1. Introduction

GForce Software Ltd (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Data Policy explains what information we collect, how we use it, and your rights under applicable data protection laws, primarily the UK GDPR and related UK legislation. If you are an EU resident, please note we also comply with the EU GDPR as necessary. We are a UK-based company creating and selling virtual music instruments globally. This policy applies to data collected through our website, customer accounts, product registration, support services, and marketing communications.

2. What Data We Collect

We may collect the following categories of personal data:

• Identity and contact details: name, email address, billing/shipping address.
• Account information: login credentials, product registrations, purchase history.
• Payment information: processed securely by third-party payment providers; we do not store full card details.
• Technical data: IP address, device and browser type, operating system, and usage analytics when you visit our website or use our products.
• Support communications: information you provide when contacting us for help.
• Marketing preferences: your opt-in choices for newsletters and promotional updates.

3. How We Use Your Data

We process your personal data for the following purposes:

• To manage your account and product registrations.
• To process and deliver your purchases.
• To provide customer support and technical assistance.
• To improve our products, services, and website.
• To send you relevant updates, promotions, and newsletters (only if you have opted in).
• To comply with legal and regulatory obligations.

4. Legal Bases for Processing

We rely on the following legal grounds under the UK GDPR:

• Contractual necessity: processing needed to provide our products/services.
• Legitimate interests: improving services, preventing fraud, ensuring security. We perform a balancing test to ensure your rights do not override these interests. You have the right to object to such processing.
• Consent: for sending marketing communications. You may withdraw consent at any time.
• Legal obligation: when required to comply with applicable law.

5. Data Storage and International Transfers

Your data may be stored on secure servers located outside the UK or EU. When this occurs, we ensure compliance with UK GDPR rules on international transfers. This includes using mechanisms such as UK-approved Standard Contractual Clauses (SCCs), adequacy decisions, or other safeguards to protect your data. We use trusted third-party service providers (for hosting, payment processing, email, and analytics) who are contractually bound to keep your data secure and process it only on our instructions.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example, transactional data related to purchases may be retained for up to 7 years for accounting and tax compliance purposes. When data is no longer needed, it is securely deleted or anonymised.

7. Your Rights

Depending on your location, you may have the following rights under applicable laws:

• To access, correct, or delete your personal data.
• To object to or restrict certain processing, including processing based on legitimate interests.
• To withdraw consent for marketing at any time.
• To request data portability.
• To challenge automated decision-making and request human intervention.
• To lodge a complaint with a supervisory authority (e.g., ICO in the UK or relevant EU authority).

To exercise your rights, please contact us at: data@gforcesoftware.com.

8. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or alteration. These measures are reviewed regularly to address emerging threats.

9. Cookies and Tracking

We use cookies and similar technologies on our website to improve your experience. Please see our Cookies Policy [link] for details on how we use them and how to manage your preferences.

10. Automated Decision-Making

Where applicable, we may use automated processing to make decisions with significant effects on you (such as fraud detection). Safeguards are in place including providing you with information, the right to challenge decisions, and obtain human intervention.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements, including those arising from the Data (Use and Access) Act 2025. Any changes will be posted on our website with a revised “Last updated” date.

12. Contact Us

For questions about this policy or how we handle your data, please contact us at:
GForce Software Ltd
39 Star Road
Caversham
Reading
Berkshire
RG4 5BE
Email: data@gforcesoftware.com