Privacy policy
This policy explains what personal data FORJ collects through this website — including the compliance calculator, guide downloads and enquiry forms — and what we do with it.
Last updated: 2 August 2026 · Version 0.2 (draft)
Validation-stage notice. This is a working draft written for the market validation test described on this site, using standard UK GDPR / Data Protection Act 2018 categories as a template. It has not been reviewed by a solicitor and should not be treated as final or legally binding. It must be reviewed by qualified legal counsel — and the placeholder fields below (company registration details, data protection contact, named processors) completed — before any real personal data is collected at scale or the site goes live for genuine leads.
1. Who we are
FORJ ("FORJ", "we", "us") operates this website to test market demand for compliance-led energy intelligence for UK organisations. FORJ is currently in a market validation stage — the products described on this site are not yet generally available, and no client accounts exist yet.
FORJ is a trading name operated by Matt Santana. A limited company is in the process of being incorporated; this policy will be updated with the registered company name, company number, and registered office address upon incorporation.
2. What information we collect
We collect information in three ways:
| Source | What we collect |
|---|---|
| Compliance calculator | UK employee headcount, company type, annual turnover, and balance sheet total that you enter to check whether ESOS and/or SECR apply to your organisation, plus your answer to the data-availability question (site-level, invoice-only, or not sure). |
| Summary and guide requests | Business email address and organisation name, and your consent to be contacted, when you request a personalised summary, the cost shock guide, or the equipment failure checklist. |
| Site usage | Standard technical data such as IP address, browser type, device type, and pages visited, collected automatically — see Section 8 (Cookies). |
The calculator's employee count, turnover and balance sheet fields are used only to run the qualification logic in your browser and are included in the emailed summary if you request one. We do not ask for, and you should not enter, any special category data (such as health information) or financial account details anywhere on this site.
3. Why we collect it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running the compliance calculator and showing you a result | Legitimate interests — providing the tool you've asked to use. No account or contact details are required for this step. |
| Emailing you a personalised summary of your result | Consent — given via the checkbox at the point of submission. |
| Sending the cost shock guide or equipment failure checklist you requested | Consent — given via the guide-download form. |
| Following up about your enquiry, including by phone or email | Consent, and our legitimate interest in responding to enquiries you've initiated. |
| Understanding and improving how this site performs | Legitimate interests / consent for non-essential cookies — see Section 8. |
Where we rely on consent, you can withdraw it at any time — see Section 9.
4. How we use your information
- To show you whether ESOS and/or SECR apply to your organisation, based on the figures you provide.
- To send the summary, guide, or checklist you asked for.
- To contact you about your enquiry, if you've consented, including to discuss FORJ's monitoring approach.
- To understand aggregate demand for this market validation test — for example, how many organisations check their status, and which guides are most requested. Where we report on this internally or to our backers, we use aggregated, non-identifying figures wherever possible.
We do not use your information to make any automated decision that produces a legal or similarly significant effect on you. The calculator result is informational only — see the notice on the calculator itself: it is not a compliance audit or legal determination.
6. International transfers
Where a service provider we use stores or processes data outside the UK, we'll only use providers that offer an adequate level of protection — for example, through the UK's data protection adequacy regulations or standard contractual clauses. This section will be completed with the actual list of providers and their locations before launch.
7. How long we keep it
| Data | Retention approach |
|---|---|
| Calculator inputs (no summary requested) | Not stored beyond your browser session unless you request a summary. |
| Summary requests and guide downloads | Kept for as long as needed to respond to your enquiry and for a limited period afterward for record-keeping, then deleted or anonymised. |
| Site usage data | Kept only as long as needed for the analytics purpose described in Section 8, per the provider's standard retention period. |
Exact retention periods will be finalised and stated here once FORJ's data retention schedule is formally adopted.
9. Your rights
Under UK data protection law, you have the right to:
- Ask us for a copy of the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data, in certain circumstances.
- Ask us to restrict how we use your data.
- Object to us using your data, including for direct marketing.
- Ask for your data in a portable format, where technically feasible.
- Withdraw consent at any time, where we rely on consent — this won't affect anything we did before you withdrew it.
To exercise any of these rights, contact us using the details in Section 13. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data — though we'd appreciate the chance to address your concern directly first.
10. Children's data
This site is intended for use by adults acting on behalf of an organisation and is not directed at children. We do not knowingly collect personal data from children.
11. Security
We take reasonable technical and organisational steps to protect the personal data we hold from unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy as FORJ's data practices develop — particularly as this moves from a validation-stage test toward a live product. We'll update the "last updated" date at the top of this page when we do, and, for material changes, take reasonable steps to bring them to your attention.
13. Contact us
If you have questions about this policy or want to exercise any of your rights, contact us at:
Matt Santana
Data controller, FORJ
Matt@forj-intelligence.com
A postal address will be added upon company incorporation.