FORTISYMBetween the supplier and the buyer. Book a briefing

Privacy policy

FORTISYM Limited · Last updated: 15 October 2026

This policy explains what personal data FORTISYM collects through fortisym.com and in the course of our business, why we use it, and the rights you have. We keep it short and in plain English. If anything is unclear, email sales@fortisym.com.

1. Who we are

FORTISYM Limited is the data controller for the personal data described here.

  • Registered in England and Wales, company number 16906072
  • 43 Overstone Road, London W6 0AD
  • Registered with the Information Commissioner's Office (ICO), registration number ZC094522
  • Contact for privacy questions: sales@fortisym.com

2. What we collect and why

Briefing requests (contact form). Your name, email address, company, phone number (optional), the topic you choose and your message. We also record your IP address, the time of the request and the approximate Cloudflare location that handled it, to block spam and abuse. We use this to reply to you and to discuss our services. Lawful basis: our legitimate interests in responding to enquiries and, where you are asking about a contract, steps taken at your request before entering into one.

Newsletter sign-up. Your email address, your name (optional), your IP address and the time you signed up. We use this to send you occasional updates on FORTISYM and our partners' solutions. Lawful basis: your consent. You can unsubscribe at any time by replying "unsubscribe" or emailing sales@fortisym.com.

Spam protection. Our forms use Cloudflare Turnstile to check that a real person is submitting them. Turnstile processes technical signals from your browser and device for this purpose only. Lawful basis: our legitimate interest in keeping the site secure.

Website analytics. We use Cloudflare Web Analytics to count page views and measure site performance. It does not use cookies, does not track you across other sites and does not build a profile of you. Lawful basis: legitimate interests.

Security and server logs. Like any website, our hosting provider processes your IP address and request details to deliver pages and protect the site from attack. Lawful basis: legitimate interests.

Customers, partners and prospects. We hold business contact details (name, job title, work email, work phone, company and notes of our dealings) for people we work with or may work with. Most of this comes from you directly, from your organisation, from events, or from public business sources such as company websites, LinkedIn and Companies House. Lawful basis: legitimate interests in running and growing a B2B business, or performing a contract with your organisation.

Digital contact cards. Some of our pages let you download a team member's contact card (.vcf). This happens entirely in your browser and we do not collect anything when you do it.

We do not sell personal data, and we do not use it for automated decision-making that has legal or similar effects on you.

3. Business-to-business marketing

We may contact people at organisations we think could benefit from our services, using work contact details. We do this under our legitimate interests and in line with the Privacy and Electronic Communications Regulations (PECR). Every marketing message tells you how to opt out.

You have the right to object to direct marketing at any time. Email sales@fortisym.com and we will stop. We keep a short suppression record so we don't contact you again by mistake.

4. Who we share it with

We use trusted service providers (processors) who act on our instructions under contract:

  • Cloudflare – website hosting, security, spam protection (Turnstile), analytics and storage of form submissions
  • Microsoft 365 – email, documents and notifications of new website enquiries
  • Zoho CRM – our customer relationship management system, hosted in Zoho's UK data centre
  • Atlassian (Jira) – internal task tracking, which may occasionally reference a business contact

We may share data with technology partners whose solutions we resell (for example when registering an opportunity with a vendor), but only where it is needed for the service you have asked about. We may also disclose data where the law requires it, or to professional advisers such as accountants and lawyers.

5. International transfers

Some of our providers, including Cloudflare, Microsoft and Atlassian, may process data outside the UK, including in the United States and the European Economic Area. Where they do, the transfer is protected by UK adequacy regulations (such as the UK–US Data Bridge) or by the ICO's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

  • Website enquiries: up to 2 years after our last contact, unless they lead to a business relationship
  • Newsletter sign-ups: until you unsubscribe
  • Customer and partner records: for the length of the relationship plus 6 years, to meet legal and accounting obligations
  • Prospect records: reviewed at least every 2 years and deleted if no longer relevant
  • Rate-limiting records: deleted automatically within 24 hours

7. Cookies

fortisym.com does not set advertising or tracking cookies, so we do not show a cookie banner. Cloudflare may set strictly necessary security cookies (for example during a Turnstile check or to block malicious traffic). These are exempt from consent under PECR. You can block cookies in your browser, but the contact forms may not work.

8. Your rights

Under UK GDPR you have the right to:

  • ask for a copy of your personal data
  • have inaccurate data corrected
  • have your data deleted
  • restrict or object to how we use it, including for direct marketing
  • ask for your data in a portable format
  • withdraw consent at any time, where we rely on consent

Email sales@fortisym.com to use any of these rights. We will reply within one month. There is normally no charge.

9. Security

We protect personal data with access controls, multi-factor authentication, encryption in transit and the security practices we apply under our ISO 27001 and Cyber Essentials work.

10. Complaints

If you're unhappy with how we've handled your data, please tell us first at sales@fortisym.com so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.

11. Changes

We'll update this policy when our practices change and show the new date at the top.