1. Contact Details
Fortify Intelligence Ltd is a business crime intelligence company registered in England and Wales. We deliver intelligence, investigation, and prevention services to businesses across the United Kingdom.
The Data Controller is responsible for ensuring compliance with current data protection law. Any data protection queries should be directed to the email address above. Fortify Intelligence Ltd is registered with the Information Commissioner's Office (ICO).
2. Purpose of Processing Personal Data
Fortify Intelligence processes Clients' personal data for the following purposes:
- To enable the efficient management of the Client relationship, including onboarding, subscription management, invoicing, and account administration
- To deliver our services to you — including providing access to our intelligence platform, distributing prevention intelligence alerts, and sharing investigation outputs relevant to your business
- To manage compliance with our Rules & Protocols, and to defend and indemnify Fortify Intelligence in the event of any Client non-compliance
- To communicate efficiently with you — sending news, intelligence alerts, documents, event invitations, and information relevant to your subscription
- To maintain audit trails of intelligence access and sharing, as required by our data protection obligations and law enforcement partners
- To improve and develop our services based on how Clients interact with them
3. Lawful Basis of Processing
The existing contract or subscription agreement between Fortify Intelligence and each Client requires that Clients provide their name, contact details, and organisational information. Our lawful basis for processing Client personal data is therefore contract (Article 6(1)(b) UK GDPR) — processing is necessary to perform the contract or to take steps at your request before entering into a contract.
For communications that go beyond strict contract performance (such as service updates, training opportunities, and intelligence briefings relevant to your sector), our lawful basis is legitimate interests (Article 6(1)(f)) — specifically our interest and yours in keeping you informed of developments relevant to protecting your business. You can opt out of such communications at any time.
No special category data (ethnicity, health, religious beliefs, etc.) is processed about Clients.
4. Categories and Types of Personal Data Processed
The following personal data about Client contacts is processed:
- Name and job title
- Name and address of employing organisation
- Work email address and telephone number(s)
- Other professional contact details provided during onboarding or in correspondence
- Login credentials for our intelligence platform (held in hashed/encrypted form)
- Access logs — records of when and which intelligence records you have accessed (for audit purposes)
- Correspondence records and communication history
No sensitive or special category personal data (ethnicity, sexuality, religious beliefs, health data, etc.) is processed by Fortify Intelligence in relation to Clients.
5. Sources of Personal Data
- Directly from you — personal data provided during the subscription or onboarding process, in correspondence, and when submitting incident reports or accessing our platform
- Your organisation — where a colleague sets up access on your behalf, or where your organisation provides updated contact details
You are responsible for ensuring that any personal data you provide to us about yourself or colleagues is accurate and up to date.
6. Recipients of Client Personal Data
- Fortify Intelligence authorised staff — analysts, account managers, and administrators who require access to deliver the service
- Contracted Data Processors — technology providers who host or process data on our behalf under Data Processing Agreements (e.g. platform hosting, CRM). These processors act only on our documented instructions
- Police or competent authorities — only under warrant, legal obligation, or with your express permission
Client personal data will not be passed to any third party for their own marketing purposes. Fortify Intelligence will not transfer Client personal data outside the United Kingdom.
7. Data Retention
Fortify Intelligence will retain Clients' personal data only for as long as the Client relationship continues. When a Client terminates their subscription:
- Account and contact data will be deleted within 90 days of termination confirmation, subject to the exceptions below
- The submitting Client's identifier will continue to be associated with any incident reports they submitted for as long as those reports are retained — this is required where a report may be used for evidential purposes in legal proceedings
- Billing and contractual records will be retained for 6 years following termination, in accordance with statutory requirements
- Access logs and audit trails will be retained for 3 years following the last access event, or for the duration of any related legal proceedings if longer
8. Your Rights
As a Client, you have the following rights under UK GDPR in relation to the personal data we hold about you:
- Right of access — you may obtain a copy of all personal data we hold about you by contacting us at info@fortifyintelligence.co.uk. We will respond within one calendar month.
- Right to rectification — if any personal data we hold about you is incorrect or incomplete, you may ask us to correct it at any time by contacting us.
- Right to erasure — on termination of your subscription, your personal data will be irrevocably deleted by Fortify Intelligence (subject to the retention exceptions above). You may request confirmation of deletion.
- Right to object — you may object to processing based on legitimate interests (e.g. marketing communications) at any time.
- Right to restrict processing — in certain circumstances, you may ask us to pause processing of your data while a dispute is resolved.
- Right to complain — you have the right to complain about our processing to the Information Commissioner's Office at ico.org.uk/concerns/handling.
To exercise any of these rights, please contact us at info@fortifyintelligence.co.uk. We will respond within one calendar month.