Privacy policy
How we handle personal data under the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act (Cap. 586).
Last updated · 30 October 2026Who is responsible
This website is operated under the brand Forge Canvas AI Systems by Forge Canvas Limited, which is currently in formation in Malta. The controller responsible for this website is its director, Lennart Fehr, acting on behalf of Forge Canvas Limited (in formation), Victoria Court, Blk B, Apt 1, Triq Karlu Galea, Rabat, Għawdex VCT 2604, Malta. Contact: contact@forge-canvas.com · +356 7700 6138. Once registered, Forge Canvas Limited takes over as controller.
What we collect
Quote requests. When you use the request form or email us, we process the description of what you need, your name, company (if given), email address and phone number (if given).
Technical data. Our hosting provider automatically processes server logs — IP address, date and time, browser type and pages requested — to deliver the site and keep it secure.
Usage and marketing data. With your consent, we use cookies and similar technologies to measure how the site is used and to measure and improve our advertising. Details are in section 04.
Why we use it
Request data is used to prepare and send your quote and to handle any resulting order (Art. 6(1)(b) GDPR — steps prior to a contract). Server logs and strictly necessary storage are processed for security and to remember your cookie choice (Art. 6(1)(f) GDPR — legitimate interest). Analytics and marketing tools only run after you have consented (Art. 6(1)(a) GDPR). We never sell your data.
Cookies & tracking services
When you first visit, a banner asks for your choice. Only strictly necessary storage is used without consent. You can change your choice at any time via “Cookie settings” in the footer.
| Service | Provider | Purpose | Lifetime |
|---|---|---|---|
| Consent storageNecessary | Forge Canvas (local storage in your browser) | Remembers your cookie choice | 12 months |
| PostHogAnalytics | PostHog Inc. (EU Cloud, Frankfurt) | Page views, clicks, funnel steps, session replay with masked inputs | 12 months |
| Google Analytics 4Analytics | Google Ireland Ltd. | Visitor statistics and traffic sources | 24 months |
| Google AdsMarketing | Google Ireland Ltd. | Conversion tracking and remarketing | 90 days |
| Meta PixelMarketing | Meta Platforms Ireland Ltd. | Measuring Facebook & Instagram ads, custom audiences | 90 days |
| LinkedIn Insight TagMarketing | LinkedIn Ireland Unlimited Co. | B2B ad measurement and retargeting | 6 months |
Fonts are hosted on our own server; no data is sent to font providers.
Who receives it
Your data is processed by our team and by service providers acting on our behalf: our hosting and network provider Cloudflare, Inc., our email provider Google Ireland Ltd. (Google Workspace), and the analytics and advertising providers listed in section 04. Some of them are based in, or transfer data to, the United States. Transfers rely on the EU–U.S. Data Privacy Framework or the EU Standard Contractual Clauses. When we check availability with suppliers, we share product details and quantities — not your personal data.
How long we keep it
Quote requests and related correspondence are kept for 24 months and then deleted, unless they lead to an order — then records are kept for the period required by Maltese tax and accounting law. Analytics data is kept for a maximum of 24 months. Server logs are deleted after 30 days. Cookie lifetimes are listed in section 04.
Your rights
You can ask us at any time for access to your data, correction, deletion, restriction of processing or a copy in a portable format, and you can object to processing based on legitimate interest. You can withdraw your consent to cookies at any time via “Cookie settings” in the footer — this does not affect processing before the withdrawal. Write to contact@forge-canvas.com. You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta.
Changes
We may update this policy when our services or the law change. The current version is always available on this page.