Legal
Privacy policy
What we collect through this website, why, and the rights you have over it. In short: only what you send us, used only to reply.
Last updated 25 October 2026
Who we are
This website is run by FORTIGUARDIAN CONSULTING LTD, a company registered in Northern Ireland (company number NI744497), with its registered office at 32 Wellesley Avenue, Belfast, Northern Ireland, BT9 6DG. We are the controller of personal data collected through this website.
We also have companies in the United States (FortiGuardian Consulting LLC) and Nigeria (FortiGuardian Consulting Ltd). See company information. If your enquiry is about work in North America or Africa, we share it with the company that would do that work, and it uses your data only for the purposes in this policy.
Our privacy contact is contact@fortiguardian.com. Email it about anything to do with your personal data.
What we collect
- What you send us. If you use the contact form: your name, email address, organisation (if you give it), your region, the topic and your message. If you email us, whatever your email contains.
- CVs. If you send us your CV, the details in it, used only to consider you for roles.
- Server logs. Like every website, our hosting provider records technical details of each request: IP address, browser type, the page requested and the time. Railway, which hosts the site, and Cloudflare, which sits in front of it, keep these logs for their standard retention periods, then delete them.
- Spam protection. To stop the contact form being abused, we keep a one-way, keyed hash of your IP address and the times you sent messages. It can’t be turned back into your IP address and is deleted within 24 hours.
We don’t use cookies, analytics, advertising or tracking of any kind. See our cookie policy.
Why we use it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Replying to your enquiry and discussing work you’ve asked about | Steps at your request before entering a contract (Article 6(1)(b)), or our legitimate interest in answering enquiries (Article 6(1)(f)) |
| Keeping the website and contact form secure and free of spam | Our legitimate interest in protecting our systems (Article 6(1)(f)) |
| Keeping records we’re legally required to keep | Legal obligation (Article 6(1)(c)) |
We don’t sell your data, use it for marketing without your consent, or make automated decisions about you.
Who we share it with
- Railway, which hosts this website, and Cloudflare, which delivers it and protects it from attacks. Both see the technical details of each visit.
- Resend, which delivers messages from the contact form to our inbox.
- Each acts as our processor under a data processing agreement, and handles your data only on our instructions.
- Our US or Nigerian company, if your enquiry is about work in North America or Africa.
- Professional advisers or authorities, only where the law requires it.
International transfers
If your enquiry is passed to our US or Nigerian company, your data leaves the UK. We protect those transfers with the International Data Transfer Agreement (IDTA) issued by the Information Commissioner, or the UK Addendum to the EU Standard Contractual Clauses.
Railway, Cloudflare and Resend are based in the United States, so using them also transfers data out of the UK. Those transfers are covered by the safeguards in each company’s data processing terms. Email us for a copy of the relevant safeguards.
How long we keep it
- Enquiries that don’t lead to work: 24 months, then deleted.
- Enquiries that lead to work: for as long as our client records are kept.
- CVs: 6 months, then deleted, unless you ask us to delete yours sooner.
- Server logs: kept by Railway and Cloudflare for their standard retention periods.
- Spam-protection records: no more than 24 hours.
Your rights
Under UK data protection law you can ask to see the personal data we hold about you, and ask us to correct, delete or restrict it, to stop using it, or to send it to you or someone else in a portable format. Email contact@fortiguardian.com. We’ll respond within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We’d appreciate the chance to put things right first.
In Nigeria, you have similar rights under the Nigeria Data Protection Act 2023, and can complain to the Nigeria Data Protection Commission. In the United States, residents of some states have rights under state privacy laws; contact us and we’ll honour them where they apply.
Changes to this policy
If we change how we use personal data, we’ll update this page and the date at the top.