Privacy Policy

Last updated: October 2026

Fortify Insight ("we", "us", "our") is a UK-based cybersecurity and digital safety consultancy. This policy explains what personal information we collect through this website, how we use it, and the choices you have. We aim to keep this practical and proportionate to the way a small consultancy actually operates.

1. Who is responsible for your data

Fortify Insight is the data controller for personal information collected through this website. If you have any questions about this policy or how your information is handled, contact us at info@fortifyinsight.com.

2. What information we collect

We only collect information that you choose to provide to us:

  • Contact form enquiries: your name, email address, and message, plus your organisation, phone number and area of interest if you choose to provide them.
  • Email enquiries: any information you include when emailing us directly, including your email address and the content of your message.
  • Requests for Cyber Essentials Mapper access: the same details as above, so that we can respond and arrange access when the tool is available.

We do not ask for, and ask that you do not send, sensitive personal information (such as health, financial or security-credential details) through the contact form. If a project later requires us to handle such information, we will agree how it is shared and protected separately in writing.

3. How we use your information

We use the information you provide to:

  • respond to your enquiry and provide the information or quote you have requested;
  • arrange workshops, reviews, consultations or other services you have asked about;
  • let you know when the Cyber Essentials Mapper is available, if you have requested access;
  • keep basic records of our correspondence for business and accounting purposes.

Our legal basis for this is our legitimate interest in responding to enquiries and running our business, and, where we go on to provide services, the performance of a contract with you. We do not use your details for unsolicited marketing and we will not add you to a mailing list without asking first.

4. How the contact form works

This website is hosted on IONOS web hosting in the UK/EU. When you submit the contact form, a small script on our web server checks the details you entered and sends them to Fortify Insight as an email. Your submission is not stored in a database on the website; it exists only as the email we receive. IONOS acts as our hosting provider and may process the data in transit as part of providing that service.

The form includes a hidden anti-spam field. This does not collect any information about genuine visitors; it simply helps us filter out automated submissions.

5. Cookies and analytics

This website does not currently use cookies, tracking pixels or third-party analytics. No non-essential cookies are set, and no cookie consent banner is therefore displayed.

Our hosting provider may record standard server logs (such as IP address, browser type and pages requested) for security and performance purposes. This is normal for any website and is not used by us to identify individuals.

If we introduce analytics or other cookie-based tools in future, we will update this policy first and, where required by UK law, add an appropriate consent mechanism before any non-essential cookies are set.

6. Who we share information with

We do not sell or rent your personal information. We only share it with:

  • our website hosting provider (IONOS), which runs the server that delivers this site and sends contact form emails to us;
  • our email provider, in order to receive and reply to your messages;
  • professional advisers or authorities where we are legally required to do so.

Some of these providers may process data outside the UK. Where this happens, they do so under recognised safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep your information

  • Enquiries that do not lead to work: we aim to delete these within 12 months of our last contact with you.
  • Client correspondence and project records: kept for up to 6 years after the work ends, in line with normal UK business and tax record-keeping requirements.
  • Contact form submissions: these are delivered to us by email and are not retained on the web server itself.

8. How we protect your information

We take reasonable and proportionate steps to protect the information you send us, including using reputable hosting and email providers, enabling multi-factor authentication on our business accounts, and limiting access to those who need it. No method of transmission over the internet is completely secure, so please avoid including confidential information in an initial enquiry unless we have agreed a secure way to share it.

9. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct information that is inaccurate or incomplete;
  • ask us to delete your information, where we have no ongoing need to keep it;
  • object to, or ask us to restrict, how we use your information;
  • withdraw any consent you have given.

To exercise any of these rights, email info@fortifyinsight.com. We will respond within one month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Links to other websites

This website may link to external sites, such as the National Cyber Security Centre or Cyber Essentials certification bodies. We are not responsible for the privacy practices of other websites and encourage you to read their policies.

11. Changes to this policy

We may update this policy from time to time, for example if we add new features to the website. The "last updated" date at the top of this page shows when it was last changed.

12. Contact

Fortify Insight
Email: info@fortifyinsight.com