Privacy Policy

Last updated: 19 June 2026

Introduction and Scope

This Privacy Policy describes how FORDOX AI LTD ("we", "us", or "our"), a company registered in England and Wales and operating from 4 Fair View, Horsham, United Kingdom, RH12 2PY, collects, uses, stores, shares, and protects personal data when you visit our website at https://fordox.link, use our services, communicate with us, or otherwise interact with our IoT software development business. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation in the United Kingdom.

As an IoT software development company specialising in smart device applications, connected device platforms, and custom IoT solutions, we process personal data in the course of providing our services, managing client relationships, operating our website, and fulfilling our legal obligations. This policy applies to all personal data we process regardless of how it is collected or the format in which it is stored.

We encourage you to read this Privacy Policy carefully to understand our practices regarding your personal data. By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data processing practices, please do not use our website or services and contact us at dev.team@fordox.link with any questions.

Data Controller Information

The data controller responsible for your personal data is FORDOX AI LTD, located at 4 Fair View, Horsham, United Kingdom, RH12 2PY. For any data protection enquiries, requests to exercise your rights, or complaints regarding our processing of personal data, please contact us at dev.team@fordox.link or by telephone at +447445686543. We will respond to all legitimate requests within one calendar month, as required by applicable data protection law.

Where we process personal data on behalf of our clients in connection with IoT app development, connected device platform services, or IoT device management software projects, we may act as a data processor. In such cases, the relevant client acts as the data controller, and processing is governed by our data processing agreement with that client in addition to this Privacy Policy.

Categories of Personal Data We Collect

We collect and process various categories of personal data depending on your relationship with us and the nature of your interactions. Identity data includes your name, job title, company name, and professional identifiers. Contact data includes your email address, telephone number, postal address, and other communication details you provide when submitting forecast requests, contacting our observation desk, or engaging our IoT software development services.

Technical data includes your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device identifiers, and other technology on the devices you use to access our website. Usage data includes information about how you use our website, including pages visited, time spent on pages, navigation paths, and interaction patterns.

Communication data includes records of correspondence when you contact us by email, telephone, or through our forecast request form. This may include the content of your messages, enquiry details about your IoT project requirements, and our responses. Marketing data includes your preferences for receiving marketing communications from us and your communication preferences.

Project data includes information you provide about your connected device environment, technical requirements, business objectives, and other details necessary for us to assess conditions and prepare IoT software development proposals. We may also collect financial data including billing information and payment records where you engage our services.

How We Collect Personal Data

We collect personal data through direct interactions when you complete forms on our website, submit forecast requests, correspond with us by email or telephone, engage our IoT app development or connected device platform services, or attend meetings with our team. We collect data automatically through cookies and similar technologies when you browse our website, as described in our Cookie Policy.

We may receive personal data from third parties including business partners, service providers, publicly available sources such as Companies House and professional networking platforms, and referrals from existing clients. Where we receive personal data from third parties, we ensure appropriate lawful bases exist for processing and that you have been informed of our processing activities.

Purposes and Legal Bases for Processing

We process your personal data for specific purposes and rely on appropriate legal bases under UK GDPR. We process identity and contact data to respond to your enquiries, provide forecast proposals, and deliver IoT software development services under the legal basis of contract performance or steps taken at your request prior to entering a contract.

We process communication and project data to assess your connected device conditions, prepare stabilised response proposals, and deliver custom IoT solutions under the legal basis of legitimate interests in operating our business and providing high-quality IoT mobile solutions, or contract performance where a services agreement exists.

We process technical and usage data to administer and improve our website, ensure security, analyse usage patterns, and optimise user experience under the legal basis of legitimate interests in maintaining an effective and secure online presence. Where required, we obtain your consent for non-essential cookies and marketing communications.

We process financial data to manage billing, process payments, and maintain financial records under the legal basis of contract performance and legal obligation. We may process personal data to comply with legal obligations including tax reporting, regulatory requirements, and responding to lawful requests from public authorities.

We process personal data for marketing purposes including sending information about our IoT software development services, connected device platform capabilities, and industry insights where you have opted in to receive such communications, or where we have a legitimate interest and you have not opted out.

Data Sharing and Recipients

We may share your personal data with trusted third parties who assist us in operating our business and delivering IoT software development services. These include cloud hosting providers who store data on our behalf, email and communication platform providers, payment processors, professional advisers including solicitors and accountants, and IT support and security providers.

We require all third parties to respect the security of your personal data and to process it in accordance with applicable law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We may disclose your personal data where required by law, regulation, or legal process, or to protect the rights, property, or safety of {COMPANY}, our clients, or others. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity subject to equivalent data protection safeguards.

We do not sell your personal data to third parties. We do not share your personal data with third parties for their direct marketing purposes without your explicit consent.

International Data Transfers

Some of our third-party service providers may be located outside the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. These safeguards may include Standard Contractual Clauses approved by the UK Information Commissioner's Office, adequacy decisions, or other approved transfer mechanisms.

Where personal data is transferred to countries without an adequacy decision, we conduct transfer impact assessments and implement supplementary measures to ensure your personal data receives an equivalent level of protection. You may request information about the safeguards we use for international transfers by contacting us at {EMAIL}.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Forecast request and enquiry data is typically retained for twenty-four months from the date of last contact unless a business relationship is established. Client project data is retained for the duration of the engagement plus seven years to comply with legal and contractual obligations.

Technical and usage data collected through cookies is retained in accordance with our Cookie Policy. Marketing consent records are retained for as long as you remain subscribed plus twelve months after withdrawal of consent. Financial records are retained for seven years in accordance with UK tax and accounting requirements.

When personal data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls limiting personal data access to authorised personnel, regular security assessments and penetration testing, secure development practices for our IoT software, and staff training on data protection and information security.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections appropriate to the nature of the data we process and the IoT software development services we provide.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within seventy-two hours where required and inform affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Your Rights Under UK GDPR

Under UK data protection law, you have several rights regarding your personal data. The right of access allows you to request copies of your personal data. The right to rectification allows you to request correction of inaccurate or incomplete personal data. The right to erasure allows you to request deletion of your personal data in certain circumstances.

The right to restrict processing allows you to request that we limit processing of your personal data in certain circumstances. The right to data portability allows you to request transfer of your personal data to another organisation in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.

The right to object allows you to object to processing based on legitimate interests or for direct marketing purposes. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right not to be subject to automated decision-making including profiling that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at {EMAIL}. We will respond within one calendar month. We may need to verify your identity before processing your request. You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk if you believe our processing of your personal data violates applicable law.

Children's Privacy

Our website and IoT software development services are not directed at individuals under eighteen years of age. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us at {EMAIL} and we will take steps to delete such information promptly.

Third-Party Links

Our website may contain links to third-party websites, platforms, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will post the updated policy on this page with a revised effective date. For material changes, we will provide notice through our website or by direct communication where appropriate. We encourage you to review this Privacy Policy periodically.

Contact Information