1. Scope and Data Controller
Forge & Frequency LLC (“Company,” “we,” “us,” or “our”) is the controller of personal information processed in connection with this corporate website. In this Policy, “personal information” means information that identifies, relates to, or can reasonably be linked to an individual, as defined by applicable law.
This Policy applies to website visitors and individuals who communicate with us through the contact details published on the website. Our products may be subject to separate privacy notices. Where a separate product privacy notice applies, that notice governs the processing described in it.
2. Categories and Sources of Personal Information
We do not require visitors to register or provide personal information to browse this website. We do not currently offer website accounts, submission forms, newsletter subscriptions, or online checkout, and we do not use advertising pixels or visitor analytics tools in the website itself.
Information provided voluntarily. If you contact us by email, we receive your name, email address, message, attachments, and any other information you choose to provide. You are not required by law or contract to provide this information, although we may be unable to respond to an inquiry without the information needed to address it.
Technical information. Our hosting and security provider, Cloudflare, processes technical information necessary to deliver and protect the website. This may include your IP address, browser and device information, pages requested, access times, and security-related information. Such information may constitute personal information under applicable law.
External resources. The website uses Google Fonts. When fonts are delivered directly by Google, Google receives technical information associated with the request, including your IP address and browser information. Further information is available in Google’s Privacy Policy.
3. Purposes of Processing and Legal Bases
We process personal information only as necessary for the following purposes:
- To provide, administer, maintain, and secure the website;
- To respond to inquiries and provide requested assistance;
- To detect and prevent misuse, fraud, and security incidents;
- To maintain appropriate business records and establish, exercise, or defend legal claims; and
- To comply with applicable legal obligations and lawful requests.
Where the EU General Data Protection Regulation (“GDPR”) applies, we rely on the following legal bases, as applicable:
- Legitimate interests (Article 6(1)(f)). Operating a secure and reliable website, presenting its content, responding to ordinary correspondence, and protecting our business and legal rights, except where those interests are overridden by your interests or fundamental rights and freedoms.
- Contractual necessity (Article 6(1)(b)). Taking steps at your request before entering into a contract or performing a contract with you, where relevant to your inquiry.
- Legal obligation (Article 6(1)(c)). Complying with legal duties applicable to us.
- Consent (Article 6(1)(a)). Where required for a particular activity, we obtain consent before commencing that activity. Visiting the website does not itself constitute consent.
We do not subject website visitors to solely automated decision-making, including profiling, that produces legal or similarly significant effects.
4. Cookies and Similar Technologies
We do not use cookies or similar technologies for advertising, behavioral profiling, or visitor tracking. Cloudflare may use cookies to maintain website security, distinguish legitimate traffic from automated requests, and manage access to the website, depending on the services enabled and the circumstances of your visit.
These may include bot-protection cookies, such as __cf_bm (which expires after 30 minutes of inactivity), security-clearance cookies, such as cf_clearance, and rate-limiting cookies, such as _cfuvid. The latter cookies’ duration depends on the applicable service configuration. These cookies are not necessarily used on every visit. Details are available in Cloudflare’s cookie information.
Where applicable law permits, cookies strictly necessary to transmit communications or provide a service you request may be used without consent. We obtain prior consent before using optional cookies or similar technologies where consent is required by law. You may control or delete cookies through your browser settings; restricting necessary cookies may affect access to the website.
5. Disclosure of Personal Information
We may disclose personal information to the following categories of recipients, as necessary for the purposes described in this Policy:
- Service providers: providers of website hosting, content delivery, security, and email services, including Cloudflare, and Google in connection with externally delivered fonts;
- Professional advisers: legal, accounting, and other advisers subject to appropriate confidentiality obligations;
- Legal and regulatory recipients: courts, regulators, public authorities, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, or security; and
- Business successors: parties involved in a merger, acquisition, reorganization, or other business transfer, subject to applicable legal requirements and appropriate protections.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not process it for targeted advertising. We do not use advertising or social-media tracking tools on this website.
Browser privacy signals. The website does not alter its processing in response to Do Not Track or Global Privacy Control signals because it does not engage in the advertising or cross-site tracking activities described above. These signals do not prevent processing necessary to deliver and secure the website.
6. International Data Transfers
We operate in the United States. Our providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws. Where GDPR international-transfer rules apply, an applicable lawful transfer mechanism is required, such as an adequacy decision or the European Commission's standard contractual clauses with any necessary supplementary safeguards.
Cloudflare describes its processor obligations and transfer provisions in its Data Processing Addendum. Contact us to ask about the safeguards applicable to information we process or to request a copy, subject to appropriate redaction of confidential information.
7. Retention and Security
We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. In determining retention, we consider the nature and sensitivity of the information, whether an inquiry remains unresolved, applicable recordkeeping obligations, and the need to establish, exercise, or defend legal claims.
Retention of technical and security information also depends on the relevant provider’s services, configuration, and operational requirements. Cookie expiration periods do not determine the retention of related server records.
We maintain reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the risks of processing. No method of transmission or storage can guarantee absolute security.
8. Your Privacy Rights
Depending on applicable law, you may have rights to access, obtain a copy of, correct, delete, or restrict processing of personal information; object to processing based on legitimate interests; and receive portable information where the conditions for portability are met. Where processing is based on consent, you may withdraw it without affecting processing that was lawful before withdrawal. Rights are subject to legal conditions and exceptions.
Email privacy@forgeandfrequency.com to make a request. We may ask for proportionate information to verify identity or an authorized agent's authority. We will not require you to create an account or collect additional information solely to identify ordinary visitors when the law does not require it. We will respond within the applicable legal deadline. For GDPR requests, this is normally within one month, with up to two additional months where permitted and with notice within the first month.
If applicable U.S. state law gives you a right to appeal a denied request, reply to our decision requesting an appeal. We will explain the outcome and any applicable regulator complaint route. We do not discriminate against people for exercising applicable privacy rights.
If the GDPR applies, you may complain to a supervisory authority, particularly in the EU/EEA country where you live or work or where the alleged infringement occurred. You do not have to contact us first.
9. Children’s Privacy
This corporate website is intended for a general audience and is not directed to children under 13. We do not knowingly solicit personal information from children under 13. If you believe a child has sent us personal information, contact us so we can assess and address it.
10. Changes to This Policy and Contact Information
We will post revisions here and update the effective date. For material changes, we will provide additional notice where required and obtain consent where the law requires it. A policy update does not itself authorize a new use of previously collected information.
For privacy questions or requests, contact Forge & Frequency LLC at privacy@forgeandfrequency.com.