Privacy Policy

1. Who We Are

Orion Forge is operated by David Elliott, based in Eastbourne, UK. For any question about this policy or your data, contact: contactus@orionforge.co.uk.

2. Scope of This Policy

This policy currently covers our website and our marketing/outreach activity only. Orion Forge does not currently operate a live product or service that collects data from school staff, business contacts, or pupils/students beyond what is described below. If and when we launch a product that processes personal data — including any data relating to pupils or students — this policy will be replaced with an updated version covering that use, before that product goes live.

3. What Data We Collect

• Contact form submissions on this website: name, email address, organisation name, and message content you choose to provide
• Outreach data: professional contact details (such as name, job title, and work email address) of school staff or business contacts, sourced from publicly available school directories or business listings, used to send relevant marketing communications about Orion Forge's services

We do not knowingly collect data from, or about, children. Our outreach is directed only at school staff members and business contacts in their professional capacity.

4. Why We Process This Data (Legal Basis)

We process this data under the legal basis of legitimate interests (UK GDPR Article 6(1)(f)) — specifically, our legitimate interest in marketing our education and business services to relevant organisations. Our outreach is directed at organisations acting as 'corporate subscribers' (such as schools and businesses) rather than individuals in a personal capacity, in line with the UK's Privacy and Electronic Communications Regulations (PECR). You can object to this processing, or opt out of further contact, at any time by replying to any email we send you or by contacting us at contactus@orionforge.co.uk.

5. How Long We Keep Data

We retain contact and outreach data only for as long as necessary to carry out our marketing activity, or until you ask us to stop contacting you, whichever is sooner.

6. Where Your Data Is Stored

Data is stored and managed using Google Workspace (Gmail and Google Sheets). These services may process data on infrastructure outside the UK, in which case appropriate safeguards (such as the UK's International Data Transfer Agreement or Standard Contractual Clauses) apply, as provided by Google.

7. Your Rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, and to object to how it is used. To exercise any of these rights, contact contactus@orionforge.co.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

8. Changes to This Policy

We will update this page if how we collect or use data changes, particularly before launching any product or service that processes additional personal data.