Privacy Policy
This Privacy Policy explains how SiteForge (“we”, “us”, “our”) collects, uses and protects personal data when you use our website at site-forge.uk and our document-generation services (the “Service”). We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
SiteForge is operated by William Hurt. For the purposes of UK data protection law, we are the “data controller” for the personal data you provide through the Service.
We are registered with the UK Information Commissioner’s Office (ICO) under data protection registration reference ZC156526.
If you have any questions about this policy or how we handle your data, contact us at support@site-forge.uk.
2. Data we collect
Account data
When you register, we collect your name, email address, password (stored in hashed form), company name and any company logo you upload.
Project & document data
When you create RAMS, risk assessments, COSHH assessments and method statements, we store the project details you enter — including site addresses, contractor and client details, scope of works, hazards, control measures and any files you upload.
Billing data
If you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card details; Stripe provides us with limited information such as your subscription status, billing reference and the last four digits of your card.
Usage & technical data
We collect information about how you use the Service, such as pages visited, features used, generation counts, your IP address, browser type and device information. Some of this is collected via analytics cookies — only with your consent (see Cookies).
3. How we use your data
- To create and manage your account and provide the Service.
- To generate the documents you request.
- To process payments and manage subscriptions.
- To respond to support requests and communicate with you about the Service.
- To monitor, maintain, secure and improve the Service.
- To comply with our legal obligations.
4. Legal bases for processing
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Providing the Service & managing your account | Performance of a contract |
| Processing payments | Performance of a contract |
| Service emails & support | Performance of a contract / legitimate interests |
| Security, fraud prevention & improving the Service | Legitimate interests |
| Analytics cookies | Consent |
| Meeting legal & accounting obligations | Legal obligation |
5. Sharing & third-party processors
We do not sell your personal data. We share it only with trusted service providers (“processors”) who help us run the Service, and only as needed:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment & subscription processing | Name, email, billing details |
| Anthropic (Claude AI) | AI generation of risk assessments & method statements | Project details you submit for generation |
| Google Analytics | Website usage analytics (consent-based) | Usage & technical data |
We may also disclose your data where required by law, to enforce our terms, or to protect the rights, property or safety of SiteForge, our users or others.
6. Data retention
We keep your account and project data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain certain records (for example, billing records for accounting and tax purposes).
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to respond to any incidents appropriately.
8. International transfers
Some of our processors (such as Stripe, Anthropic and Google) may process data outside the UK. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses to protect your data.
9. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data in certain circumstances.
- Object to or restrict our processing in certain circumstances.
- Request portability of data you provided to us.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, contact us at support@site-forge.uk.
10. Cookies
We use a small number of cookies to make the Service work and, with your consent, to understand how it is used. See our Cookie Policy for details and to change your preferences.
11. Contact & complaints
If you have a question or concern about how we handle your data, please contact us first at support@site-forge.uk. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.