Legal
Privacy Policy
This policy explains what personal data ForgeMesh collects, why we collect it, how long we keep it, and the choices available to you.
Last updated: 29 July 2026
This document contains [Jurisdiction] and related placeholders that must be completed and reviewed by qualified legal counsel before publication. It is a template, not legal advice.
1. Who we are
ForgeMesh ("ForgeMesh", "we", "us") is a game art and cinematics studio. For the purposes of applicable data protection law in [Jurisdiction], ForgeMesh acts as the data controller for personal data described in this policy. You can reach us at info@heygridr.store.
2. Data we collect
Information you provide. Name, business email address, company or studio name, and the contents of enquiries, briefs, contracts, and project correspondence.
Project material. Concept art, builds, source assets, and other files you share with us for the purpose of producing work. This material may contain personal data belonging to third parties, for which you remain the controller.
Technical data. IP address, browser type, device type, referring page, and pages viewed, collected automatically when you visit this website.
Recruitment data. Portfolios, CVs, and application correspondence sent to us by candidates.
3. Why we use your data and our legal basis
We use personal data to respond to enquiries, prepare quotes, deliver contracted work, invoice and collect payment, maintain security and backups, meet accounting and tax obligations, and evaluate job applications.
Depending on the activity, our legal basis is performance of a contract, our legitimate interest in operating and securing the studio, compliance with a legal obligation under the laws of [Jurisdiction], or your consent where consent is required.
4. Cookies and analytics
This website uses only cookies that are strictly necessary for the site to function. If we introduce analytics or marketing cookies in the future, we will request consent where required and update this policy before doing so.
5. Sharing and processors
We do not sell personal data. We share it only with service providers acting on our instructions — including cloud storage and file transfer providers, email and communication providers, accounting and payment providers, and professional advisers — and with authorities where required by law.
Each processor is bound by a written agreement limiting their use of the data to the services they provide to us. A current list of processors is available on request to info@heygridr.store.
6. International transfers
Our team and providers may be located outside [Jurisdiction]. Where personal data is transferred internationally, we rely on an adequacy decision, standard contractual clauses, or another transfer mechanism recognised under the law of [Jurisdiction].
7. Retention
Enquiry correspondence is retained for up to 24 months from last contact. Contract, invoicing, and tax records are retained for the statutory period required in [Jurisdiction], typically [Retention Period]. Project source files are retained for the period agreed in the applicable statement of work and archived or deleted thereafter. Unsuccessful recruitment materials are deleted within 12 months unless you consent to longer storage.
8. Security
We apply access controls, encrypted transfer and storage for client material, least- privilege permissions on project repositories, and periodic review of accounts and devices. No system is perfectly secure; we notify affected parties and regulators of a qualifying personal data breach as required by the law of [Jurisdiction].
9. Your rights
Subject to the law of [Jurisdiction], you may request access to your personal data, correction of inaccurate data, deletion, restriction of or objection to processing, data portability, and withdrawal of consent where processing is based on consent.
To exercise a right, email info@heygridr.store. We respond within the statutory period, normally 30 days. You may also lodge a complaint with the supervisory authority in [Jurisdiction].
10. Children
Our services are directed to businesses. We do not knowingly collect personal data from children under the age of [Minimum Age] as defined in [Jurisdiction].
11. Changes and contact
We may update this policy to reflect changes in our practices or the law. Material changes will be posted on this page with a revised "last updated" date. Questions and requests: info@heygridr.store.