Privacy Policy

This Privacy Policy explains how Forefront HQ, a trading name of Ashley Nicholas Roberts ("we", "us", "our"), collects, uses, and protects your personal data when you contact us, request a quote, purchase our services, or otherwise interact with us. We are the data controller for the purposes of the UK GDPR and Data Protection Act 2018.

1. Who We Are

Contact details: Forefront HQ, 7 St. George's Court, Jesmond Road, Weston-super-Mare BS22 7AB, info@forefronthq.co.uk, 07940715134.

2. What Data We Collect

Depending on how you interact with us, we may collect:

• Identity & contact data — name, business name, email address, phone number, billing/postal address
• Project data — details you provide about your business, project, or campaign requirements, so we can prepare a quote and deliver the Services
• Payment data — processed via our business bank account with Monzo Business; we do not store your full bank account or card details ourselves
• Hosting & maintenance data — website content, credentials, and technical access details needed to host or maintain your site
• Marketing account data — where we deliver digital marketing services, access to advertising, analytics, or social media accounts you grant us for the purpose of the campaign
• Communications — correspondence when you contact us for quotes, support, or enquiries, via Gmail/Google Workspace

3. How We Use Your Data & Our Legal Basis

We use your data for the following purposes, relying on the legal bases indicated:

• To prepare quotes and deliver the Services you've agreed to — necessary for performance of a contract
• To process payments and invoicing, and prevent fraud — contract and legitimate interests
• To provide customer support — contract
• To send service updates (e.g. hosting or maintenance notices, project updates) — legitimate interests / legal obligation
• To send marketing communications — only with your consent, which you may withdraw at any time
• To improve our Services — legitimate interests
• To comply with legal and tax obligations — legal obligation

4. Sharing Your Data

We may share your data with trusted third parties who help us operate our business, including Monzo Business (our bank/payment provider) and Google Workspace/Gmail (our email and communication tools), as well as any analytics or advertising platforms used to deliver digital marketing services on your behalf. These providers only process data under our instructions and, where required, appropriate data processing agreements. We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.

5. International Transfers

Some of our service providers, such as Google Workspace, may store or process data outside the UK/EEA. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision, before your data is transferred.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described above. Project and account data is generally retained for the duration of our working relationship with you, plus 6 years afterwards, in line with our financial, accounting, and HMRC record-keeping obligations. Where we no longer need data for these purposes, we will securely delete or anonymise it.

7. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, in certain circumstances
• Object to or restrict certain processing
• Request data portability
• Withdraw consent where processing relies on consent
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at info@forefronthq.co.uk.

8. Cookies

Our website does not currently use cookies or similar tracking technologies. If this changes in the future, we will update this Privacy Policy and, where required, introduce a separate Cookie Policy and consent mechanism.

9. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including secure handling of project files, hosting credentials, and payment references.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via www.forefronthq.co.uk, and the "last updated" date above will be revised.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at info@forefronthq.co.uk.