Website Privacy Policy

e-shot™ Website Privacy Policy 

1. Introduction 

Welcome to e-shot.net (the "Website"), owned and operated by Forfront Ltd. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website, use our services, or interact with us. We comply with all applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data Protection and Digital Information Act 2023 and the UK Data Use and Access Act 2025 (DUAA). 

We encourage you to read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. 

Forfront Ltd. is registered with the Information Commissioner’s Office (ICO). Our registration number is Z574715X, and our registration date is January 12, 2001. 


2. Information We Collect 

We may collect and process the following types of personal data about you: 

  • Information You Provide Directly:  

  • Contact Information: When you fill in forms on our Website (e.g., contact forms, demo requests, newsletter sign-ups), we collect information such as your name, email address, phone number, job title, and company name. 

  • Communication Data: If you contact us directly (e.g., via email, phone, or support channels), we may keep a record of that correspondence, and the information provided. 

  • Subscription Preferences: Details of your preferences for receiving marketing communications from us. 

  • Information We Collect Automatically:  

  • Website Usage Data: When you visit our Website, we automatically collect information about your visit, including your IP address, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths. 

  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Website and hold certain information. For more details, please see Section 8 (Cookies and Tracking Technologies). 

  • Information from Third Parties:  

  • We generally do not collect personal data from third parties, except in cases where you have been referred to our website from another website. In such instances, we may receive information from the referring website, but this information is not actively used by us for profiling or direct marketing initiated by that referral. 


3. How We Use Your Information

We use the information we collect for the following purposes: 

  • To Provide and Improve Our Services:  

  • To operate and maintain our Website. 

  • To provide you with information, products, or services that you request from us. 

  • To respond to your inquiries, comments, and support requests. 

  • To improve the user experience and functionality of our Website and services. 

  • For Communication:  

  • To send you email alerts, newsletters, and other marketing communications that you have opted into or that we believe may be of interest to you based on your preferences or our legitimate interests (you can opt-out at any time). 

  • To notify you about changes to our services or policies. 

  • For Analytics and Performance:  

  • To understand how users interact with our Website and services, enabling us to improve and optimise them. 

  • To gather feedback to help us improve our offerings. 

  • For Security and Legal Compliance:  

  • To ensure the security of our Website and services. 

  • To comply with our legal obligations, enforce our terms of use, and protect our rights and the rights of others. 


4. Legal Basis for Processing Your Information 

We will only collect and process your personal data where we have a lawful basis to do so. The lawful bases we rely on include: 

  • Consent: Where you have given us explicit consent to process your personal data for a specific purpose (e.g., signing up for marketing emails). You can withdraw your consent at any time. 

  • Contractual Necessity: Where processing your personal data is necessary for the performance of a contract with you (e.g., to provide services you have requested). 

  • Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided these interests are not overridden by your rights and interests. Our legitimate interests include providing and improving our services, marketing our products, and ensuring the security of our Website. 

  • Legal Obligation: Where we need to process your personal data to comply with a legal or regulatory obligation. 

  • Under DUAA 2025, where we rely on legitimate interests to process your personal data, we conduct a Legitimate Interests Assessment (LIA) to ensure your rights are not overridden. 

  • DUAA 2025 reinforces the need for transparency when relying on legitimate interests, and we ensure this through clear communication and data minimisation. 


5. Data Sharing and Disclosure 

We do not sell, rent, or trade your personal information with third parties for their marketing purposes. 

We may share your personal data with the following categories of third parties: 

  • Service Providers: We may share your information with trusted third-party vendors, consultants, and other service providers who perform services on our behalf (e.g., website hosting, data analysis, email delivery, customer service). These providers are contractually obligated to protect your data and use it only for the purposes for which it was disclosed. 

  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). This includes for national security or law enforcement requirements. 

  • Protection of Rights: We may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law. 

