Who is responsible for your information?

Fortress Technologies Ltd is the controller of the personal information covered by this policy. You can contact us at [email protected], on 0114 4910915 or 0207 4046120, or by post at STEP Business Centre, Wortley Road, Deepcar, South Yorkshire, S36 2UH.

We have not appointed a Data Protection Officer. Please use the contact details above for privacy questions or requests.

Information we collect

We collect information that is relevant to the reason you contact or work with us. This may include:

your name, work email address, telephone number, job title and business details;
the information you include in an enquiry, support request or other correspondence;
information needed to provide, manage and improve our services for a client or prospective client; and
technical information such as IP address, browser, device, pages viewed and cookie identifiers where you have agreed to analytics cookies.

Our website contact form also uses a hidden anti-spam field and rate limiting. We do not ask for special category personal data through the website. Please do not send sensitive personal information unless it is necessary and we have asked for it.

Why we use personal information

Purpose	Lawful basis
Responding to enquiries, arranging calls and preparing proposals.	Our legitimate interests in responding to business enquiries and, where relevant, taking steps at your request before entering into a contract.
Delivering services, managing accounts, support, suppliers and billing.	Performance of a contract and our legitimate interests in running our business.
Protecting our website, systems and users from fraud, misuse and security incidents.	Our legitimate interests in keeping our services secure and complying with legal obligations where they apply.
Understanding how the website is used through Google Analytics 4 and Microsoft Clarity.	Your consent. These tools are not loaded until you choose to accept analytics cookies.
Sending marketing communications.	We only use website enquiry details for marketing where you have separately agreed, or where another lawful basis and the Privacy and Electronic Communications Regulations allow it. You can opt out at any time.

Who we share information with

We share personal information only where necessary. This can include our hosting, email, backup, security, CRM, accounting, communications and IT service providers, as well as professional advisers, insurers, regulators or public authorities where required by law. Those providers process information under appropriate contractual, security and confidentiality controls.

Where you accept analytics cookies, Google Analytics 4 and Microsoft Clarity process limited technical and usage information for website measurement. We do not sell personal information.

International transfers

Some suppliers, including Google and Microsoft, may process information outside the UK. Where this happens, we use providers that offer appropriate safeguards for international transfers, such as an adequacy regulation or contractual safeguards approved for UK data protection law.

How long we keep information

We keep information only for as long as needed for the purpose it was collected for. Enquiries are normally retained for up to 24 months after our last meaningful contact. Client and financial records are retained for the contract period and then for the period required for legal, accounting or tax purposes, normally up to six years. Security logs are retained only for as long as reasonably needed to protect and investigate our systems. Analytics information is retained for the period configured in the relevant analytics service and reviewed regularly.

Your rights

Depending on the circumstances, you can ask us for access to your personal information, correction of inaccurate information, erasure, restriction, objection to processing based on legitimate interests, and portability. You can withdraw consent at any time where we rely on it; this does not affect processing already carried out before withdrawal.

To make a request, contact [email protected]. We may need to verify your identity before responding.

Complaints

Please contact us first so we can try to resolve a concern. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Automated decisions and children

We do not use the information covered by this policy to make solely automated decisions that have legal or similarly significant effects on you. Our website and services are intended for businesses and are not directed at children.

Changes to this policy

We review this policy when our website, services or legal requirements change. The current version will always be available on this page.

Privacy Policy