Privacy Policy
1. Who we are
Forge Sales ("we", "us", "our") provides e-commerce website development services in Malaysia. Our registered business details are: [Business registration number], [Registered address].
For any question about this policy or your personal data, contact us at hello@forgesales.my.
2. What data we collect
We only collect what we need to reply to your enquiry and deliver the service:
| What | Why | How |
|---|---|---|
| Name | To address you and identify your enquiry | Provided by you via form, WhatsApp or email |
| Phone / WhatsApp number | To reply to your enquiry | Provided by you |
| Business name and what you sell | To recommend the right package | Provided by you, optional |
| Project content (logos, product photos, product data) | To build your store, only after you engage us | Provided by you during onboarding |
| Basic technical data (browser type, pages visited) | To keep the site working and understand what's useful | Collected automatically by the hosting provider |
We do not collect payment card details on this website. Where a payment gateway is integrated into a client store, card data is handled entirely by the gateway provider, not by us.
3. How we use your data
- To respond to your enquiry and discuss your requirements.
- To prepare a quotation or proposal.
- To deliver, support and maintain a website we have built for you.
- To meet legal, accounting and tax obligations.
We do not sell your data, and we do not add you to a marketing list without your separate consent.
4. Who we share it with
We share data only with providers necessary to run the service:
- Hosting and infrastructure providers — to host this website and client stores.
- Payment gateway providers — where a client store processes online payments.
- Communication tools — WhatsApp (Meta) and email providers, when you contact us through them.
- Authorities — where required by Malaysian law.
Some of these providers process data outside Malaysia. Where that happens, we rely on the provider's standard contractual protections.
5. How long we keep it
- Enquiries that don't become projects: up to 12 months, then deleted.
- Client project records: for the duration of the engagement plus 7 years, to meet Malaysian accounting and tax requirements.
- Website analytics: typically 14 months, depending on the provider's retention setting.
6. Your rights
Under the Personal Data Protection Act 2010 (Malaysia), you may:
- Request access to the personal data we hold about you.
- Request correction of inaccurate data.
- Withdraw consent for future processing.
- Request that we limit how your data is used.
To exercise any of these, email hello@forgesales.my. We respond within 21 days. We may need to verify your identity first.
7. Cookies
This website does not set advertising or tracking cookies. Our hosting provider may set strictly necessary technical cookies for security and load balancing. If we add analytics later, we will update this section and, where required, ask for consent.
8. Security
This site is served over HTTPS. Access to client project data is limited to people who need it to do the work. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the size of our operation.
9. Children
Our service is intended for businesses. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, contact us and we will delete it.
10. Changes to this policy
If we change how we handle personal data, we will update this page and change the "last updated" date above. Material changes affecting existing clients will be communicated directly.
11. Contact
Email: hello@forgesales.my
WhatsApp: message us from the contact section
Location: Malaysia