Privacy Policy

Who processes your data, what for and what your rights are. No small print.

Data controller

Owner: Drive Forge
Email: [email protected]

What data we process, why and on what basis

• Quote requests and enquiries (form or email): name, email, phone, company, the description of the part and any files you attach. We use them to assess your project and reply to you. Legal basis: taking pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Orders and purchases: if you accept a quote or buy in the shop, your contact, shipping and billing details. We use them to manufacture, deliver, invoice and handle the warranty. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with tax and accounting obligations (Art. 6(1)(c) GDPR).

Fields marked with * are required for us to reply. We do not send advertising, build profiles or make automated decisions. If you are under 14, please do not send us any data.

How long we keep them

Quote requests and their files are deleted automatically after 12 months if they do not become an order. Order and invoice data are kept for the periods set by law: 6 years for accounting records (Art. 30 of the Spanish Commercial Code) and, in any case, for as long as the warranty lasts.

Who we share them with

We do not sell or share your data. Only the providers we need to deliver the service have access to it, under a data processing agreement:

• Cloudflare: website hosting, storage of requests and files, and order records.
• Brevo: email delivery (an EU company).
• Stripe: card payments in the shop. Stripe processes your card details directly; we never see them.
• The carrier that delivers your order and our tax advisers, where applicable.

Authorities such as the tax office will only receive data when the law requires it.

Transfers outside the EU

Cloudflare and Stripe may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which is covered by a European Commission adequacy decision, and also apply standard contractual clauses.

Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data by writing to [email protected]. We reply within one month at most. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Security

The website is encrypted (HTTPS), the files you send us are kept in private storage and the internal download links expire after 30 days.

Last updated · 02/11/2026