01
Principles
Forward Room Partners was built with privacy as a principle, not a compliance afterthought. We handle your data with the same maturity we bring to any other dimension of the relationship: discretion, clarity, and the minimum necessary.
- We do not use invasive tracking.
- We do not use behavioural advertising.
- We do not sell, rent or share data with third parties.
- We use privacy-first analytics, without identifying cookies.
02
Who is the controller
The data controller is Forward Room Partners, reachable at hello@forwardroompartners.com. We operate from Lisbon and Porto, Portugal.
03
Data we collect
We collect strictly what the relationship requires:
- Contact forms and Forward Signals: name, company, role, email, website, company size, and your answers to the strategic reflection.
- Direct communication: the content of messages you send by email or through the site.
- Aggregated technical data: anonymous site usage metrics (pages viewed, country, device), collected without cookies via Plausible Analytics.
We do not collect sensitive data. We do not use hidden forms. We do not fingerprint visitors.
04
Privacy-first analytics
We use Plausible Analytics, a European, open-source platform that is GDPR-compliant by default.
- No cookies are used.
- No visitors are identified.
- No behavioural profiles are built.
- Data is aggregated, anonymous and stored within the EU.
This is why you will not see a cookie consent banner: there is nothing to consent to.
05
Purpose of processing
We process your data exclusively to:
- Respond to contact requests.
- Prepare structural briefings and Forward Room Session proposals.
- Maintain a minimum record of the professional relationship.
- Understand, in aggregate, how the site is used.
We never use your data for automated marketing, profiling, or advertising.
06
Legal basis
Processing is based on your explicit consent when submitting a form, on the legitimate interest of responding to your enquiry, and on the performance of pre-contractual and contractual obligations where applicable.
07
Retention
We keep data only for as long as the purpose requires:
- Contact requests without follow-up: up to 24 months.
- Active relationships: for the duration of the engagement and up to 5 years after the last contact.
- Legal or accounting obligations: for the period required by law.
08
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to processing, and port your data. You can also withdraw consent at any time.
To exercise any of these rights, write to hello@forwardroompartners.com. We respond within 30 days.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority.
09
Security
We apply appropriate technical and organisational measures to protect your data from unauthorised access, loss, or disclosure: audited cloud infrastructure, encryption in transit, restricted access, and the principle of least privilege.
10
Subprocessors
We rely on selected providers for hosting, transactional email and anonymous analytics. All operate within the European Economic Area or under equivalent safeguards, with appropriate contractual clauses in place.
11
External links
The site may contain links to external domains. We are not responsible for the privacy practices of those sites; we recommend reading their respective policies.
12
Changes to this policy
We may update this policy occasionally to reflect legal, technical, or operational changes. The current version is always the one published on this page, with the update date visible at the top.
13
Contact
For any privacy-related question, write directly to hello@forwardroompartners.com.
