Privacy Policy
Effective: March 9, 2026 | Last updated: March 9, 2026
This Privacy Policy is published by Sheen Best Trading LLC, operating under the trading name Forgevant.io (“we”, “us”, “our”). It describes how we collect, use, share, and protect personal data when you visit our website at https://forgevant.io or purchase our digital products.
1. Data Controller
Sheen Best Trading LLC (dba Forgevant.io)
Email: info@forgevant.io
Website: https://forgevant.io
If you have any questions or concerns about this Policy or our data practices, please contact us at the email address above.
2. Data We Collect
We may collect the following categories of personal data:
- Identity data: first name, last name, username or similar identifier.
- Contact data: email address, billing address.
- Payment data: payment card details processed and stored by Stripe (we do not store card numbers on our servers).
- Transaction data: details of products you have purchased, order history.
- Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
- Behavioral data: pages visited, time on page, clicks, referring URL.
- Marketing and communications data: your preferences in receiving marketing communications from us, communication preferences.
3. How We Collect Your Data
We collect data through the following means:
- Direct interactions: data you provide when registering, purchasing, subscribing to newsletters, or contacting us.
- Automated technologies: cookies, server logs, and similar tracking technologies as you interact with our site.
- Third parties: analytics providers (e.g. Google Analytics), payment processors (Stripe), and advertising networks (Meta, Google Ads) may share data with us in accordance with their own privacy policies.
4. Purpose and Legal Basis for Processing (GDPR)
We process your personal data only where we have a lawful basis to do so. The legal bases we rely on are:
- Contract performance: to process your purchase, deliver your digital product, and manage your account.
- Legitimate interests: to analyse website usage, improve our products and services, prevent fraud, and send you relevant marketing where you are an existing customer (you can opt out at any time).
- Legal obligation: to comply with applicable laws, including financial record-keeping requirements.
- Consent: for analytics cookies, marketing/retargeting cookies, and email marketing to new subscribers. You may withdraw consent at any time.
5. Data Sharing
We share your personal data only with the following categories of third parties, under appropriate contractual protections:
- Stripe: payment processing. Stripe acts as a data processor on our behalf and is PCI-DSS compliant. See Stripe’s Privacy Policy.
- Email service provider: for transactional and marketing emails (e.g. Emailit / FluentCRM).
- Hosting provider: our VPS host has access to server-level data for operational purposes.
- Google Analytics: website analytics. Activated only with your consent via our cookie banner.
- Meta and Google Ads: retargeting and advertising. Activated only with your marketing consent.
- Professional advisers: lawyers, bankers, auditors, and accountants who provide professional services to us.
We do not sell your personal data to any third party.
6. International Data Transfers
Some of our third-party service providers are based outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or reliance on the adequacy decisions of the European Commission.
7. Data Retention
- Financial records (purchase history, invoices): retained for 7 years to comply with applicable tax and accounting laws.
- Marketing data: retained until you unsubscribe or request erasure.
- Technical/log data: retained for up to 12 months for security and fraud prevention purposes.
- Account data: retained for the duration of your account and up to 3 years after closure unless you request earlier deletion.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of access: to request a copy of your personal data.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure (GDPR Art. 17): to request deletion of your data where there is no lawful reason for us to continue processing it.
- Right to restriction of processing: to ask us to suspend processing in certain circumstances.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@forgevant.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
9. Multi-Jurisdiction Compliance
In addition to GDPR (EU/EEA), we are committed to compliance with the following privacy frameworks:
- CASL (Canada): We only send commercial electronic messages to Canadian residents with express or implied consent. Every marketing email includes an unsubscribe mechanism.
- Spam Act 2003 (Australia): We only send commercial electronic messages with consent and include a functional unsubscribe link in all emails.
- Privacy Act 2020 (New Zealand): We apply the 13 Information Privacy Principles when collecting and handling personal information of New Zealand residents.
- PDPA (Singapore): We collect, use, and disclose personal data only with consent and for notified purposes.
- POPIA (South Africa): We process personal information of South African data subjects lawfully, with consent, and in accordance with the 8 conditions for lawful processing.
10. Cookies
We use cookies and similar tracking technologies. Cookies are categorised as follows:
- Strictly necessary cookies: essential for the website to function (e.g. WooCommerce session, login). These are always active and cannot be disabled.
- Analytics cookies: help us understand how visitors interact with our site (e.g. Google Analytics). Activated only with your consent via our cookie consent banner.
- Marketing / retargeting cookies: used to show you relevant advertisements on Meta (Facebook/Instagram) and Google. Activated only with your marketing consent.
You can manage your cookie preferences at any time using the cookie banner displayed on your first visit to our site.
11. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- TLS/SSL encryption for all data transmitted between your browser and our servers.
- Stripe’s PCI-DSS Level 1 compliance for all payment card data.
- Access controls limiting data access to authorised personnel only.
- Regular backups and server security monitoring.
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
12. Children
Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us at info@forgevant.io and we will promptly delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our data practices, or our services. We will notify you of material changes by updating the “Last updated” date at the top of this page. We encourage you to review this Policy periodically.
Sheen Best Trading LLC · info@forgevant.io · https://forgevant.io