Privacy Policy
Effective date: July 30, 2026
This Privacy Policy explains how FORGE ("we," "us," "our") collects, uses, discloses, stores, and protects personal data when you visit our website, message us to place an order, book a call, or subscribe to our newsletter. We are committed to handling your data responsibly and in line with the Nigeria Data Protection Act (NDPA) 2023 and applicable data protection principles for visitors outside Nigeria.
1. Information We Collect
We collect information in the following ways:
- Information you give us directly — your name, phone number, and any details you share when you message us on WhatsApp or Telegram to ask about or order a product; your email address and any details you provide when subscribing to our newsletter or booking a call through our scheduling link.
- Payment information — when you pay for a product, payment is processed by Paystack. Paystack collects your card, bank, or account details directly; we never see or store your full card number. We do receive confirmation of payment (amount, status, and a transaction reference) so we can fulfill your order.
- Order and communication history — records of the products you've inquired about or purchased, and our conversation history with you on WhatsApp or Telegram, kept so we can support you and fulfill orders.
- Automatically collected data — when you browse the Site, our hosting and analytics provider (Vercel Analytics) automatically collects limited technical data such as approximate location (country/region), device and browser type, pages viewed, and referring pages. This data is aggregated and does not directly identify you by name.
2. How We Use Your Information
We use the information we collect to:
- Respond to inquiries and fulfill orders for products or custom builds;
- Process payments and prevent fraud, in conjunction with Paystack;
- Deliver purchased products and provide related support;
- Send newsletter content or follow-up communication you've opted into;
- Schedule and manage calls you've booked with us;
- Understand how visitors use the Site so we can improve it;
- Comply with legal, tax, or regulatory obligations.
We do not sell your personal data, and we do not use it for purposes beyond those listed above without asking you first.
3. Legal Basis for Processing
Where applicable, we process your data on the basis of: your consent (e.g., subscribing to the newsletter or booking a call); the necessity of processing to perform a contract with you (e.g., fulfilling an order); and our legitimate interest in operating and improving the Site, provided this does not override your rights.
5. How We Store & Protect Your Information
Order and communication records are kept within WhatsApp/Telegram and our own private records (such as order notes and email). Payment details are stored solely by Paystack under their PCI-DSS compliant infrastructure — not on our own systems. Website hosting and analytics data are stored by Vercel on secure cloud infrastructure, which may be located outside Nigeria; where this occurs, we rely on our providers' standard contractual and security safeguards to protect your data in transit and at rest.
We take reasonable technical and organizational measures — including restricting access to personal data to only what is needed to fulfill orders and respond to inquiries — to protect your information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Policy — for example, order and payment records are kept for as long as needed for accounting, tax, and dispute-resolution purposes, and newsletter contact details are kept until you unsubscribe or request deletion. When data is no longer needed, we take reasonable steps to delete or anonymize it.
8. Your Rights
Depending on your location, you may have the right to:
- Request access to the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your personal data, subject to legal or contractual retention needs;
- Object to or restrict certain processing, including newsletter communications;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local data protection authority.
To exercise any of these rights, contact us at michaelogaje033@gmail.com. You can unsubscribe from newsletter emails at any time using the link provided in those emails.
9. Children's Privacy
The Services are not directed at, and should not be used by, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. International Data Transfers
Because we rely on providers such as Paystack and Vercel, your data may be processed on servers located outside Nigeria. Where this happens, we take reasonable steps to ensure those providers maintain a comparable standard of data protection to that required under the NDPA.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective date" above will be updated accordingly, and material changes will be communicated where appropriate.
12. Contact Us
For questions about this Privacy Policy or how your data is handled, contact us at michaelogaje033@gmail.com, or via WhatsApp or Telegram.