Privacy Policy
Last updated: 17 March 2026
Who we are
The CLG Forum is operated by TheCustomer.Co LLP, registered in England and Wales, with its registered office at 12 Bramdown Heights, Basingstoke, RG22 4UB, UK.
For the purposes of UK data protection law, TheCustomer.Co LLP is the data controller.
If you have any questions about this policy or how we handle your personal data, contact us at info@clgforum.com.
What this policy covers
This policy explains what personal data we collect when you visit clgforum.com or interact with the CLG Forum, why we collect it, how we use it, and what rights you have over it.
It applies to all visitors, subscribers, registered members, and event attendees.
What data we collect and why
1. Data you give us directly
When you register for free resources or membership: We collect your name, job title, company name, and email address. We use this to give you access to the resource you requested and, with your consent, to send you relevant content from the CLG Forum.
When you contact us: We collect your name, email address, and the content of your message. We use this solely to respond to your enquiry.
When you register for or attend an event: We collect your name, email address, job title, and company. We use this to manage your attendance and follow up afterwards.
2. Data we collect automatically
Website analytics: We use Google Analytics to understand how visitors use the site — which pages are visited, how long people spend on them, and where traffic comes from. This data is aggregated and does not identify you individually. IP addresses are anonymised before storage.
Cookies: We use cookies to make the site function and to collect analytics data. See our Cookie Policy for full details. You can manage your cookie preferences at any time via the cookie settings on this site.
Lawful basis for processing
Under UK and EU GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries | Legitimate interests (responding to a direct request) |
| Providing access to registered resources | Performance of a contract / legitimate interests |
| Sending newsletters and content updates | Consent (you opted in) |
| Event management | Performance of a contract |
| Website analytics | Legitimate interests (understanding and improving the site) |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms.
How long we keep your data
We do not keep personal data longer than necessary.
| Data type | Retention period |
|---|---|
| Registered member data | Until you request deletion, or 3 years after your last interaction with us |
| Event attendee data | 2 years after the event |
| Enquiry and contact data | 2 years after the enquiry is resolved |
| Analytics data | As configured in [ANALYTICS TOOLS] — typically 14 months |
Who we share your data with
We do not sell your personal data. We do not share it with third parties for their own marketing purposes.
We use a small number of third-party services to operate the Forum. These act as data processors on our behalf and are contractually bound to handle your data only as we instruct:
- Lovable & Resend — to manage our mailing list and send content updates
- Google Analytics — to collect website usage analytics
- Lovable / Supabase — the platform and database infrastructure on which the site runs
Where these providers process data outside the UK or EU (for example, in the United States), we ensure appropriate safeguards are in place — either Standard Contractual Clauses approved by the UK ICO or the EU Commission, or reliance on an adequacy decision where applicable.
Your rights under UK and EU law
If you are in the UK or European Economic Area, you have the following rights under UK GDPR and EU GDPR:
- Right of access — you can ask us for a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate or incomplete data.
- Right to erasure — you can ask us to delete your personal data in certain circumstances, for example if you withdraw consent or if we no longer need it.
- Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
- Right to data portability — where we process your data by automated means on the basis of consent or contract, you can ask us to provide it in a portable format.
- Right to object — you can object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your rights.
- Rights related to automated decision-making — we do not make automated decisions about individuals that produce legal or similarly significant effects.
To exercise any of these rights, contact us at info@clgforum.com. We will respond within one calendar month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the ICO if you are in the UK, or with your local supervisory authority if you are in the EU.
Your rights under US state privacy laws
California (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you specific rights:
- Right to know — you can ask what personal information we have collected about you, where it came from, why we collected it, and who we share it with.
- Right to delete — you can ask us to delete your personal information, subject to certain exceptions.
- Right to correct — you can ask us to correct inaccurate personal information.
- Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioural advertising.
- Right to limit use of sensitive personal information — we do not collect sensitive personal information as defined under CPRA.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
To submit a California privacy request, contact us at info@clgforum.com with the subject line "California Privacy Request". We will respond within 45 days.
Virginia, Colorado, Connecticut, and other US states
Several US states have enacted their own consumer privacy laws, including Virginia (CDPA), Colorado (CPA), and Connecticut (CTDPA). These laws grant residents rights broadly similar to those listed above — including rights to access, delete, correct, and opt out of certain processing activities.
If you are a resident of a US state with an applicable privacy law and wish to exercise your rights, contact us at info@clgforum.com. We will respond in accordance with the applicable law.
Cookies
We use cookies on this site. A cookie is a small file stored on your device that helps the site function and helps us understand how it is used.
We use:
- Strictly necessary cookies — required for the site to work. These cannot be switched off.
- Analytics cookies — used to measure site usage. These are only set with your consent.
You can manage your cookie preferences at any time using the cookie settings link in the footer. You can also control cookies through your browser settings, though disabling all cookies may affect how the site works.
Changes to this policy
We will update this policy from time to time. When we do, we will update the "last updated" date at the top. If we make material changes, we will notify registered members by email.
Contact
For any questions about this policy or to exercise your rights:
Email: info@clgforum.com
Post: TheCustomer.Co LLP, 12 Bramdown Heights, Basingstoke, RG22 4UB
For UK supervisory authority concerns: Information Commissioner's Office — 0303 123 1113
For EU supervisory authority concerns, contact the data protection authority in your country of residence.
This policy applies to personal data processed by TheCustomer.Co LLP in connection with the CLG Forum. It does not apply to third-party websites linked from this site.