message or any other value you typed. This uses no cookies and no session replay, and there is no advertising or cross-site tracking. Nothing is loaded and nothing is sent until you accept; if your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal. You can withdraw your consent at any time through the "Analytics preferences" link in the footer.

Cookies

This website only uses the cookies strictly necessary to operate it. We do not use advertising or cross-site tracking cookies.

Changes to this policy

If we change how we handle personal data, we will update this page. The version published here is always the current one.