Privacy Policy
Effective: January 16, 2024 ยท Last updated: November 1, 2026
Forge Kinetic is a division of Fxiation Digitals Pvt Ltd, based in Navi Mumbai, Maharashtra, India. This policy explains what personal data we collect through our website, https://forgekinetic.com/, why we collect it, who we share it with, and the choices and rights you have. When this policy says "we", "us" or "our", it means Fxiation Digitals Pvt Ltd.
Personal data is any information about you that can identify you, on its own or combined with other information. That includes your name and email address, and it can include details about your device and how you use a website.
Our website links to other sites and services. They have their own privacy policies, and this policy doesn't cover anything you do after you leave our site.
Who Is Responsible for Your Data
Fxiation Digitals Pvt Ltd decides why and how your personal data is processed through this website. Under the EU and UK GDPR, that makes us the data controller.
Privacy contact: Privacy & Grievance Officer, Fxiation Digitals Pvt Ltd, hello@forgekinetic.com. They can answer any question about how we handle your personal data.
Information We Collect
When you contact us
Our contact form asks for your first name, last name, email address, business name, and a description of the challenge you'd like help with. We use this to reply to you and, if you ask, to prepare a proposal. The form sends you a copy of your message by email.
When you request the Automation Readiness report
To email you the report, we ask for your email address and, if you choose to give it, your name. The report includes the answers you gave in the checklist: the items you ticked, your business size, your country, and the score and estimates the checklist worked out. We receive a copy so we can follow up if you'd like help. The score and estimates are for your information only. We don't make any decision about you based solely on automated processing.
Do you have to give us this information?
No. You never have to give us personal data, and no law or contract requires it. But without your name and email, we can't reply to you or send you the report.
Security checks on our forms
Both forms use Cloudflare Turnstile to check that a real person is sending them, not a bot. Turnstile looks at signals from your browser to decide this.
Log data
Our website is hosted on Cloudflare. Like most web servers, Cloudflare records standard request data when you visit, such as your IP address, browser type, the pages you request and the time. This is used to deliver the site and protect it from attacks.
Analytics
We use Google Analytics to understand which pages people visit and how they move around the site. Google Analytics uses cookies. We also use Cloudflare Web Analytics, which counts visits without setting cookies. The next section explains when analytics cookies are used.
Client system access
As a business process automation provider, we may need access to client systems, accounts, and data to deliver a project. This may include:
- Access credentials for automation platforms (Zapier, Make, etc.)
- CRM system access
- Email and communication platform access
- Business data needed for the automation work
This access is limited to what the project needs, used only for the contracted services, and can be revoked at your request when the project ends. We don't keep client system data beyond what's needed to deliver the service. The details are set out in each client agreement.
Cookies and Your Consent
We use a small number of cookies. Necessary cookies keep the site working, such as remembering your cookie choice. Analytics cookies come from Google Analytics. Our Cookie Policy lists every cookie we use.
If you're in the European Economic Area, the UK, Switzerland or India, analytics cookies stay off until you accept them in our cookie banner. Elsewhere, analytics is on by default, but it stays off if your browser sends a Global Privacy Control signal. Wherever you are, you can change or withdraw your choice any time using , which is also at the bottom of every page. Withdrawing is as easy as giving consent, and it doesn't affect anything that happened before you withdrew.
When you make a choice in the cookie banner or in Cookie settings, we keep a record of it so we can show that consent was given. The record holds a random ID that's also stored in your browser, your choices, your country, which of our websites you were on, and the time. It doesn't include your name, email or IP address. Fxiation Digitals Pvt Ltd keeps one consent record for all its websites. We keep these records so we can show what you chose if you or a regulator asks. We delete these records after two years.
How We Use Your Information
We use personal data only for the purposes below, and we won't use it in a way that doesn't fit them:
- to reply to your enquiry and prepare proposals you ask for
- to send you the Automation Readiness report you requested
- to deliver the services in a client agreement
- to keep our website and forms secure
- to understand how our website is used and improve it, where you've agreed to analytics or where analytics applies by default as described above
- to meet our legal obligations
We don't sell your personal data, and we don't use it for advertising.
Who We Share It With
We use a few service providers to run the website and handle your messages. They process data on our behalf and only for these purposes:
- Cloudflare: website hosting and security, Turnstile bot checks on our forms, Cloudflare Web Analytics, and storage of the consent record.
- Google: Google Workspace, which delivers form messages and reports by email to you and to our inbox, and Google Analytics, when analytics is on.
