Forfront Ltd. Marketing Privacy Notice
1. Who we are
Forfront Ltd. (“Forfront”, “we”, “us”, “our”) provides the e-shot™ platform and related services.
For the purposes of our marketing communications, Forfront Ltd. is the Data Controller.
Registered address:
Paternoster House, 65 St Paul’s Churchyard, London, EC4M 8AB
Trading address:
Global House, Ashley Avenue, Epsom, KT18 5AD
If you have any questions about this notice or how we use your data, you can contact us at:
dpo@forfront.com
2. What this notice covers
This notice explains how we collect and use your personal data when you:
subscribe to our e-newsletter
download content or register for events
submit your details via website forms or pop-ups
receive marketing communications from us
3. What personal data we collect
We may collect:
Contact details: email address (required), name, company, job title
Preferences: content interests, communication preferences
Engagement data:
email opens
link clicks
unsubscribe actions
Technical data:
IP address
date/time of sign-up
form or source of sign-up
We only collect data necessary to send and improve our communications.
4. How we collect your data
We collect your data when you:
complete a sign-up form on our website or landing pages
register for events or download content
obtain your details through direct interactions, events, or other business relationships
In some cases, we may receive your data from third-party sources (e.g. event organisers or partners), in which case we will ensure appropriate transparency at the point of contact.
5. Why we use your data (and our lawful basis)
We use your data to:
a) Send marketing communications
(e.g. newsletters, product updates, insights, events)
Lawful basis: Consent (Article 6(1)(a))
In some cases (existing business contacts), legitimate interests (Article 6(1)(f)) may apply where permitted under PECR (“soft opt-in”)
b) Manage your preferences and unsubscribe requests
Lawful basis: Legal obligation and legitimate interests
c) Improve our communications
(e.g. understanding engagement with emails)
Lawful basis: Consent (where tracking technologies are used), or legitimate interests where permitted and appropriate
6. Legitimate interests explanation
Where we rely on legitimate interests, these include promoting our services to existing business contacts and improving our communications. We assess and balance our interests against your rights.
7. Marketing rules (PECR)
We comply with the Privacy and Electronic Communications Regulations (PECR), which means:
We will only send marketing emails where:
you have given consent; or
you are an existing contact and we are promoting similar services (soft opt-in)
Every email:
clearly identifies Forfront Ltd. as the sender
includes a simple unsubscribe option
You can opt out at any time, free of charge
8. Email tracking and analytics
Our emails may include tracking technologies such as:
Tracking pixels (to detect opens)
Tracked links (to measure clicks)
This helps us:
understand which content is useful
improve relevance and frequency
This tracking may be considered profiling under data protection law; however, it does not involve automated decision-making with legal or similarly significant effects.
Where required, we rely on your consent to use tracking technologies in emails.
You can limit tracking by:
disabling images in your email client
unsubscribing from communications
We do not use this data to make automated decisions with legal or significant effects on you.
9. How we manage your preferences
You can:
unsubscribe at any time using the link in our emails
update your preferences via our preference centre (where available)
contact us directly to:
update your details
request deletion
Once you unsubscribe:
we will stop sending marketing emails
we retain a minimal record (e.g. email address) to ensure we honour your opt-out
10. How long we keep your data
We retain your data as follows:
Active subscribers: while you remain subscribed
Unsubscribed contacts: limited data retained indefinitely to maintain suppression lists. This is necessary to comply with legal obligations under PECR and to ensure we honour your opt-out requests.
Inactive contacts: may be removed after a period of inactivity
We review our marketing lists regularly.
11. Who we share your data with
We do not sell your data.
We may share it with trusted service providers who support our marketing activities, such as:
email delivery platforms
CRM systems
hosting and infrastructure providers
These providers:
act as data processors
are contractually bound to protect your data
A list of key sub-processors is available on request or via our website.
12. International data transfers
Where our service providers are located outside the UK, we ensure appropriate safeguards are in place, such as:
UK adequacy regulations (e.g. UK–US Data Bridge, where applicable)
UK International Data Transfer Agreements (IDTAs)
13. Your rights
Under UK GDPR, you have the right to:
access your personal data
correct inaccurate data
request deletion
restrict processing
object to processing (including marketing)
withdraw consent at any time
request data portability (where applicable)
14. Complaints
If you have a concern about how we use your data, please contact us first at:
dpo@forfront.com
We will investigate and respond promptly.
You also have the right to complain to the Information Commissioner’s Office (ICO).
15. Changes to this notice
We may update this notice from time to time. Where changes are material, we will notify you appropriately (e.g. by email or website notice).
Last updated: May 2026