forma®

Legal

Privacy Policy.

This policy explains what personal data we collect, why we use it, who we share it with and the rights you have. It covers this website, project enquiries and our client portal.

Last updated 22 October 2026

01Who we are

Forma Studio Ltd (trading as Forma Dev) is the data controller for the personal data described here, based in Scotland. For any privacy matter, contact us at hello@formadev.co.uk.

02The information we collect

We collect:

  • Enquiry details you send us through our project brief or by email: your name, email, and optionally your company and phone number, the type of work you need, your timing and budget range, and your message.
  • Client portal data for active projects: your name, email and company, messages you send us, files and deliverables, milestone approvals and the name you type to sign off work.
  • Billing details needed to issue and record invoices.
  • Technical data created when you visit, such as your IP address, browser type and pages viewed, used for security and aggregate analytics.

03How and why we use it

We use your personal data to:

  • respond to your enquiry and discuss a possible project (our legitimate interest in answering you, and steps towards a contract);
  • deliver projects and run the client portal (performance of our contract with you);
  • issue invoices and keep accounting records (legal obligation and legitimate interest);
  • keep the site secure and prevent abuse (legitimate interest);
  • understand, in aggregate, how the site is used so we can improve it (legitimate interest, using privacy-friendly analytics).

We do not sell your personal data, and we do not use it for third-party advertising.

04Cookies and analytics

We use a small amount of essential browser storage and privacy-friendly, cookieless analytics. Full detail, and how to manage your choice, is in our Cookie Policy.

05Who we share it with

We share personal data only with service providers who help us run the studio, and only as needed. These include:

  • Cloudflare, which hosts the site and provides our database, file storage, transactional email, bot protection and analytics.
  • Google (Google Workspace), which provides our email.
  • Our payment processor (for example Stripe), where you pay by card.
  • Professional advisers and authorities where we are required to share information by law.

These providers act either as our processors, handling data on our instructions, or as their own controllers under their own privacy policies.

06International transfers

Some of our providers process data outside the UK. Where they do, we rely on appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, so your data stays protected.

07How long we keep it

We keep enquiry data for up to 24 months after our last contact, unless it becomes part of a project. We keep project and portal data for the life of the engagement and a reasonable period afterwards. We keep billing and accounting records for at least six years to meet our legal obligations. We then delete or anonymise data we no longer need.

08How we protect it

We use encryption in transit (HTTPS), access controls, signed session cookies and parameterised database queries, and we limit access to those who need it. No system is completely secure, but we take reasonable steps to protect your data and to deal with any incident promptly.

09Your rights

Under UK data-protection law you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, email hello@formadev.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to put things right first.

11Changes to this policy

We may update this policy from time to time. The latest version is always published here, with the date it last changed shown at the top.

12Contact

For any question about your data or this policy, email hello@formadev.co.uk.

This document is provided for transparency and may be revised. It does not constitute legal advice.