Privacy Policy

This Privacy Policy is issued by ForgeRock Ltd ("ForgeRock", "we", "us", "our"), a company registered in the United Kingdom at 20, Wenlock Road, London, England, N1 7GU.

ForgeRock is a technology aggregator, orchestrator and development partner. We are not a licensed bank, payment institution or card issuer. Regulated financial services accessed through our platform are provided by licensed third-party partners, who act as independent data controllers for the personal data they process in connection with those services.

This policy applies to personal data we process about visitors to forgerock.ltd, prospective and current business clients, and individuals who contact us. It does not cover personal data processed by our partner banks, payment service providers or other independent controllers under their own privacy notices.

• Contact data you submit through forms, email or phone — including name, company, email address, phone number, country and the contents of your message.
• Commercial data related to the services you ask about or contract for, including business model, jurisdictions served and forecasted volumes.
• Technical data automatically collected when you use the website, such as IP address, device and browser information, approximate location and pages viewed.
• Communications records of emails, calls and meetings, where retained for relationship and service-quality purposes.

We process personal data to:

• respond to enquiries and provide requested information;
• scope, propose, deliver and support the services you engage us for;
• operate, secure and improve our website and internal systems;
• comply with applicable legal, regulatory and audit obligations;
• send service updates and, where permitted, relevant business communications.

Where the EU/UK GDPR applies, we rely on the following legal bases: performance of a contract or steps taken at your request prior to a contract; our legitimate interests in operating, marketing and securing our business; compliance with legal obligations; and, where required, your consent (which you may withdraw at any time).

We share personal data only as needed and only with:

• Partner financial institutions when necessary to scope, contract or operate the regulated services you request;
• Technology vendors that support our business — hosting, email, CRM, analytics, customer-support and development tooling — under contractual confidentiality and security obligations;
• Professional advisors such as lawyers, auditors and accountants where required;
• Authorities where required by law, regulation, court order or to protect our legal rights.

We do not sell personal data.

ForgeRock is incorporated in the United Kingdom and works with partners and vendors located in multiple jurisdictions. Where personal data is transferred outside the UK or EEA, we put in place appropriate safeguards — such as Standard Contractual Clauses or equivalent mechanisms — where required by applicable law.

We retain personal data only for as long as needed for the purposes set out in this policy and to comply with legal, accounting and reporting obligations. When data is no longer required, we delete or anonymise it.

We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit, network protections, logging and staff training. No system is completely secure; if you believe your data has been compromised, please contact us using the details below.

Our website uses strictly necessary cookies to function and may use analytics cookies to understand how visitors use the site. Where required by law, we ask for your consent before setting non-essential cookies. You can manage cookies through your browser settings.

Depending on the laws that apply to you, you may have rights to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us at info@forgerock.ltd. You also have the right to lodge a complaint with a competent data-protection authority.

Our website and services are intended for businesses and professionals. We do not knowingly collect personal data from children under 16.

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be highlighted on this page.

Questions, requests or complaints about this policy or our handling of personal data can be sent to:

• ForgeRock Ltd
• Email: info@forgerock.ltd
• Phone: +44 0734 522 7557
• Address: 20, Wenlock Road, London, England, N1 7GU, United Kingdom

Open contact form