Privacy Policy

Privacy Policy

Last updated: January 1, 2026

1. Data Controller

Forma Living LLC ("Forma Living", "we", "us", or "our") is the data controller responsible for your personal data. We are committed to protecting and respecting your privacy in accordance with applicable data protection laws and regulations.

2. Information We Collect

We may collect and process the following categories of personal data:

Information you provide directly:

  • Full name, email address, phone number, and mailing address (when you fill out contact forms, sign up for newsletters, or request a quote)
  • Payment and billing information (when you purchase our services)
  • Any other information you choose to share with us through our website, email, or phone communications

Information collected automatically:

  • IP address, browser type and version, operating system, and device type
  • Pages visited, time spent on pages, referral source, and navigation paths
  • Cookies, pixel tags, and similar tracking technologies (see our Cookie Policy for details)
  • Geographic location data (based on IP address)

Information from third parties:

  • Analytics data from services such as Google Analytics
  • Social media profile information if you interact with us through social platforms

3. How We Use Your Data

We use the collected information for the following purposes:

  • Service delivery: To provide, maintain, and improve our services and respond to your requests and inquiries
  • Communication: To send you service-related notifications, updates, and promotional materials (with your consent where required)
  • Analytics: To analyze website usage patterns, monitor performance, and improve user experience
  • Legal compliance: To comply with applicable laws, regulations, and legal processes
  • Security: To detect, prevent, and address technical issues, fraud, or other harmful activities
  • Business operations: To manage our business relationships, process transactions, and maintain accurate records

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose
  • Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
  • Legitimate interest: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms
  • Legal obligation: Where processing is necessary for compliance with a legal obligation

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Service providers: Third-party companies that help us operate our business (hosting, analytics, email delivery, payment processing)
  • Legal authorities: When required by law, court order, or governmental regulation
  • Business transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, typically no longer than 5 years after your last interaction with us. After this period, your data will be securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and employee training.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data under certain circumstances
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Receive your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

9. International Data Transfers

If we transfer your data outside your country of residence, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: