Skip to content

FORGE FITNESS

SHOP NOW

Privacy Policy

Effective Date: 27 October 2026

FORGE FITNESS EQUIPMENT LIMITED (“we”, “us”, “our”) operates the e-commerce website www.forgefitnessstore.com (the “Site”), a platform dedicated to providing premium, space-saving fitness small tools including massage balls, resistance bands, skipping ropes, yoga blocks and other workout accessories tailored for modern active lifestyles. This Privacy Policy is designed to clearly explain how we collect, use, store, process and protect your personal data when you visit, browse, make purchases or interact with our Site, in full compliance with the UK General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications Regulations (PECR) and all applicable UK data protection laws.

We take the transparency of your personal data processing very seriously. This policy outlines all our distinct data collection activities paired with corresponding valid lawful bases, your full rights over your personal information, and all the measures we implement to safeguard your data security, so you can shop and use our Site services with complete peace of mind.

1. Our Contact Information

If you have any questions, concerns or requests related to your personal data and this Privacy Policy, you can reach out to our dedicated data protection team using the following details:

  • Full Company Name: FORGE FITNESS EQUIPMENT LIMITED
  • Registered Address: Nerse Farm, St. Asaph Road, Lloc, Holywell, CH8 8RD, United Kingdom
  • Contact Email: [email protected]
  • Contact Phone Number: +44 1352 720409

2. Types of Personal Data We Collect

We only collect personal data that is directly relevant to delivering our e-commerce services to you. The categories of personal information we process include:

  1. ‌Account and Transaction Data‌: When you create a user account on our Site, place an order, or complete a checkout process, we collect your full name, billing and delivery address, email address, phone number, and payment details (including transaction records processed securely through our certified payment partners).
  2. ‌Usage and Interaction Data‌: We collect information about how you browse and interact with our Site, including pages you view, products you add to your cart, search queries you enter, time spent on different sections of the store, your device type, IP address, browser type and version, and geolocation data at the city level for service optimization.
  3. ‌Marketing and Preference Data‌: If you subscribe to our newsletter, provide feedback on our products, participate in customer surveys, or indicate your product preferences, we collect that information to tailor our service offerings to your fitness needs.
  4. ‌Communications Data‌: When you contact our customer service team for order support, product usage guidance, or other inquiries, we keep records of your messages, our response history, and any related details you share with us during the interaction.

3. Lawful Bases for Processing Your Personal Data

In full compliance with UK GDPR requirements, every data processing activity we conduct is supported by a clear, documented valid lawful basis, as specified below:

  1. ‌Contractual Necessity‌: Most of our core data processing activities are carried out to fulfill the sales and service contract we enter into with you when you place an order on our Site. This includes processing your delivery address to ship your purchased massage ball, resistance band, skipping rope, yoga block or other fitness products, processing your payment information to complete transactions, sending order confirmation and delivery update notifications, and handling post-sales support including refund and return requests. Without this data, we cannot fulfill our contractual obligations to deliver the products and services you order from us.
  2. ‌Legitimate Interests‌: For appropriate processing activities that do not override your individual data rights, we rely on documented Legitimate Interests Assessment (LIA) results as our lawful basis. This includes fraud prevention measures to protect both our customers and our business from unauthorized payment activities, network security operations to keep our Site stable and free from malicious cyberattacks, and anonymized statistical analysis of user browsing patterns to optimize our product display layout and improve your overall shopping experience. All these processing activities are carefully balanced to ensure your personal data rights are not adversely impacted.
  3. ‌Legal Obligation‌: We process and retain certain transaction records for the duration required by UK law, to meet HMRC accounting and tax compliance requirements, and to respond to valid mandatory requests from authorized regulatory authorities as required by applicable laws.
  4. ‌Consent‌: For any processing activities that are not covered by the three lawful bases above, we will only process your personal data after we receive your explicit, affirmative consent. This includes sending you optional marketing newsletters about new fitness product arrivals, exclusive discount offers, and customized workout guidance content, as well as using non-essential cookies for personalized product recommendation features on our Site. You have the full right to withdraw your consent at any time, with no negative impact on your ability to browse our Site or make regular purchases.

