Privacy Policy
Last updated: September 2026
This policy explains what personal data designforward collects, why, and the rights you have over it. We collect as little as possible and never sell your data.
1. Who we are
designforward is a product design subscription service based in the United Kingdom. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), designforward is the data controller of the personal data described in this policy.
You can contact us about privacy at any time at hello@designforward.io.
2. What we collect
Contact details: when you book a call or email us, we collect your name, email address, and anything you choose to tell us about your project.
Client and project information: if you subscribe, we process your billing details (handled by our payment provider, so we never see full card numbers), company details, and the materials, briefs, and files you share with us.
Usage data: like most websites, we may collect basic technical information such as your browser type, device, pages visited, and approximate location, to understand how the site is used and keep it secure.
3. How we use your data and our lawful bases
To respond to enquiries and run booked calls, based on our legitimate interest in running the business, or steps towards a contract at your request.
To deliver your subscription: managing your account, taking payment, and producing the work, as performance of our contract with you.
To send occasional service updates (such as changes to terms or pricing), as performance of contract or legitimate interest. You can opt out of anything non-essential at any time.
To meet legal and accounting obligations, such as keeping tax records, as a legal obligation.
We do not sell your personal data, and we do not use your confidential project materials for anything other than delivering the service.
4. Cookies
This site uses only the cookies or similar storage needed for it to function and, where enabled, privacy-respecting analytics to understand aggregate site usage. We do not use advertising or cross-site tracking cookies.
You can control or delete cookies through your browser settings at any time.
5. Third-party processors
We use a small number of trusted providers to run the service, for example website hosting, email, scheduling, payment processing, and design tools such as Figma.
Each provider processes data only on our instructions and under appropriate data protection terms. A current list of processors is available on request.
6. International transfers
Some of our providers store or process data outside the UK. Where that happens, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or standard contractual clauses.
7. How long we keep data
Enquiry emails are kept for up to 24 months. Client records and project files are kept for the life of the subscription and up to 6 years afterwards, to meet legal, tax, and accounting requirements. Data is deleted or anonymised when it's no longer needed.
8. Your rights
Under UK GDPR you have the right to access your personal data, correct it, have it erased, restrict or object to its processing, and receive a portable copy. You also have the right to withdraw consent where consent is the basis for processing.
To exercise any of these rights, email hello@designforward.io and we'll respond within one month.
If you're not satisfied with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first.
9. Changes to this policy
We may update this policy from time to time. The current version is always on this page, and material changes will be flagged to active subscribers by email.