Privacy & Cookie Notice
Effective date: 28 September 2026
1. Data controller
SecurePay Forge SIA
Registration number: 40203776054
“Ābeļu mājas”, Steķintava, Kubulu pag., Balvu nov., LV-4501, Latvia
Email: hello@securepayforge.dev
Phone: +44 7868 253740
This notice covers personal data processed by SecurePay Forge SIA for this website, enquiries and our services.
2. Data and purposes
- Enquiries and projects: name, email or other contact details, messages, project materials and correspondence, to respond to your request and perform a contract (GDPR Article 6(1)(b)).
- Orders and payments: order references, amounts, currency, payment status and necessary billing information, to fulfil contracts and meet accounting obligations (Articles 6(1)(b) and (c)). A partner through which you initiate an order may supply relevant order and contact information.
- Security and operations: IP address, request details, technical logs and delivery identifiers, for our legitimate interests in protecting the service, preventing abuse and diagnosing failures (Article 6(1)(f)).
- Consent-based activities: if we request optional consent, you may withdraw it at any time without affecting earlier lawful processing (Article 6(1)(a)).
Required enquiry details allow us to answer you. If necessary order details are missing, we may be unable to provide the service. Please do not submit unnecessary sensitive information.
3. Payments and recipients
Stripe processes payment details through its payment interface. Our application does not store full card numbers or security codes. Stripe may process data under its own legal obligations and Privacy Policy. Relevant data may also be processed by our hosting, email and infrastructure providers, authorised personnel and professional advisers. Where needed to fulfil a partner-originated order, we send its payment status and order reference to the originating service. We disclose information to authorities where legally required.
4. Browser storage and third-party resources
The site stores your language preference in localStorage under spf-editorial-lang. You can remove it through your browser’s site-data settings. Our site does not add advertising analytics. Fonts and images may load from Google Fonts and Unsplash; those providers receive connection information such as your IP address when resources load. Stripe scripts may also load on payment-related pages and supporting entry pages, and use browser storage and technical signals for payment operation and fraud prevention. See Stripe’s cookie information.
5. Retention
We retain enquiry and project data for the time needed to handle the request, deliver and support the service, resolve disputes and meet legal obligations. Accounting records are retained for applicable statutory periods. Technical data is subject to log rotation; contact-request deduplication records are kept for up to 30 days. Backups expire through scheduled rotation. A legal hold may require longer retention of relevant records.
6. International processing and security
Some providers may process data outside the EEA. Applicable transfers must use a lawful mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about safeguards relevant to your data. We use access controls and encrypted connections; no system can guarantee absolute security.
7. Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. Contact us at the address above. We may need reasonable identity verification and normally respond within one month, subject to lawful extensions. You may complain to Latvia’s Data State Inspectorate or another competent supervisory authority.
8. Updates
We update this notice when our processing changes. The date below identifies this version.