4. How We Use Your Personal Data

We only process your personal data for the clear, transparent purposes disclosed in this policy, including:

  • Processing and completing your online orders, arranging product shipping, updating you on delivery status, and handling after-sales services including returns, refunds and product quality support, to make sure you receive your ordered fitness tools in a timely and satisfactory condition.
  • Managing your user account, enabling you to save your preferred delivery addresses, view your order history, track pending shipments, and access exclusive member offers on our Site.
  • Sending you necessary service notifications, such as system maintenance alerts, policy update announcements, and responses to the customer support inquiries you submit.
  • Preventing fraudulent transactions, detecting and resolving security vulnerabilities on our Site, and protecting the safety of your personal data and payment information during your shopping journey.
  • Conducting anonymized market research to understand user demand for different types of fitness products, so we can expand our product line to include more high-quality, non-slip, wear-resistant workout gear that matches the needs of our 120,000+ existing customers.
  • When you have given your explicit consent, sending you marketing emails about new product launches, limited-time promotions, and professional fitness training tips that may interest you.
  • Complying with all our legal and regulatory obligations under UK data protection, tax, and e-commerce laws.

5. Electronic Marketing and PECR Compliance

We strictly follow all requirements laid out in the Privacy and Electronic Communications Regulations (PECR) for all our electronic marketing activities:

  • For new potential customers, we will only send marketing emails if we have received their explicit, opt-in consent, collected through unticked opt-in boxes on our Site’s newsletter subscription page.
  • For our existing customers who have previously purchased fitness products from us, we may send you marketing communications about similar fitness gear and related offerings, under the PECR soft opt-in rule. At every point of purchase, we provide you with a clear, easy-to-find opt-out option for such marketing communications.
  • Every marketing email we send will include a clear one-click unsubscribe link. You can opt out of receiving our marketing messages at any time, and we will stop sending you marketing communications within 3 working days after we receive your opt-out request. This will not affect any service-related or order-related transaction notifications we need to send you to fulfill our contractual obligations.

6. Cookies and Tracking Technologies

We use cookies and similar tracking tools on our Site, in full compliance with PECR rules:

  • Strictly necessary cookies are always active, as they are essential to make our Site function properly. These cookies remember your cart contents, your logged-in session status, and your basic preference settings, and they do not process your personal data for marketing purposes.
  • All non-essential cookies, including those used for personalized product recommendations and website usage analytics, will only be activated after you give us your explicit consent through our cookie consent banner on your first visit to our Site.
  • You can adjust your cookie preferences at any time through the settings panel on our Site, or modify your browser settings to block or delete cookies. We conduct regular cookie and consent audits to ensure all our cookie-related processing activities remain compliant with the latest ICO regulatory requirements.

7. Disclosure of Your Personal Data to Third Parties

We will never sell, rent or trade your personal data to unrelated third parties for commercial purposes without your explicit consent. We only share your necessary personal data with the following limited categories of trusted third parties, to deliver our services to you:

  • Our vetted payment service providers, who process your payment information securely in line with PCI DSS standards, to complete your order transactions.
  • Our courier and logistics partners, who only receive your delivery name, address and contact phone number, for the sole purpose of shipping your ordered fitness products to you.
  • Our authorized cloud service and website hosting providers, who host our Site and data storage systems, under strict data processing agreements that require them to protect your personal data per UK GDPR standards.
  • Authorized regulatory bodies, only when we are legally required to disclose your personal data to comply with applicable laws, court orders or regulatory investigations.
    All third parties we work with are required to implement strict data security measures, and are not permitted to process your personal data for any purposes other than the explicit tasks we assign to them.

