Privacy Policy

1. Who We Are

ForgeFactory ("we", "us", "our") is a custom forged wheel brand based in Bulgaria, serving customers across Europe. You can reach us at info@forgefactory.com or by phone at +359 878 020 508.

2. Data We Collect

We collect only what is necessary to fulfill your requests and improve our website:

• Contact form data: name, email address, phone number, and your message.
• Custom request data: vehicle details (make, model, year), wheel specifications, description, uploaded photos (car and inspiration images), and your contact information.
• Analytics data: we use Google Analytics to collect anonymized usage data such as pages visited, time on site, device type, and approximate location. This data is not personally identifiable.
• Bot verification: we use Cloudflare Turnstile to protect our forms from spam. Turnstile may collect interaction data to verify you are human.

3. How We Use Your Data

• To respond to your inquiries and contact requests.
• To process and fulfill custom wheel orders, including communicating specifications with our manufacturing partners.
• To send you a confirmation email after you submit a request.
• To analyze website usage and improve our services.
• To prevent spam and abuse of our forms.

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: when you voluntarily submit a contact or custom request form.
• Legitimate interest: for website analytics and security (bot protection).
• Contract performance: to process and fulfill your custom wheel orders.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following service providers who process it on our behalf:

• Vercel — website hosting and file storage (uploaded images).
• Resend — email delivery for confirmations and notifications.
• Google Analytics — anonymized website usage analytics.
• Cloudflare — Turnstile bot verification service.

Each provider is bound by their own privacy policies and data processing agreements.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purpose for which it was collected, typically for the duration of our business relationship. Uploaded images are stored for the duration needed to process your request. Analytics data is retained according to Google Analytics' default retention settings.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing of your data.
• Request data portability.
• Withdraw consent at any time.
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or your local supervisory authority.

To exercise any of these rights, contact us at info@forgefactory.com.

8. Cookies

Our website uses cookies and similar technologies. For full details, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), secure file storage, and access controls. However, no method of electronic transmission or storage is 100% secure.

10. International Transfers

Some of our service providers (Vercel, Google, Resend, Cloudflare) may process data outside the European Economic Area (EEA). These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at: