Privacy Policy

1. Who We Are

Forbzy is a trading name operated in the United Kingdom. Contact us at info@companybar.com.

Forbzy acts as a data controller only for the limited contact and enquiry information collected via forbzy.com (such as name, email and venue name submitted through our forms). For all venue data stored within your own Supabase account (allergen records, compliance data, business data etc.), you are the data controller — Forbzy has no ongoing access to or responsibility for that data. Where Forbzy temporarily accesses your Supabase account during assisted setup, we act solely as a data processor on your behalf.

2. What Data We Collect

We collect the following personal data directly:

• Contact information — name, email address, phone number, venue name (provided via our contact and signup forms)
• Payment information — processed securely by Stripe; we do not store card details
• Technical data — IP address, browser type, device information (collected automatically when you visit forbzy.com)

We do not collect or store your venue data (allergen records, compliance data, business data etc.). This data is stored directly in your own Supabase account, which you own and control.

3. How We Use Your Data

We use your data to:

• Set up and maintain your personalised Forbzy Hub
• Process payments and manage your subscription
• Communicate with you about your account and service updates
• Respond to enquiries and support requests
• Improve our services

We will never sell your data or use it for advertising purposes.

4. Data Storage & Security

Your venue data (allergen records, compliance data, business data etc.) is stored in your own Supabase account, which you own and control independently. Supabase is an enterprise-grade platform with SOC 2 Type 2 certification. All data is encrypted in transit (TLS) and at rest.

Contact information you provide to us (via forms on forbzy.com) is transmitted securely via Web3Forms and delivered to our email. We do not maintain a database of client contact records beyond standard email correspondence.

5. Data Processors (Sub-processors)

We use the following third-party services to operate the platform:

• Supabase — database hosting (supabase.com)
• Netlify — website and Hub hosting (netlify.com)
• Stripe — payment processing (stripe.com)
• Web3Forms — contact form submissions (web3forms.com)

Each sub-processor has their own privacy policy and GDPR compliance measures in place.

6. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a portable format
• Restriction — request we limit how we process your data
• Object — object to processing based on legitimate interests

To exercise any of these rights, email info@companybar.com. We will respond within 30 days.

7. Data Retention

Contact information you have provided to us (name, email, venue name) is retained for the duration of our business relationship and up to 12 months after your subscription ends, after which it is deleted from our records. Payment records are retained by Stripe for 7 years as required by UK tax law.

Your venue data stored in your own Supabase account is entirely under your control. You may delete it at any time directly through your Supabase dashboard. Forbzy has no ability to delete data held in your Supabase account.

8. Cookies

Our marketing website (forbzy.com) uses minimal cookies for essential functionality only. We do not use tracking or advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Our Approach to Data Protection

Forbzy is committed to handling all personal data responsibly and in accordance with UK GDPR. As clients use their own Supabase accounts to store venue data, client data remains under their direct ownership and control at all times. Forbzy only handles the minimal personal data necessary to provide the service — primarily contact and payment details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The date at the top of this page indicates when it was last updated.

11. Contact & Complaints

For any privacy-related questions, contact us at info@companybar.com.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk.