Privacy Policy
Last updated: 12 October 2025
1. Scope
We operate SketchForge via financeforge.pro to provide online drawing courses and related services to users in the United Kingdom.
For the purposes of UK GDPR, we act as the Data Controller for personal data you provide directly to us through this website and our course enrolment flows.
This policy explains what data we process, the legal bases we rely upon, how long we keep it, and how you can exercise your rights.
2. Data we process
2.1 Categories of personal data
- Identification and contact details: name, email address, phone number.
- Account and course data: enrolments, progress, preferences, support interactions.
- Transaction metadata: order IDs, timestamps, status. We do not store full card details on our servers.
- Usage and device data: IP address (stored briefly and truncated where feasible), browser type, pages viewed, timestamps, and error logs.
- Consent records: your cookie and marketing preferences, including theme preference and consent status stored locally on your device.
2.2 Purposes and lawful bases
- Provide and manage your account and courses: performance of a contract.
- Customer support and service communications: legitimate interests and/or performance of a contract.
- Transactional messages and receipts: legal obligation and performance of a contract.
- Security, fraud prevention, and diagnostics: legitimate interests and legal obligation.
- Optional communications (if enabled): consent. You may withdraw consent at any time.
2.3 Retention
- Account data: retained while your account remains active and for up to 24 months after closure, unless a longer period is required by law.
- Transactional records: retained for up to 6 years to comply with accounting obligations.
- Support tickets: up to 24 months after resolution.
- Logs and diagnostics: typically 90 days, unless needed to investigate security issues.
2.4 Sharing and processing
We use vetted processors to deliver our services (for example, payment processing and secure hosting). These processors act under our instructions and are bound by data protection terms.
Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses, where applicable.
2.5 Security
We employ layered security controls including encryption in transit (TLS), access controls, monitoring, and regular review of permissions. While no method is entirely risk-free, we work to protect your data against unauthorised access and misuse.
4. Your rights (UK GDPR)
Subject to conditions and exemptions under UK GDPR, you have the following rights:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion where we no longer need the data or you successfully object.
- Restriction: request we limit processing in certain circumstances.
- Portability: receive your data in a structured, commonly used, machine-readable format.
- Object: to processing based on legitimate interests or direct marketing.
- Withdraw consent: where processing is based on consent.
To exercise your rights, please contact us using the details below. We may need to verify your identity. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
5. Contact
Data Controller: SketchForge UK
Email: [email protected] — Phone: +44 20 7946 1832
For privacy-related queries, please include “UK GDPR Request” in your subject line and tell us which right you wish to exercise.