Old Forge Technologies is a sole-trader consultancy operated by Andrei Trimbitas from Bury Road, Kennett, Cambridgeshire CB8 7PP, United Kingdom. For any privacy matter, write to info@oldforge.tech. This policy is written in plain English because we're a small workshop, not a law firm.
§ 01Who we are
The data controller is Old Forge Technologies, a sole-trader business registered in the United Kingdom. Andrei Trimbitas is the sole controller of the data described in this policy.
Address: Bury Road, Kennett, Cambridgeshire CB8 7PP, UK
Email: info@oldforge.tech
Phone: +44 1223 297 870
§ 02What we collect
When you write to us. The correspondence form, the scheduling page and the chat widget each collect only what you type: your name, your email address, and optionally a phone number and company name, together with the content of your enquiry.
Alongside it. A contact-form submission is stored with the IP address it came from and your browser's user-agent string. These are kept to detect duplicate and automated submissions, not to identify you, and they are deleted with the enquiry.
When you book a call. The date and time you choose, the details above, and the brief you give for the call. This is written into a calendar entry so the appointment exists somewhere other than an inbox.
When you use the chat. Your messages and the assistant's replies are stored so the conversation can be read back and answered properly. See retention below, and see § 04 for where the model runs.
If you sign in. Account access is handled by our own
Keycloak server at id.oldforge.tech. It holds the
username, email address and password you registered with. There is
no third-party identity provider and no social login.
Analytics: none. There is no Google Analytics on this site, no tracking pixel, no advertising tag and no fingerprinting. Until August 2026 there was Google Analytics; it was removed rather than wrapped in a consent banner. The web server keeps a standard access log - IP address, page, timestamp, referrer, user agent - which is rotated and deleted after fourteen days and is used only for debugging and abuse.
The chat widget also uses your browser's own
localStorage to remember your conversation between
visits. That never leaves your device. See the
cookie policy for the complete list.
§ 03How we use it
Enquiries and bookings: to reply to you, understand what you need, and - if it goes further - to carry out the work. The lawful basis is legitimate interests before an engagement exists, and performance of a contract once one does. You will never be added to a marketing list, because there isn't one.
Chat conversations: to answer you at the time, and afterwards to see which questions come up and where the assistant answers badly. Legitimate interests. Nothing said in the chat is used to train any model.
Server logs: to keep the site up and to spot abuse. Legitimate interests.
Account data: to let you sign in. Performance of a contract, or legitimate interests where no contract exists yet.
§ 04Who we share it with
Your data is never sold, and never shared with marketing partners, data brokers or advertisers. Full stop.
A short list of providers process data on our behalf:
- IONOS - the virtual server this website, its database and the sign-in service all run on. Hosted in Germany.
- IONOS SE - the language model behind the chat widget, running openai/gpt-oss-120b in Germany. Your messages are sent there to be answered, and are not used to train it.
- IONOS Mail - delivers email between you and us.
Each has a data-processing agreement in place. Beyond these, data is disclosed only where the law requires it.
§ 05Data retention
Enquiries and correspondence: kept for up to two years, then deleted - unless an engagement begins, in which case records are kept for the life of that engagement plus six years, as UK tax and contract law requires.
Chat conversations: ninety days, then deleted automatically. You can erase yours immediately with the bin icon in the chat widget, which clears both the copy in your browser and the copy on the server.
Appointments: kept for two years so there is a record of what was discussed and when.
Server access logs: fourteen days, then rotated away.
Account data: kept while the account exists. Ask and it is deleted.
§ 06Your rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct anything that's inaccurate
- Request deletion ("the right to be forgotten")
- Object to processing
- Request portability - a machine-readable export
- Withdraw consent at any time (where we rely on it)
- Lodge a complaint with the Information Commissioner's Office
To exercise any of these, email info@oldforge.tech. We'll respond within thirty days - usually much sooner.
§ 07On cookies
The site sets no analytics, advertising or tracking cookies at all.
What it stores is a handful of localStorage entries for
the chat widget and a session cookie if you sign in - both strictly
necessary, both listed item by item in the
cookie policy.
§ 08Contact us
For any privacy matter, correction, deletion request, or question:
Email: info@oldforge.tech
Post: Bury Road, Kennett, Cambridgeshire CB8 7PP, United Kingdom