  • Business Transfers: In the event of a merger, acquisition, reorganisation, bankruptcy, or other similar event, your personal data may be part of the transferred assets. We will notify you via email and/or a prominent notice on our Website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data. 


6. Data Storage and Security 

  • Data Storage: Your personal data is stored on secure servers located in the United Kingdom (UK). 

  • Data Security: We are committed to ensuring that your information is secure. We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, but are not limited to:  

  • Encryption of website traffic (HTTPS). 

  • Regular security assessments. 

  • Access controls to limit access to personal data to authorised personnel. 

  • Internal policies and training for staff on data protection. 

  • In line with the new UK Data Use and Access Act 2025, we maintain records of processing activities and conduct data protection impact assessments (DPIAs) where processing presents a high risk to individual rights and freedoms. 

  • Data Retention: We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means, and the applicable legal requirements. 


7. Your Data Protection Rights 

Under data protection law (including the UK GDPR), you have rights regarding your personal data. These rights include: 

  • The Right to Access: You have the right to request copies of your personal data. 

  • The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. 

  • The Right to Erasure (The "Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions. 

  • The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions. 

  • The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions (e.g., for direct marketing purposes or processing based on legitimate interests). 

  • The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions. 

  • Rights Related to Automated Decision Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (we currently do not engage in such automated decision making). 

  • The Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing before its withdrawal. 

  • Under DUAA 2025, you have the right to object to automated decision-making that has a significant effect on you, and we confirm that we do not currently engage in such processing. 

  • You have the right to be informed if your data is used in training artificial intelligence or machine learning systems. 


How to Exercise Your Rights: 

If you wish to exercise any of these rights, please contact us using the details provided in Section 12 (Contact Us). We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will respond to all legitimate requests within one month. 

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). You can find their contact details at: https://ico.org.uk/concerns/. 


8. Cookies and Tracking Technologies 

We use cookies and similar tracking technologies (like web beacons and pixels) to collect and use personal information about you, including to understand website usage and for analytics purposes. 

  • What are Cookies? Cookies are small data files that are placed on your computer or mobile device when you visit a website. 

  • Types of Cookies We Use:  

  • Essential Cookies: Necessary for the website to function properly (e.g., session cookies). 

  • Analytical/Performance Cookies: Allow us to recognise and count the number of visitors and see how visitors move around our website. This helps us improve the way our website works. 

  • Functionality Cookies: Used to recognise you when you return to our website and enable us to personalise content for you and remember your preferences. 

  • Targeting/Marketing Cookies: These cookies may be set through our site by us or our advertising partners to show you relevant adverts on other sites. 

  • Managing Cookies: Most web browsers allow some control of most cookies through the browser settings. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. 


9. Links to Other Websites 

Our Website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question. 

If you came to our website from another website, we may receive information from the other website, but we do not use this information. 


10. International Data Transfers 

As stated, your data is primarily stored on secure servers within the UK. If we transfer your personal data out of the UK/European Economic Area (EEA) to our service providers, we will ensure that a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: 

  • The country to which the personal data is transferred has been deemed to provide an adequate level of protection for personal data by the UK Government or European Commission. 

  • We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (Standard Contractual Clauses). 

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK/EEA. 


11. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. For material changes, we may also notify you through email or a prominent notice on our Website. 

Where material changes affect how your data is used under DUAA 2025, we will take reasonable steps to notify you directly (e.g., via email or platform alerts). 


12. Contact Us 

If you have any questions or concerns about this Privacy Policy, our data protection practices, or if you wish to exercise any of your rights, please contact us at: 

Forfront Ltd. Global House, Ashley Avenue, EPSOM KT18 5AD UK 
or via our contact page. 

If we have a designated Data Protection Officer (DPO), their contact details will be provided upon request. 


13. ICO Registration 

We are registered as a data controller with the UK Information Commissioner's Office (ICO). Registration Number: Z574715X Date Registered: 12 January 2001 

 

Last Updated 29 June 2025