Privacy
How this website handles personal data.
This notice covers personal data handled through m4forge.com. It does not authorise sensitive project information to be sent through the public site. Last reviewed 28 August 2026.
01 / Controller and contact
M4Forge is the controller for the website processing described here.
M4Forge determines why and how ordinary personal data submitted through this website is used. To make a privacy request, use the contact form and begin the message “Privacy request”. Do not include sensitive project information in that request.
02 / Information collected
Enquiry data, technical request data and one privacy preference.
- The enquiry form collects name, organisation, work email, optional telephone number and a high-level message.
- The hosting and security services may process IP address, browser and device information, requested URL, date and time, and security events needed to deliver and protect the site.
- If you save the privacy setting, the site stores the first-party cookie described on the Cookies page.
The form information comes directly from you. Technical request data is produced when your browser connects to the site.
03 / Purpose and lawful basis
Respond to enquiries, protect the service and remember the privacy setting.
M4Forge uses ordinary business contact information to assess and answer a relevant enquiry. The lawful basis is legitimate interests in managing business enquiries and, where an individual asks M4Forge to consider work or a contract, taking steps at that person's request before a contract.
Technical request data is processed under legitimate interests in delivering, securing and diagnosing the website. The privacy preference is used to remember the visitor's choice and maintain a clear privacy control.
The website does not use this information for behavioural advertising, marketing profiles or solely automated decisions with legal or similarly significant effects.
04 / Recipients and transfers
Only the people and providers needed to operate the site and answer an enquiry.
Information may be available to authorised M4Forge personnel and to providers supporting website hosting, security, caching and the business mailbox. The public site uses self-hosted fonts and does not load analytics, advertising or social-media trackers.
A service provider may use infrastructure or support outside the UK. Where a restricted transfer applies, the provider arrangement must include an applicable UK transfer safeguard. Details relevant to a privacy request can be requested through the contact route above.
05 / Retention
Kept for the purpose, then reviewed for deletion.
Enquiry information is kept while M4Forge assesses and responds to the enquiry and, if a business relationship follows, for the resulting commercial, contractual and legal record. Enquiries that do not proceed are reviewed and deleted when they are no longer needed for follow-up, dispute handling or a legal obligation.
Security logs follow the hosting or security provider's configured protection cycle and are kept longer only where an incident or legal requirement requires it. The first-party privacy preference expires after six months.
06 / Your rights
Ask for access, correction, deletion, restriction or portability where applicable.
You may also object to processing based on legitimate interests. The right to object is available at any time and will be considered against the reason for the processing. Where processing relies on consent, consent can be withdrawn as easily as it was given.
Use the contact form and begin the message “Privacy request”. If a concern is not resolved, you can complain to the Information Commissioner's Office.
07 / Security boundary
Do not disclose controlled information through the public site.
Do not submit classified, OFFICIAL-SENSITIVE, export-controlled or other security-sensitive information. Omit names, precise locations, asset identifiers, vulnerabilities, drawings, security arrangements and personnel records. A different handling route can be agreed if a further conversation is appropriate.
08 / Changes
This notice is reviewed when the website processing changes.
If M4Forge adds a new form, analytics service, embedded third-party feature or other processing purpose, this notice and the cookie information must be updated before the change is used. Where consent is required, a fresh choice will be requested.