Effective date: 20 September 2026
Who is responsible?
Avelence is operated by Forma Nôrden in the United Kingdom. Forma Nôrden is responsible for the personal information described in this notice.
For privacy questions or requests, use the Avelence contact form and select Privacy. Please keep the first message high level. We may ask for proportionate information to verify your identity or authority before disclosing or changing a record.
What information do we collect?
When you submit an assessment, application, partnership inquiry, or contact message, we collect the contact and company profile information you choose to provide. This can include your name, work email, role, company website, business size, systems categories, approximate operating history, geography, languages, and known restrictions.
The initial assessment does not request raw operating records, credentials, customer lists, or access to company systems. Please do not include identifiable customer or employee information beyond the business contact details requested.
If you arrive through an introducer's link, the submission may include a referral reference. The reference records a possible source. It does not prove attribution or create a right to payment.
Cloudflare processes request information needed to deliver and protect the service. Avelence stores a short-lived keyed security counter derived from network information. The counter cannot be used by Avelence to recover the original address and is kept separately from submitted profiles.
Why do we use it?
We use submitted information to:
- respond to your request;
- assess possible fit for a business introduction;
- administer company, partner, and introducer relationships;
- secure the service and investigate misuse; and
- keep records required for legal claims or obligations.
For inquiry handling, assessment, relationship administration, and security, the basis is our legitimate interest in operating and protecting the service and responding to requested business discussions. We consider the limited information requested, your reasonable expectations, and the safeguards described here. Where a legal obligation applies, that obligation is the basis for the relevant record.
Optional marketing messages require a separate choice. You can withdraw that choice at any time.
Acknowledging this notice is not permission to share your profile with an unspecified partner. It is not a licence to operational data. A person reviews a proposed introduction, and we ask for separate permission identifying the recipient, purpose, and exact fields before an identifying profile is shared.
Who may receive it?
Access is limited to authorised people operating Avelence and providers needed to run the service. Cloudflare provides website delivery, security, Worker execution, and D1 database storage.
We may disclose limited information when required by law or when reasonably necessary to establish, exercise, or defend legal claims.
Before an identifying profile is sent to a proposed data partner, Avelence identifies the recipient and the proposed information. You may decline. A new recipient or materially different scope requires a new decision. An introducer does not automatically receive a company's profile or private partner terms.
Where is it processed?
The service uses Cloudflare's global network. Its primary D1 database is configured in Cloudflare's Western Europe region. Cloudflare may process information in countries outside the United Kingdom. Cloudflare describes its international transfer safeguards, including contractual protections, in its data processing documentation.
We do not claim that information remains only in the United Kingdom.
How long do we keep it?
Our current retention schedule is:
| Record | Retention |
|---|---|
| Security and rate-limit counters | Up to 48 hours |
| Receipt security cookie | Up to 24 hours |
| Unprogressed general, partner, and introducer inquiries | Up to 12 months after the last interaction |
| Company profiles and related correspondence | Up to 24 months after the last interaction, unless an active opportunity or legal need requires longer |
| Introduction permissions, agreement evidence, attribution decisions, and dispute records | Up to six years after the relevant relationship ends |
| Financial and tax records | For the period required by applicable law, normally six years |
We may keep a minimal record of a deletion or objection request where needed to honour it. Cloudflare D1 includes short-term recovery capabilities, so deletion from active records may take time to age out of recovery copies.
How do we protect it?
Forms use same-origin submission, CSRF protection, replay prevention, field allowlists, body-size limits, and rate limits. Source submissions and audit events are protected against ordinary update and deletion in the application database. Public receipts reveal only a reference number. The website uses HTTPS and does not place application secrets in browser code.
No internet service can provide an absolute security guarantee.
Your rights
Depending on the circumstances and applicable exemptions, you may ask for access, correction, erasure, restriction, or portability. You may object to processing based on legitimate interests. You can withdraw marketing consent without affecting earlier lawful processing.
Use the contact form and select Privacy. If you are dissatisfied, you can complain to the UK Information Commissioner's Office.
Providing form information is voluntary. We may be unable to assess or answer an incomplete request. Submitting a form does not require you to enter a licensing agreement.
Cookies and similar technologies
Avelence does not use advertising pixels or cross-site analytics.
The live forms use a necessary avelence_csrf cookie for form security for up to eight hours. A successful submission uses a necessary avelence_receipt cookie for up to 24 hours so the receipt page can show the reference without putting it in the URL. The staff area uses a necessary, short-lived authenticated session cookie. Referral query parameters are not cookies.
Updates
We update this notice when the service or its processing changes. Material changes receive a new effective date. Keep your submission reference if you need information about an earlier interaction.