Privacy Policy

This Privacy Policy explains how Value Forge Limited ("The Value Forge", "we", "us") collects, uses, and protects personal data when you visit our website or engage our services. We comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), and with the UK GDPR and EU GDPR where applicable to visitors in those regions.

1. Data We Collect

• Contact form data: name, email, website, monthly ad spend, and message content you submit on this site.
• Technical data: IP address, browser type, device type, and basic analytics on how you interact with our site.
• Client data: when you become a client, we may process billing details and read-only access to your advertising and analytics accounts to deliver our services.

2. How We Use Your Data

• To respond to your enquiries and provide a free audit.
• To deliver, manage, and improve our services for clients.
• To send transactional emails (e.g. confirmations, audit deliveries).
• To meet legal, accounting, and regulatory obligations.

3. Legal Basis

We process personal data on the basis of (a) your consent when submitting our contact form, (b) the performance of a contract when delivering services, and (c) our legitimate interests in operating and improving our business.

4. Sharing Your Data

We do not sell your personal data. We share it only with trusted processors needed to operate our business — for example our hosting provider, email infrastructure, and accounting software — under appropriate data-processing agreements.

5. Data Retention

Contact form submissions are retained for up to 24 months unless you become a client. Client records are retained for the duration of the engagement and for up to 7 years afterwards for legal and accounting purposes.

6. Your Rights

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

7. International Transfers

Some of our processors may be located outside your country. Where this is the case, we ensure appropriate safeguards are in place, such as standard contractual clauses.

8. Security

We use industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls, and regular review of our processors.

9. Contact

Privacy enquiries and rights requests can be sent through the contact form on our website.