Privacy Policy

North & Forge Models respects your privacy. This policy explains how we use personal information when you browse our website, contact us or place an order.

Last updated: 13 October 2026

Who is responsible for your information?

North & Forge Models is responsible for the personal information it collects and uses for its shop operations.

Information we collect

When you place an order, we may collect your name, email address, delivery address, items ordered, amounts paid and information about the status of your order. If you contact us, we also process the information you include in your message.

Our website and service providers may process technical information needed to operate and secure the website, such as IP addresses and request or error logs.

How we use your information

We use personal information to process and deliver orders, send order confirmations and service messages, answer enquiries, handle returns and refunds, keep appropriate business records, and protect the website and transactions against fraud or misuse.

Our lawful bases

We process information needed to fulfil your order or respond to requests made before purchase on the basis of contract. We retain records where necessary to meet legal obligations, including accounting and tax requirements. We may process limited information for website security, fraud prevention and customer support under our legitimate interests, where those interests are not overridden by your rights.

We do not use order details to send marketing emails without an appropriate lawful basis and any required consent.

Payments and service providers

We use Stripe to provide secure checkout and payment processing. Payment card details are entered through Stripe's checkout service; we do not receive or store your full card number.

We use Supabase for shop and order records, Cloudflare to host and protect our website, and Resend to deliver transactional emails. These providers process relevant information to supply their services. Delivery companies receive the details needed to deliver your order.

During our current testing period, checkout uses Stripe test mode rather than live payments.

Sharing and international transfers

We do not sell your personal information. We share it only where needed to operate the shop, fulfil an order, comply with the law or protect our legitimate interests. Some service providers may process information outside the UK. Where required, we rely on appropriate safeguards under UK data protection law.

How long we keep information

We retain order and transaction records for as long as reasonably necessary for customer service, legal and tax obligations, and resolving disputes. Other enquiries and technical records are kept only as long as needed for their purpose. We review and delete information when it is no longer required.

Cookies and website technology

The website may use essential browser storage or similar technologies to support features such as your shopping basket, checkout and security. Third-party services may use technologies necessary to provide their services. If we introduce non-essential analytics or advertising cookies, we will provide the information and choices required by law before using them.

Your rights

Subject to applicable legal conditions, you can ask to access, correct or delete your personal information, restrict or object to certain processing, or receive a portable copy of information where relevant. You may also withdraw consent where processing relies on it.

To make a request, email kevin.north526@gmail.com. We may need to verify your identity before responding.

If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy when our services or legal requirements change. The current version will be published on this page.