Legal : Privacy Policy
Last Updated: 06.01.25
This privacy notice sets out how Forly Group LTD (company number 12874266, registered address at 13 Old Port Road, Wenvoe, Vale of Glamorgan, UK, CF56AL—hereafter referred to as Forly / we / us / our) handles “personal information” or “personal data” that you provide to us or that we collect, when you visit our website or use our mobile application (“App”) or otherwise interact with us (including purchasing subscriptions or other services from us), and how we comply with applicable data protection and privacy laws.
If you do not agree with this notice, you should not access or use our website or App, or otherwise interact with our business.
About Forly
Forly is a storytelling application offering narrated audio stories for children. We believe it is important to be transparent about how we use your personal data. We recognize the importance of protecting the privacy and security of the personal data we obtain from our users—both adults and children—and other people we interact with as a business, including parents, guardians, and potential partners.
This privacy notice describes how we collect, use, disclose, communicate, and protect your personal data. We may revise this privacy notice from time to time. When we make changes, we will post the updated version on our website and in our App and indicate the date it was last updated. If we have your contact details, we will communicate any substantial changes directly. Please be aware that it is your responsibility to review our privacy notice regularly and make sure you keep up to date with any changes.
1. Data We Collect and How We Use It
We collect personal data in a variety of ways depending on how you interact with us. The data we collect generally falls into the following categories:
Account and Profile Information
What we collect: Your name, email address, phone number, and password (in encrypted form). We may also collect additional profile information you choose to provide, such as your preferred language or other account preferences.
Why we collect it:
To set up and manage your Forly account.
To verify your identity for login, security, or customer support purposes.
For marketing communications if you have consented to receive them (you can opt out at any time).
Lawful basis:
Performance of a contract: We process this information to provide you with the services you have requested, including creating and maintaining your account.
Consent: For marketing communications (e.g., sending you news and offers about Forly), if you choose to opt in.
Payment and Subscription Details
What we collect: Payment details necessary to process your purchases (e.g., card information, billing address). Our secure payment provider processes and stores this data; Forly does not see or store your full payment details.
Why we collect it:
To process your transactions and subscriptions to premium or paid-for stories and services.
To comply with financial record-keeping obligations.
Lawful basis:
Performance of a contract: Necessary to provide the services or products you purchase.
Legal obligation: We keep transaction records to comply with legal and tax requirements.
Children’s Data
What we collect:
Child’s first name (or nickname), age, and the relationships to siblings/friends if you choose to provide them.
We may also record how often a child listens to a certain story or uses specific features.
Why we collect it:
To personalize the child’s storytelling experience (e.g., to incorporate the child’s name, age, or relationships into the audio stories or recommended content).
To help us understand how our audience uses our service and improve our offerings accordingly.
Lawful basis:
Consent/Parental Consent: We rely on parental consent to process personal data relating to children under applicable law.
Performance of a contract: When you request that your child’s name be incorporated into a story, we process that data to fulfill your request.
Parental Control: Account creation, purchases, and major changes to the child’s profile can only be done by a parent or guardian. If we learn that a child under 18 has attempted to create an account without valid parental or guardian permission, we will delete the account and any related personal data.
Usage Information (Website and App Analytics)
What we collect:
Log information (e.g., IP address, browser type, version, operating system, and platform).
Data about how and when you use the App (e.g., the stories you listen to, frequency of use, time spent in the App).
Error logs or crash data to diagnose issues or technical faults.
Why we collect it:
To troubleshoot and fix bugs or other technical issues.
To improve our services, analyze usage patterns, and develop new features.
To help maintain the security and performance of our services.
Lawful basis:
Legitimate interests: Our legitimate interests in ensuring our services function properly, understanding user behavior to improve user experience, and diagnosing and preventing technical issues.
Email and Phone Number
What we collect: Your email address and phone number.
Why we collect it:
To send one-time passcodes (OTP) for secure login.
To send you account notifications, such as password resets, transaction receipts, or important policy updates.
Marketing emails, if you have opted in, providing information on new stories, promotions, or updates about Forly.
Lawful basis:
Performance of a contract: To provide essential account notifications and transactional messages.
Consent: For marketing and promotional communications.
Cookies and Similar Technologies
What we collect: Information via cookies and similar tracking technologies (e.g., SDKs in our App) about your interactions with our website and App.
Why we collect it:
To remember your preferences.
To analyze website/App performance and usage.
To customize your experience and provide personalized content (with your consent).
Lawful basis:
Consent: For non-essential cookies and tracking technologies where required by law.
