Privacy Notice
Describes our processing of your personal data when you interact with us via this web site, email or third party platforms
Last Modified: 1 June 2026
On this page
Definitions
- Third Party Platform
- A platform that is made available by a third party under their terms and conditions
- We / Us / Our
- PrivacyForge Limited, a company registered in England and Wales (Company Number: 09534932)
- Web Site
- The web site available at: https://www.drcjsmith.com/
- You
- One of the following:
- a user of this web site
- an individual with whom we have interacted via electronic mail
- a user of a third party platform who interacts with us, or content that we make available, via that platform
- an organisational representative
Scope
This privacy notice covers processing that we may undertake on personal data arising from interactions via:
- This web site
- Electronic mail
- Third party platforms
- In-person meetings
Purposes
Any personal data arising from your interactions with this web site is used by Microsoft to manage the delivery of this web site via the Static Web Apps service. We do not currently undertake any additional processing on the data arising from these interactions.
Any personal data arising from interactions via electronic mail, third party platforms or in-person meetings may be processed for one or more of the following purposes:
| Purpose | Example |
|---|---|
| Administer the operation of a commercial company | Resolving an issue with a provider of our technical infrastructure |
| Administer the provision of our products and services | Supplying our consulting services to you |
| Resolve legal queries, requests and complaints | Responding to a Subject Access Request |
| Market our products and services to your organisation | Providing your organisation with information about a developer tool that may be of interest |
Lawful Basis
Any personal data that is processed for the above purposes is processed on lawful bases defined within the UK General Data Protection Regulation. In general, these lawful bases will be:
| Purpose | Lawful Basis |
|---|---|
| Administer the provision of our products and services | Contract |
| Resolve legal queries, requests and complaints | Legal Obligation |
| Administer the operation of a commercial company | Legitimate Interests† |
| Market our products and services to your organisation | Legitimate Interests† |
† Our legitimate interests are those of a commercial company. Processing undertaken on this lawful basis can be reasonably expected and has been determined to have a minimal privacy impact.
Data Categories
Categories of personal data that we process for the above purposes may include:
| Purpose | Categories |
|---|---|
| Administer the operation of a commercial company | Contact details For example: First Name, Surname and Email Address |
| Organisation details For example: Organisation Name and Job Title |
|
| Other categories of data that you choose to provide to us | |
| Administer the provision of our products and services | Contact details For example: First Name, Surname and Email Address |
| Organisation details For example: Organisation Name and Job Title |
|
| Device details For example: Device Type and Platform Version |
|
| Product details For example: Product Name and Version |
|
| Service details For example: Service Description and Provisioning Arrangements |
|
| Other categories of data that you choose to provide to us | |
| Resolve legal queries, requests and complaints | Contact details For example: First Name, Surname and Email Address |
| Organisation details For example: Organisation Name and Job Title |
|
| Identification Verification details For example: Telephone Number |
|
| Other categories of data that you choose to provide to us | |
| Market our products and services to your organisation | Contact details For example: First Name, Surname and Email Address |
| Organisation details For example: Organisation Name and Job Title |
|
| Other categories of data that you choose to provide to us |
Data Sources
Data supplied by the following organisations may be processed for the specified purpose(s):
| Organisation | Purpose |
|---|---|
| Your Organisation‡ | Marketing of our products and services to your organisation |
‡ Data that is publicly available on your organisation's web site, or which has been provided by an organisational representative, may be processed to provide your organisation with information about our products and services. Where data from your organisation's web site is processed, the determination of such organisations and the collection of the specified categories of data from the organisation's web site will be undertaken by a human user, not by automated means. Should you provide no response to our initial communication, or explicitly request that we do not contact you, you will not be contacted in this manner again.
Recipients
We do not share your personal data with any third parties, except where this is required to fulfil a legal obligation.
Data Processors
We currently use the following third parties to process personal data on our behalf:
| Third Party | Service(s) |
|---|---|
| Microsoft | Microsoft Azure |
| Microsoft 365 |
Transfers
Third parties that process data on our behalf (data processors) may transfer data outside of the UK and outside of the European Economic Area (EEA). Where data is transferred outside of the UK or EEA by these organisations, we have deemed the data to be subject to appropriate technical and organisational measures.
Retention Periods
Any personal data that we process is retained as follows:
| Purpose(s) | Retention Period | From | Action |
|---|---|---|---|
| Administer the operation of a commercial company | 6 yearsΩ | End of financial year to which they relate | Review♢ |
| Administer the provision of our products and services | 6 yearsΩ | End of financial year to which they relate | Review♢ |
| Resolve legal queries, requests and complaints | 5 years | Date of resolution | Review♢ |
| Market our products and services to your organisation | 1 year | Date of last communication | Delete |
Ω Represents a minimum retention period determined from the requirements defined by Companies House for limited companies to retain company and accounting records. Where data relates to a query for which there was no subsequent commercial transaction, data may be reviewed and deleted prior to the end of the stated minimum retention period.
♢ Where review actions are undertaken, a decision will be made to determine whether the data can be deleted, or continues to be required to fulfil one or more purposes and must therefore be retained. Decisions will consider factors such as legal, contractual and audit requirements, and the risks posed by nature and scope of personal data that is held.
Rights
Under the UK General Data Protection Regulation, the following rights are defined for individuals in relation to personal data:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
To find out when and how these rights can be exercised in relation to our processing of your personal data, please contact us.
Automated Decision Making
We do not make any automated individual-level decisions or undertake any individual profiling using your personal data.
Third Party Platforms
If you choose to interact with us via third party platforms, the terms of use, privacy notices and cookie policies of those platforms will apply.
Please ensure that you have read and understood the information in these documents prior to interaction with us, or content that we make available via any third party platform.
Aggregate Metrics
Aggregate metrics* relating to your interactions with our web site via third party platforms, or content that we post on third party platforms, may be provided by these platforms.
We may process the aggregate metrics provided by the following third party platforms to monitor your engagement with, and inform improvements to our web site, products and services, and any content that we make available via third party platforms:
| Third Party Platform | Aggregate Metrics |
|---|---|
| Bing | Provided via Bing Webmaster Tools |
| Provided via Google Search Console | |
| Provided via LinkedIn Page Analytics$ |
*Aggregate metrics are expressed over groups of users over time. For example, number of downloads of a product by users in a given country in a given month.
$As specified within the Page Insights Joint Controller Addendum, which sets out responsibilities of LinkedIn and PrivacyForge Limited with respect to the processing of Page Insights, the Page Insights that are provided to us by LinkedIn "consist of aggregated data and, notwithstanding any joint controller status, LinkedIn will not provide You personal data of Members with regard to Page Insights or enable You to link Page Insights back to individual members"
Amendments
Changes may be made to this privacy notice from time to time. Please ensure that you check this notice regularly to ensure that you are aware of any changes to the processing of your data.
Queries
To raise a query about any aspect of this privacy notice, please contact us.
Complaints
To raise a compliant about our processing of your personal data, please contact us.
You also have the right to raise a complaint with the Information Commissioner's Office in relation to our processing of your data△.
△ PrivacyForge Limited is registered as a Data Controller with the Information Commissioner's Office in the United Kingdom (Data Protection Registration Number: ZA404325).