Privacy Policy

Last updated: [insert date before publishing]

Fortitude Security (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you use this website, why we collect it, how we use it, and the choices and rights you have.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data described below.

Who we are

Fortitude Security is an independent protective security consultancy, operated by Fortitude Security Ltd, a company registered in Scotland (company number SC876215).

What personal data we collect

We only collect personal data that you choose to give us. This currently happens in two places on this site:

• The contact form — name, organisation/venue name, email address, and the content of your message.
• The Martyn’s Law Readiness Scorecard — your scorecard answers, and (if you choose to request a call back) your name, organisation, email address and phone number.

We do not collect payment information, government ID numbers, or any special category data (such as health or biometric data) through this site.

How we use your data

• To respond to your enquiry or call-back request.
• To prepare quotes or proposals for security consultancy services.
• To understand which parts of the scorecard indicate the biggest gaps, so we can tailor our advice to you.
• To keep a record of enquiries for our own business administration.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Our legal basis for processing

We process the personal data described above on the basis of:

• Consent — when you voluntarily submit a form on this site.
• Legitimate interests — responding to business enquiries is a core, expected part of operating this website, and we have a legitimate interest in following up with people who ask us to.

Who we share data with

We use the following third-party processors to operate this website. Each only receives the minimum data needed to perform its function:

• Form submission handling (e.g. Formspree) — processes form submissions and forwards them to our email inbox.
• Website hosting (e.g. Netlify) — hosts the website files and handles standard web server logs (IP address, browser type, pages visited).
• Analytics (if enabled, e.g. Google Analytics) — only runs if you accept analytics cookies via the cookie banner. IP addresses are anonymised. See “Cookies” below.

We do not use any other third parties to process personal data collected through this site at this time.

Cookies

This site uses only the cookies necessary to remember your cookie preference. If you accept analytics cookies via the banner shown on your first visit, we use a privacy-friendly analytics service to understand overall visitor numbers and which pages are used — this data is aggregated and does not identify you personally. You can change your choice at any time by clearing your browser’s local storage for this site, or by contacting us.

If you decline, no analytics cookies are set, and no analytics data is collected about your visit.

How long we keep your data

We retain enquiry and scorecard submission data for as long as reasonably necessary to respond to your enquiry and for our legitimate business records — typically no longer than 24 months from your last contact with us, unless you become a client, in which case data is retained in line with our standard client records and any applicable legal or contractual requirements.

Your rights

Under UK GDPR, you have the right to:

• Ask us what personal data we hold about you and receive a copy of it (right of access).
• Ask us to correct inaccurate or incomplete data (right to rectification).
• Ask us to delete your data (right to erasure), where there is no legitimate reason for us to continue processing it.
• Object to our processing of your data, or ask us to restrict it.
• Withdraw consent at any time, where we rely on consent as our legal basis.

To exercise any of these rights, contact us at contact@fortitude-security.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Data security

We take reasonable technical and organisational measures to protect the personal data you share with us against unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time, for example as our services or the tools we use change. The “last updated” date at the top of this page will reflect the most recent revision.

Contact us