Legitimate interests: For cookies or other tracking strictly necessary for the operation of our website or App.
2. Children’s Data Protection
We understand that much of Forly’s content is directed towards children, and we are committed to safeguarding their privacy.
Minimal Data Collection: We only collect the child’s first name (or nickname), age, and relationships (if provided) to enhance the storytelling experience.
Parental Control: The parent or guardian is in control of creating and managing a child’s profile.
Under 18 Accounts: Children under 18 cannot create an account or subscribe to paid services themselves. If we discover an underage user without parental consent, we will delete the account and related personal data.
Personalization: Where you consent, we use a child’s first name, age, or relationship information to personalize stories or marketing we direct to you (the parent). If a child logs usage, that data is tied to the adult’s account.
3. How We Share Your Data
We do not sell your personal data. We may share information with the following categories of recipients:
Service Providers
Payment Processors: To handle transactions securely.
Hosting and IT Service Providers: To support our website, App, and data storage.
Analytics Providers: To help us understand how our services are used and improve them.
Customer Support Platforms: To help us manage support queries.
Regulators and Authorities
Where required by law or in response to valid requests by public authorities (e.g., law enforcement).
Business Transfers
In the event we sell or transfer all or part of our business or assets (including in bankruptcy or similar proceedings).
All our third-party service providers are contractually required to process personal data in accordance with applicable law and only for the purposes we specify.
4. International Data Transfers
While we are based in the United Kingdom, some of our service providers may be located in other countries. Whenever we transfer personal data to a service provider outside the UK or the European Economic Area (“EEA”), we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant regulatory authorities, or an adequacy decision by the European Commission. If you have questions about our data transfer practices, please contact us using the details below.
5. Data Retention
We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for legal, accounting, or reporting requirements. The exact retention period depends on the nature of the data and the purpose for which it was collected.
Account data: Generally retained for up to 90 days after your account becomes inactive (we will notify you before deletion).
Transaction data: Retained for 6 years in accordance with tax and accounting obligations.
Children’s data: Linked to the parent or guardian’s account and retained or deleted under the same schedule as that account.
Marketing preferences: If you opt out of marketing communications, we will remove you from our mailing lists immediately but may keep a record of your preference.
6. Your Rights
You have various rights under data protection law regarding your personal data. These may include:
Access: You can request a copy of your personal data.
Rectification: You can ask us to correct inaccurate or incomplete data.
Erasure: You can request that we delete your personal data in certain circumstances.
Restriction: You can ask us to limit how we use your personal data.
Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
Objection: You can object to certain uses of your personal data, such as direct marketing.
Complaint: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are in the UK, or with your local supervisory authority if you are outside the UK.
Please note that these rights are not absolute and may be subject to certain conditions or exemptions under applicable law.
7. Security Measures
We implement technical and organizational measures to protect the personal data we process. These measures are designed to ensure a level of security appropriate to the risks involved. While we endeavor to protect your personal data, we cannot guarantee absolute security against all threats.
8. Marketing Communications and Cookies
Marketing Communications
We only send direct marketing communications (e.g., newsletters, promotions, or updates about Forly) with your consent. You can withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by contacting us using the details below.
Cookies and Other Trackers
We use cookies on our website and SDKs in our App to enhance your experience and analyze usage. For non-essential cookies, we seek your consent where required by law. You can manage your cookie preferences at any time via your browser settings or within the App’s privacy settings (if available). For more information, please see our [Cookie Notice] (if applicable).
9. Contact Us
Forly Group LTD is the controller of your personal data. If you have questions about this privacy notice, or wish to exercise any of your rights, please contact us at:
Forly Group LTD
13 Old Port Road, Wenvoe
Vale of Glamorgan, UK, CF56AL
Email: hello@forlygroup.com
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or with another applicable supervisory authority, depending on where you are located.
10. Changes to this Privacy Notice
We may update this privacy notice from time to time in response to changing legal, technical, or business developments. When we update our privacy notice, we will post the new notice on our website and in our App and indicate the date it was last updated. If the changes significantly affect your rights or obligations, we will make reasonable efforts to notify you of these changes via email or through the App.
If you do not agree to the terms of this privacy notice, please discontinue your use of our website, App, and services. If you continue to use the services after any updates to this policy, you are deemed to have accepted those changes to the fullest extent permitted by law.
Thank you for taking the time to read this privacy policy. We are committed to protecting your privacy and ensuring that Forly remains a safe and enjoyable environment for both children and adults.