Privacy Policy

Introduction

UltraForge Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ultraforge.top, use our services, or interact with us.

This policy applies to all personal data we collect about you when you use our skincare ingredient analysis services, educational guides, consultations, and related offerings.

Data Controller Information

The data controller responsible for your personal information is:

Data We Collect

We may collect and process the following categories of personal information about you:

Information You Provide Directly

• Contact Information: Name, email address, phone number, postal address
• Account Information: Username, password, profile preferences
• Communication Data: Messages, inquiries, consultation requests, feedback
• Service-Related Information: Skin type, concerns, product preferences, consultation notes
• Payment Information: Billing details, payment method information (processed securely through third-party providers)

Information Collected Automatically

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar tracking technologies

How We Use Your Information

We use your personal data for the following purposes based on various legal grounds under GDPR:

Service Provision (Contract Performance)

• Providing ingredient analysis and consultation services
• Processing payments and managing your account
• Delivering educational content and guides
• Responding to your inquiries and support requests

Legitimate Interests

• Improving our services and user experience
• Conducting research and analysis for service development
• Preventing fraud and ensuring security
• Managing our business operations

Consent-Based Processing

• Sending marketing communications and newsletters
• Personalising content and recommendations
• Using cookies for analytics and advertising purposes

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We may share your personal information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our business, including:

• Cloud hosting and storage providers
• Payment processing companies
• Email and communication services
• Analytics and marketing platforms (Google Analytics, Google Ads)
• Customer support tools

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, courts, or regulatory bodies.

Business Transfers

In the event of a merger, acquisition, or sale of our business, your personal information may be transferred as part of that transaction.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Certification schemes and codes of conduct

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Account Data: Retained while your account is active and for 3 years after account closure
• Transaction Records: Retained for 7 years for accounting and legal compliance purposes
• Communication Records: Retained for 3 years for customer service and legal purposes
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity
• Website Analytics: Anonymised data retained for up to 26 months

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: Rights regarding automated processing and profiling
• Right to Withdraw Consent: Withdraw consent for processing based on consent

To exercise any of these rights, please contact us using the contact information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Staff training on data protection practices
• Incident response procedures

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

For significant changes, we may provide additional notice through email or prominent website notices.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with applicable law.