Privacy Policy
1. Who we are
This website is operated by Fortitude Bespoke Solutions & Risk Management, trading as FortitudeBSRM ("Fortitude", "we", "us", "our"). We are a bespoke security consultancy operating across the United Kingdom and the United Arab Emirates.
We are the data controller in respect of personal data collected through this website.
Contact: inquiries@fortitudebsrm.com
2. What data we collect and why
Enquiry form
When you submit an enquiry through our contact form, we collect your name, email address, area of interest, and the details you provide in your message. This data is used solely to respond to your enquiry. We do not store it in a database — it is transmitted to us by email and retained only within our email system.
Legal basis (UK GDPR): Article 6(1)(b) — processing is necessary for steps taken at your request prior to entering a contract, or Article 6(1)(f) — our legitimate interest in responding to enquiries from prospective clients.
Legal basis (UAE PDPL): Processing is necessary for the performance of a contract or pre-contractual obligations, or based on our legitimate interests.
Analytics
With your consent, we use Google Analytics 4 to understand how visitors use this website (pages visited, time on site, approximate geographic region). This data is aggregated and anonymised — it does not identify you personally. No advertising cookies are set.
Legal basis: Article 6(1)(a) — your explicit consent, given via the cookie banner when you first visit the site. You may withdraw consent at any time using the "Cookie preferences" link in the footer.
If you decline analytics, Google Analytics will not set any cookies on your device and no tracking data will be collected.
3. Cookies
We use one category of cookies:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* |
Google Analytics | Distinguishes unique visitors for analytics reporting | 2 years |
We also store your cookie preference in your browser's localStorage
under the key fortitude_cookie_consent. This is not a cookie and
does not leave your device.
These cookies are only set if you accept analytics. You can change your preference at any time via the Cookie preferences link in the footer.
4. Who we share data with
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is processed by the following sub-processors solely to deliver our services:
| Processor | Purpose | Location | Privacy information |
|---|---|---|---|
| Google LLC | Analytics (GA4) | USA (SCCs in place) | Google Privacy Policy |
| Microsoft (Azure) | Enquiry form email delivery | EU / UAE | Microsoft Privacy Statement |
5. Data retention
- Enquiry form data: Retained within our email system for as long as necessary to manage the enquiry and any subsequent engagement. We review and delete correspondence that is no longer needed on an ongoing basis.
- Google Analytics data: Retained for 14 months (Google's default retention period), after which it is automatically deleted from Google's servers.
6. International transfers
Google Analytics data is processed in the United States by Google LLC. Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission and adopted under UK law as an appropriate safeguard for international data transfers.
Enquiry data transmitted via Azure Communication Services may be processed within the EU and UAE. Microsoft's data processing agreements and applicable SCCs govern these transfers.
7. Your rights
Under UK GDPR and, where applicable, the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Ask us to delete your personal data where there is no compelling reason for us to continue processing it.
- Restriction: Ask us to restrict processing of your data in certain circumstances.
- Portability: Receive your data in a structured, commonly used format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent (analytics), withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at inquiries@fortitudebsrm.com. We will respond within one calendar month.
8. Right to complain
If you are based in the UK and are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
If you are based in the UAE, you may contact the UAE Data Office at uaedataoffice.gov.ae.
We would always appreciate the opportunity to address your concerns directly before you approach a regulator.
9. Security
This website is served over HTTPS with strict security headers including Content Security Policy, HSTS, and X-Frame-Options. Enquiry data is transmitted over encrypted channels. We do not store payment information — no payment processing takes place on this website.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects when it was last revised. We recommend checking this page periodically.