Privacy Policy

Fortis Security Platform Ltd. ("we," "our," or "us") operates the Fortis platform (the "Service") that connects businesses with vetted security providers across Europe. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring the security of your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Personal Information

• Name, email address, and phone number when you register or request quotes
• Company information including business name, address, and industry
• Security requirements and preferences
• Payment information (processed securely by our payment processors)
• Communication records between you and security providers

Technical Information

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and click-through rates
• Device identifiers and mobile network information
• Cookies and similar tracking technologies

Location Information

• General location data to match you with local security providers
• Specific addresses for service delivery (with your consent)

• Service Provision: Match you with appropriate security providers and facilitate communications
• Account Management: Create and manage your account, process requests, and provide customer support
• Payment Processing: Process payments and manage billing (through secure third-party processors)
• Communication: Send service-related notifications, updates, and marketing communications (with consent)
• Platform Improvement: Analyze usage patterns to improve our services and user experience
• Legal Compliance: Comply with legal obligations and protect against fraud or illegal activities
• Quality Assurance: Monitor and evaluate the quality of security services provided through our platform

Legal Basis for Processing

Information Sharing

We may share your information with:

• Security Providers: Necessary information to provide quotes and services
• Service Providers: Third-party vendors who help us operate our platform (under strict confidentiality agreements)
• Payment Processors: To process payments securely
• Legal Authorities: When required by law or to protect our legal rights
• Business Transfers: In connection with any merger, acquisition, or sale of company assets

We do not sell your personal information to third parties.

Data Security

We implement comprehensive security measures including:

• SSL/TLS encryption for data transmission
• Industry-standard encryption for data storage
• Regular security audits and penetration testing
• Access controls and employee training
• Incident response procedures
• Regular backups and disaster recovery plans

Your Rights Under GDPR

You have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications or cookies
• Complain: Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@fortis-security.com

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze website usage and performance
• Provide personalized content and recommendations
• Measure the effectiveness of our marketing campaigns

You can manage cookie preferences through your browser settings or our cookie consent manager.

Data Retention

We retain personal information for:

• Active Accounts: As long as your account remains active
• Transaction Records: 7 years for financial and tax compliance
• Marketing Data: Until you withdraw consent
• Legal Requirements: As required by applicable laws

International Data Transfers

We may transfer your personal data outside the European Economic Area (EEA) to our service providers. All transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided personal information, please contact us immediately.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by email or through our Service. The "Last Updated" date at the top indicates when the policy was last revised.