Privacy Policy

Effective Date: 1 January 2026
Data Controller: Forma London Ltd, 8 Coldbath Square, London EC1R 5HL

1. Information We Collect

When you contact Forma London via telephone, email, or our digital project enquiry portal, we collect personal identifying information necessary to assess and respond to your construction or fit-out enquiry. This includes your name, corporate email address, contact telephone number, project address, and spatial brief parameters.

2. Legal Basis for Processing

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 under the lawful bases of Legitimate Interests (evaluating tenders and communicating with prospective clients) and Contractual Necessity (executing construction contracts and statutory health & safety duties under CDM 2015).

3. Data Retention & Security

Contact and procurement information is stored securely in encrypted cloud systems accessible only by verified directors and operational managers. Project documentation required under CDM 2015 regulations and UK Building Control is retained for statutory limitation periods (typically 6 or 12 years under JCT deed contracts).

4. Your Statutory Rights

Under UK GDPR, you have the right to request access to the personal data we hold about you, request rectification of inaccurate records, or request erasure of your data where statutory retention obligations do not apply. To exercise these rights, please write to our Data Privacy Officer at mail@forma.london.