Privacy policy

Privacy Policy

Last updated: 4 November 2026

We operate the Foxy Climbing website and online store. Our store is powered by Shopify, which provides the platform we use to sell our products.

This Privacy Policy explains how personal information is collected, used, stored and shared when you visit our website, place an order or contact us. Forged Equipment Ltd is the data controller for the personal information we process for our own business purposes.

Personal Information We Collect

Depending on how you interact with us, we may collect:

Contact information: your name, email address, telephone number, billing address and delivery address.
Order and transaction information: products ordered, payment status, delivery details, returns, refunds and order history.
Payment information: information needed to process payments, handled through Shopify and the payment providers used at checkout. The payment information available to us depends on the payment method and provider.
Account information: details and preferences associated with any customer account you create.
Communications: enquiries, feedback and other information you send to us.
Device and usage information: your IP address, browser, device information and interactions with our website.
Marketing preferences: your communication preferences and records of consent or opt-out requests.

How We Collect Information

We collect information:

Directly from you when you place an order, contact us, create an account or subscribe to communications.
Automatically through our website, cookies and similar technologies, subject to applicable consent requirements.
From service providers supporting our store, such as Shopify, payment providers and delivery companies.
From advertising or analytics services where we use them and where permitted by applicable law.

How We Use Your Information

We use personal information to:

Process payments and fulfil orders.
Arrange delivery and provide order updates.
Handle enquiries, returns, refunds and complaints.
Manage customer accounts and preferences.
Maintain business, accounting and transaction records.
Protect our website and customers against fraud and misuse.
Understand and improve our website, products and customer service.
Send marketing communications where permitted.
Meet legal obligations and establish, exercise or defend legal claims.

Our Lawful Bases

Where UK or European data protection law applies, we rely on the following lawful bases as appropriate:

Contract: To process orders, arrange delivery, manage returns and provide services you request, including taking steps at your request before a purchase.

Legal obligation: To maintain records required by law and comply with applicable accounting, tax, consumer protection and other legal requirements.

Legitimate interests: To operate and protect our business, respond to general enquiries, prevent fraud, improve our services and manage legal claims, where those interests are not overridden by your rights. Our interests include providing reliable customer service and maintaining a secure online store.

Consent: Where required for marketing communications, cookies and similar technologies. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where electronic marketing is permitted under an applicable existing-customer exception, we may rely on legitimate interests for the associated personal-data processing. We provide an opportunity to opt out.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember preferences and support functions such as checkout.

Where enabled, additional technologies may be used for analytics, personalisation or advertising. We request consent where required by applicable law.

You can manage available choices through the website’s cookie or privacy controls and through your browser settings. Blocking essential cookies may affect the operation of the store.

Marketing

Where permitted, we may send you news, product updates and offers.

You can unsubscribe from marketing emails using the unsubscribe link in the message or by contacting forgedequipmentltd@outlook.com.

Opting out of marketing does not prevent us from sending necessary service communications, such as order confirmations, delivery updates or responses to your enquiries.

Where we use advertising services, information about website activity may be processed to measure advertising or show relevant adverts, subject to applicable consent and privacy-choice requirements.

How We Share Information

We share information where necessary with organisations that support our business, including:

Shopify: to host and operate our online store.
Payment providers: to process payments and support fraud prevention.
Delivery and fulfilment providers: to prepare, deliver and manage orders.
IT and business service providers: to support communications, hosting, administration and customer service.
Analytics and marketing providers: where those services are used and the sharing is permitted.
Professional advisers: such as accountants, insurers and legal advisers, where necessary.
Authorities and other parties: where disclosure is required by law or necessary to protect rights, investigate fraud or manage legal proceedings.

Information may also be shared in connection with a proposed business sale, merger or restructuring, subject to appropriate safeguards.

We limit disclosures to information appropriate for the relevant purpose. Some providers act on our instructions; others process information as independent controllers under their own privacy notices.

Shopify

Shopify processes information to provide and operate our store, including supporting checkout, payments, security and other platform functions.

Depending on the Shopify features enabled, Shopify may also process information for its own purposes, including improving its services and providing enhanced features. Where Shopify acts as an independent controller, it is responsible for that processing and the associated privacy rights.

You can find further information here:

International Transfers

Shopify and other service providers may process information outside the United Kingdom or European Economic Area.

Where applicable data protection law requires safeguards for those transfers, we rely on recognised arrangements, such as adequacy decisions, approved standard contractual clauses, or the UK International Data Transfer Agreement or UK Addendum, as appropriate.

You can contact us for further information about the safeguards relevant to your information.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention depends on the type of information and the reason it is held:

Order and transaction records: for order administration, applicable accounting and tax obligations, and relevant claims periods.
Customer enquiries and complaints: for resolving the matter and retaining an appropriate record of the outcome.
Account information: for maintaining the account and meeting associated legal or operational requirements.
Marketing information: until you withdraw consent or opt out, or until it is no longer needed for the relevant marketing purpose.
Opt-out records: where necessary to ensure we continue to respect your preferences.
Technical and security records: for proportionate periods needed to operate, protect and troubleshoot our services.

When information is no longer required, we delete it or anonymise it, subject to applicable legal requirements.

Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

No website, electronic transmission or storage system can be guaranteed completely secure. Please do not send payment card details or other sensitive information through ordinary email.

Your Rights

Depending on your location and the applicable law, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your information.
Restrict certain processing.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Receive certain information in a portable format.
Withdraw consent where processing relies on consent.
Complain to a data protection authority.

These rights may be subject to conditions and exceptions. For example, we may need to retain some transaction information to meet legal obligations.

To make a request, contact forgedequipmentltd@outlook.com. We may need to verify your identity before responding. We will respond within the timescales required by applicable law.

Additional Privacy Choices

Depending on where you live, you may have additional rights concerning the sale or sharing of personal information, targeted advertising or appeals against decisions about privacy requests.

Where these rights apply, use the privacy controls provided on our website or contact forgedequipmentltd@outlook.com. We will honour recognised opt-out preference signals where required by applicable law.

You may appoint an authorised representative to submit a request where permitted. We may request evidence of their authority and information needed to verify your identity.

We will not unlawfully discriminate against you for exercising your privacy rights.

Children’s Information

Our online store is not directed at children, and we do not knowingly collect personal information from children for marketing purposes.

If you believe a child has provided personal information that we should not hold, please contact us so we can investigate and take appropriate action.

Third-Party Websites

Our website may contain links to websites operated by other organisations. Their privacy practices are governed by their own policies.

Please review the privacy notice of any external website you visit.

Complaints

If you have concerns about how we handle personal information, please contact us at forgedequipmentltd@outlook.com.

You also have the right to complain to the relevant data protection authority.

In the United Kingdom, you can contact the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

If you are in the European Economic Area, you can contact your local supervisory authority. A list is available through the European Data Protection Board.

Changes to This Policy

We may update this policy to reflect changes to our business, services or legal obligations. The latest version will be published on this page with an updated date. Where required, we will provide additional notice of significant changes.