8. Your Rights Over Your Personal Data

Under UK GDPR, you hold full and extensive rights over your personal data. You can exercise these rights at any time by contacting us using the contact details listed in Section 1 of this policy, free of charge:

  1. ‌Right of Access‌: You can request a full copy of all the personal data we hold about you, as well as clear information about how we process that data.
  2. ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate or incomplete, you can ask us to correct or update that information immediately.
  3. ‌Right to Erasure‌: You can request us to delete all your personal data stored on our systems, under circumstances including when the data is no longer necessary for the original purposes we collected it for, or when you withdraw your consent for the processing that we previously relied on your approval to carry out. We will fulfill this request without undue delay, unless we are legally required to retain certain transaction records for tax or regulatory compliance purposes.
  4. ‌Right to Restrict Processing‌: You can request us to pause the processing of your personal data, for example when you dispute the accuracy of your data, or when you object to our legitimate interest based processing activities, while we verify the relevant circumstances.
  5. ‌Right to Data Portability‌: You can request us to provide all the personal data you have shared with us, in a structured, commonly used machine-readable format, so you can transfer that data to another service provider easily.
  6. ‌Right to Object‌: You have the full right to object to our processing of your personal data for direct marketing purposes, at any time. You can also object to processing that we carry out under our legitimate interests lawful basis, and we will stop the processing unless we can demonstrate compelling legitimate grounds that override your rights, freedoms and interests.
  7. ‌Right to Object to Automated Decision-Making and Profiling‌: Our Site does not conduct automated decision-making that produces legal or similarly significant effects on you. For any AI-driven personalization features that may change what products you see or the offers you are presented with on our Site, you can object to that profiling activity at any time, and we will stop that processing for your account immediately.
    We will respond to all your rights-related requests within one calendar month. If your request is complex or we receive a high volume of requests at the same time, we may extend the response period by up to two additional months, and we will notify you of this extension within one month of receiving your request. If you are not satisfied with our response to your request, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection matters in the United Kingdom.

9. Data Security and Data Breach Response

We implement rigorous industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. These measures include end-to-end encryption for all payment transactions, regular security vulnerability scanning of our website systems, role-based access control for our internal teams who can access user data, and regular staff data protection training.
In the very unlikely event that a personal data breach occurs which poses a high risk to your rights and freedoms, we have established formal internal processes to investigate, contain and respond to the breach. We will notify the relevant ICO regulatory authority of the breach within 72 hours after we become aware of it, and we will notify all affected users directly without undue delay if the breach creates a high risk to your personal rights and interests.

10. Data Retention Period

We will not retain your personal data for any longer than it is necessary to fulfill the purposes we collected it for. For different categories of data, our standard retention periods are:

  • Order and transaction data: We retain these records for 7 years after the completion of your order, to meet UK HMRC tax and accounting compliance requirements.
  • User account data: We retain your account information for as long as you keep your account active on our Site. If you request us to delete your account, we will erase all your account data within 30 days, except for the transaction records we are legally required to keep.
  • Marketing contact information: We retain your marketing consent records until you unsubscribe from our marketing communications, or request us to delete that information.
  • Usage and browsing analytics data: We store this anonymized usage data for a maximum of 24 months, after which we fully delete or anonymize it so it can no longer be linked back to any individual user.

11. Policy Updates

We may update this Privacy Policy from time to time, to reflect changes in our business operations, new regulatory requirements, or feedback from our customers. When we make material changes to this policy, we will update the “Effective Date” at the top of this page, and post a prominent notification on the homepage of our Site, or send you an email notification if you have an active user account with us. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

This Privacy Policy constitutes a full, transparent explanation of all our personal data processing activities for our www.forgefitnessstore.com e-commerce site, to ensure full compliance with UK GDPR, PECR and all applicable data protection regulations, while delivering a safe, trusted shopping experience for every customer shopping for our premium fitness small tools.