Privacy and cookie policy

1. Introduction

1.1 We are committed to safeguarding the privacy of our website visitors, clients and service users.

1.2 This policy explains how we collect, use, store and protect your personal data when you interact with our website, services or communications.

1.3 For the purposes of UK data protection law, The Forrester Corporation Limited is the data controller in relation to your personal data.

1.4 We use cookies on our website. Where these are not strictly necessary for the operation of the site, we will request your consent.

2. Personal data we collect and how we use it

We may collect, store and process the following categories of personal data. The legal bases are those permitted under UK GDPR: consent, contract, legal obligation and legitimate interests.

2.1 Usage data

Data relating to how you use our website, including IP address, location, browser information, length of visit, page views and navigation paths. We use this to analyse website performance and improve services on the basis of our legitimate interests.

2.2 Account data

Your name, email address and login details where you create or access an account for a service. We use this to operate our website, support your account, secure access and administer services on the basis of contract and legitimate interests.

2.3 Service data

Information you provide when engaging with our consultancy, design, marketing or hosting services. This may include contact details, job role, employer information and stated interests. We use this to deliver services, manage communications, secure our systems and maintain backups on the basis of contract and legitimate interests.

2.4 Publication data

Information you choose to publish on our website or through our services. We use this to enable publication and administer our platform on the basis of legitimate interests.

2.5 Enquiry data

Information you supply when submitting an enquiry through our website or by email. We use this to respond to enquiries, provide quotes and offer relevant services on the basis of consent and legitimate interests.

2.6 Customer relationship data

Information relating to communications between us and our clients, including contact details and correspondence records. We use this to manage relationships, track engagement and promote relevant services on the basis of legitimate interests.

2.7 Notification and newsletter data

Information you supply when subscribing to newsletters or email updates. We use this to send relevant notifications and updates on the basis of consent.

2.8 Legal, insurance and risk management data

Information needed to establish, exercise or defend legal claims or to manage risk. We use this to protect our legal rights on the basis of legitimate interests and legal obligation.

2.9 Special categories of data

We do not intentionally collect special-category data. Please do not provide such data unless explicitly requested.

3. Providing your personal data to others

We may share your personal data with professional advisers and insurers where required for insurance, risk management or legal claims; with suppliers and subcontractors where necessary to deliver contractual services such as printing, web development, hosting, research or creative work; and with regulatory authorities where required by a legal or regulatory obligation.

We do not sell personal data and do not share it with third parties for their own marketing purposes.

4. International data transfers

4.1 Some of our contractors or service providers are based outside the UK or EEA.

4.2 Where data is transferred internationally, it is protected using an approved safeguard under UK GDPR, such as an adequacy decision or contractual safeguards, including Standard Contractual Clauses.

4.3 Data published or publicly posted through our website may be accessible worldwide.

5. Retention of personal data

5.1 We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

• Financial records are retained for at least six years in line with HMRC requirements.
• Service, enquiry and customer relationship data are typically retained for up to ten years unless you request deletion.

5.3 We may retain personal data where necessary for the establishment, exercise or defence of legal claims.

6. Security of your personal data

6.1 We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure.

6.2 Personal data may be stored on secure servers, encrypted devices or secure manual records.

6.3 Data transmitted between your browser and our server uses encryption where available.

6.4 No method of transmission over the internet is entirely secure and we cannot guarantee absolute protection.

6.5 You are responsible for keeping your passwords confidential.

7. Amendments

We may update this policy by publishing a revised version on our website. Please check this page periodically. We may notify you of significant changes by email or on our website.

8. Your rights under UK data protection law

You may have the right to:

• access your personal data;
• rectify inaccurate data;
• request erasure in certain circumstances;
• restrict processing;
• object to processing in certain contexts;
• data portability where data is processed by automated means;
• withdraw consent at any time; and
• lodge a complaint with the Information Commissioner’s Office.

To exercise any of these rights, contact us using the details in section 16.

9. Third-party websites

Our website may contain links to third-party sites. We are not responsible for their privacy policies or practices.

10. Children’s privacy

Our website and services are intended for users aged 18 and over. If we discover that we hold personal data relating to a child under 18, we will delete it.

11. Keeping your information up to date

Please contact us if your personal information needs to be corrected or updated.

12. Cookies

A cookie is a small text file placed on your device by a website. We use both session and persistent cookies. Cookies may store identifiers and information about your browsing behaviour but typically do not identify you personally.

13. Cookies we use

We use cookies for authentication, login status, personalisation, security, analysis and recording your cookie-consent preferences. The specific cookies in use may vary as our website evolves.

14. Cookies used by our service providers

14.1 Google Analytics uses cookies to gather information about website use. Read Google’s privacy policy.

14.2 Additional service providers may use cookies to support content sharing, embeds or performance measurement.

15. Managing cookies

Most browsers allow you to block or delete cookies through their privacy and security settings. Blocking cookies may affect website functionality.

16. Our details

This website is owned and operated by The Forrester Corporation Limited. You can contact us by post at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, through our contact form, by telephone on +44 (0)203 397 9630, or by email at hello@thefc.co.uk.