Privacy Policy

Last updated: 25 May 2026

1. Who We Are

Foro Tech Ltd (“Foro”, “we”, “us”, or “our”) is the data controller responsible for your personal data. We are a private limited company registered in England and Wales with our registered address at 55 Rectory Grove, Leigh-on-Sea, Essex, SS9 2HA, United Kingdom.

This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website at https://www.foro.dev or interact with us in connection with our professional services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about how we handle your personal data, please contact us via our contact page.

2. What Personal Data We Collect

Enquiry and Contact Data

When you submit an enquiry through our Website, we collect the information you provide, which typically includes:

your name;
your email address;
your telephone number (if provided);
your company or organisation name (if provided); and
the content of your message.

We collect this data because you choose to provide it to us directly.

Technical and Usage Data

When you visit our Website, our hosting infrastructure automatically records certain technical data, including your IP address, browser type and version, the pages you visit, and the time and date of your visit. This data is collected as a routine part of operating any web server and is used solely for security monitoring and diagnosing technical issues. We do not use third-party analytics services or deploy tracking or advertising cookies on this Website.

Client and Engagement Data

If you engage Foro for professional services, we will process additional personal data in the course of delivering those services. The nature of that data will depend on the engagement and will be addressed in the applicable engagement agreement.

3. Lawful Basis for Processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

Legitimate interests (Article 6(1)(f)): we process enquiry and contact data to respond to your message and to assess whether there is a potential basis for working together. We have carried out a legitimate interests assessment and are satisfied that our interest in responding promptly to business enquiries is not overridden by your privacy interests.
Performance of a contract (Article 6(1)(b)): where you engage us for professional services, we process personal data to the extent necessary to deliver those services and to fulfil our contractual obligations to you.
Compliance with a legal obligation (Article 6(1)(c)): we may process certain data to comply with our obligations under UK law, including tax and financial record-keeping requirements.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

to respond to your enquiry and communicate with you about our services;
to assess and pursue a potential commercial relationship;
to deliver professional services where an engagement is agreed;
to maintain records of our business activities as required by law; and
to operate, monitor, and improve the security and performance of our Website.

We will not use your personal data for unsolicited marketing without your prior consent and will never sell your data to third parties.

5. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected:

Enquiry data where no engagement follows: up to 24 months from the date of your last communication with us, after which it is securely deleted.
Client and engagement data: for the duration of the engagement and for a period of seven (7) years thereafter, in line with our obligations under the Companies Act 2006 and HMRC requirements for financial records.
Technical logs: typically no longer than 90 days, unless retention is required for a specific security investigation.

6. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We may share it in the following limited circumstances:

Infrastructure and technology providers: we use third-party services to operate our Website and deliver email communications. These providers act as data processors on our behalf and are contractually required to process data only on our instructions and in accordance with applicable data protection law.
Legal or regulatory requirements: we may disclose your data where required to do so by law, by a court order, or by a regulatory or government authority with jurisdiction over us.
Business transfers: in the event of a merger, acquisition, or sale of all or a substantial part of our assets, personal data held by us may be transferred to the relevant third party. We will take reasonable steps to notify affected individuals in advance where required by law.

7. International Transfers

Some of our technology infrastructure providers are based in, or process data in, countries outside the United Kingdom. Where personal data is transferred to a country that does not benefit from a UK adequacy regulation, we ensure that appropriate safeguards are in place — such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses — to ensure your data is afforded a standard of protection equivalent to that required under UK law.

8. Cookies

Our Website uses only technically necessary cookies required for the Website to function correctly. These are session-based and expire when you close your browser. We do not use advertising, tracking, or third-party analytics cookies.

You can configure your browser to refuse cookies, though doing so may affect certain functionality of the Website.

9. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct any inaccurate or incomplete personal data.
Right to erasure: in certain circumstances, you may ask us to delete your personal data.
Right to restriction of processing: you may ask us to restrict how we use your personal data in certain circumstances.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
Right to object: you may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights relating to automated decision-making: we do not make solely automated decisions that have a legal or similarly significant effect on you.

To exercise any of these rights, please contact us via our contact page. We will respond within one calendar month of receipt of your request. We may need to verify your identity before processing the request.

10. Right to Complain

If you believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
www.ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

11. Children

Our Website and services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently received data relating to a person under 18, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will update the “Last updated” date at the top of this page whenever material changes are made. We encourage you to review this page periodically.

13. Contact

For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us via our contact page or write to us at:

Foro Tech Ltd
55 Rectory Grove
Leigh-on-Sea
Essex, SS9 2HA
United Kingdom