We may also share personal data:
- with Fxiation Digitals Pvt Ltd's employees, contractors and professional advisors who need it to do their work
- with courts, regulators and law enforcement when the law requires it, or to establish, exercise or defend our legal rights
- with a buyer or successor if our business, or substantially all of its assets, is transferred, in which case they must follow this policy
International Transfers
When you send us personal data, it comes directly to us in India. Our service providers, Google and Cloudflare, may process it in the United States and other countries. For data from the European Economic Area or the UK, they rely on recognised safeguards. These include the EU-US Data Privacy Framework (and its UK Extension) and the European Commission's standard contractual clauses (with the UK Addendum). India doesn't have an EU or UK adequacy decision. Email us if you'd like a copy of the safeguards.
How Long We Keep Your Information
- Enquiries and report requests, and the related logs: at least one year. After that, only as long as we need them for ongoing work with you. Then we delete them or remove anything that identifies you.
- Consent records: two years.
- Client project data: as set out in the client agreement.
We may keep some data longer if the law requires it, for example for tax or accounting records.
Security of Your Information
We protect personal data with reasonable security measures to prevent loss, theft, and unauthorised access, use or disclosure. No method of sending or storing data online is completely secure, so we can't guarantee absolute security. If a data breach affects you, we'll tell you and the relevant authorities as the law requires.
Children's Privacy
Our services are for businesses. We don't aim them at children, and we don't knowingly collect personal data about anyone under 18. If you're under 18, please don't use our forms or accept analytics cookies. If you think a child has sent us their data, email us and we'll delete it.
Your Rights
Wherever you are, you can ask us to:
- tell you what personal data we hold about you, how we use it, and who we've shared it with
- correct, complete or update it
- delete it
- stop sending you marketing emails
- withdraw any consent you've given, including through Cookie settings
To use any of these rights, or to raise a concern with us first, email our Privacy & Grievance Officer at hello@forgekinetic.com. Tell us the email address you used with us, so we can find your data. We'll reply within one month. We won't treat you differently for using your rights.
Additional Disclosures for the EU (GDPR)
Legal bases for processing
Consent: for analytics cookies, where you've accepted them. You can withdraw consent at any time; this doesn't affect processing that already took place.
Legitimate interests: to reply to enquiries from you or your business, send the report you ask for and follow up once, keep the site and forms secure, and keep the consent record. Our interest is in running and growing our business and protecting our website. You can object to this processing at any time.
Steps before a contract, or the contract itself: where you personally ask for a proposal or become our client.
Legal obligation: where the law requires us to keep or use data.
Your rights under GDPR
As well as the rights above, you can ask us to restrict processing, object to processing based on legitimate interests, and receive your data in a portable format such as CSV. You can also complain to the data protection authority in your country.
Additional Disclosures for the UK (UK GDPR)
The legal bases and rights in the EU section above also apply to you. We'll answer a subject access request within one month. If we can't resolve your concern, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
Additional Disclosures for U.S. States
This section applies to residents of U.S. states with comprehensive consumer privacy laws.
Do Not Track and Global Privacy Control
We don't respond to the older "Do Not Track" browser signal. We do honour Global Privacy Control: if your browser sends it, analytics stays off unless you turn it on in Cookie settings.
Categories of personal information
In the past 12 months, we've collected these categories of personal information listed in the CCPA:
- Identifiers, such as name, email address and IP address.
- Internet activity, such as how you interact with our website.
We don't sell or share personal information for cross-context behavioural advertising. Google Analytics on our site runs with Google Signals and ad personalisation turned off.
Right to know and delete
You can ask us what personal information we've collected about you in the past 12 months, where it came from, why we collected it, who we disclosed it to, and the specific pieces we hold. You can also ask us to delete it. Under California Civil Code Section 1798.83, you can also ask what we've disclosed to others for their direct marketing; we don't disclose personal information for that purpose. Email us to make any of these requests.
Additional Disclosures for Canada (PIPEDA)
You can access the personal information we hold about you, correct it, and withdraw consent for any activity you've agreed to. If we can't resolve your concern, you can contact the Office of the Privacy Commissioner of Canada:
30 Victoria Street
Gatineau, QC K1A 1H3
Toll Free: 1.800.282.1376
www.priv.gc.ca
Additional Disclosures for Australia
Where your personal information is subject only to Australian privacy law, some of our service providers may not be regulated by the Privacy Act and the Australian Privacy Principles. If they breach those principles, you may not be able to seek redress under the Privacy Act.
Changes to This Policy
We may update this policy when our services, our tools or the law change. We'll post the new version on this page and update the date at the top. If a change affects how we use data you've already given us, and the law requires it, we'll ask for your consent again.
Contact Us
For any question or concern about your privacy, contact our Privacy & Grievance Officer:
Forge Kinetic
A division of Fxiation Digitals Pvt Ltd
Navi Mumbai, Maharashtra, India
Email: hello@forgekinetic.com