Legal

Privacy Policy

Last updated: May 2026

This policy explains how On Forward collects, uses, and protects personal data. We operate in the European Union and are committed to complying with the General Data Protection Regulation (GDPR).

We keep this simple. We collect as little as we need, use it only for what we say, and never sell it.

Who we are

On Forward is a forward deployed engineering firm based in Europe. We are the data controller for any personal data collected through our website and outreach activities.

Contact: skapankaya@onforward.eu

What data we collect

We may collect the following personal data:

• Name and job title
• Business email address and company name
• Information you share with us through contact forms or LinkedIn
• Basic usage data from our website (pages visited, time on site)

We do not collect sensitive personal data (health, financial, or similar categories).

Why we collect it and our legal basis

We collect personal data for the following purposes:

• To respond to enquiries — when you contact us or fill in a form, we use your details to follow up. Legal basis: legitimate interest.
• To send relevant outreach — if we reach out through LinkedIn or email, we do so based on your professional profile and public business information. Legal basis: legitimate interest. You can opt out at any time.
• To improve our website — basic analytics to understand how visitors use the site. Legal basis: legitimate interest.

We do not use your data for automated decision-making or profiling.

How long we keep your data

We keep contact and enquiry data for as long as there is a reasonable business purpose — typically no longer than 2 years from last contact. If you ask us to delete your data, we will do so promptly.

Who we share data with

We do not sell or share your personal data with third parties for their own marketing purposes. We may use trusted tools to manage communications (such as email platforms), and these act as data processors on our behalf under appropriate agreements.

Your rights under GDPR

If you are based in the EU or EEA, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Portability — request your data in a portable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, email us at skapankaya@onforward.eu. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority if you believe we have not handled your data correctly.

Cookies

Our website may use basic analytics cookies to understand traffic patterns. We do not use advertising or tracking cookies. If we change this, we will update this policy and ask for your consent where required.

Changes to this policy

We may update this policy occasionally. The date at the top of this page will reflect the most recent version. Material changes will be communicated where possible.