Privacy

Privacy Notice

This notice explains how Fortuna Systems Ltd handles personal information when you visit this website, contact us, or do business with us.

1. Who we are

Fortuna Systems Ltd is the controller of personal information covered by this notice.

Fortuna Systems Ltd
Company No. 09305042
Registered office: Brookfield Court, Selby Road, Garforth, Leeds, England, LS25 1NB
Email: contact@fortunasystems.co.uk

2. Personal information we may collect

Depending on how you interact with us, this may include:

• your name, job title, organisation and business contact details;
• information contained in enquiries, correspondence and meeting notes;
• information needed to establish, manage or deliver a client or supplier relationship;
• billing, contractual and transaction information; and
• technical information contained in routine web-server and security logs, such as IP address, browser information, requested pages, timestamps and diagnostic data.

3. How we obtain personal information

We normally receive information directly from you, from your organisation, through business correspondence, or as part of delivering professional services. Limited technical information may also be generated when you access this website.

4. Why we use personal information

We may use personal information to:

• respond to enquiries and discuss potential engagements;
• enter into and perform contracts;
• provide advisory and consultancy services;
• manage client, supplier and professional relationships;
• maintain business, accounting and legal records;
• protect our systems, website and business from misuse or security threats; and
• meet legal, regulatory and professional obligations.

5. Our lawful bases

Depending on the circumstances, we rely on one or more lawful bases under UK data protection law:

• Contract — where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.
• Legitimate interests — where necessary to operate, protect and develop our business, manage professional relationships, respond to enquiries and secure our systems, provided those interests are not overridden by your rights and interests.
• Legal obligation — where processing is required to comply with applicable law.
• Consent — where we specifically ask for consent. You may withdraw consent at any time.

6. Who we may share information with

We do not sell personal information. Where necessary, information may be shared with service providers that support our business, such as hosting, email, IT, accounting and professional advisers, and with regulators, public authorities or other parties where disclosure is required by law or is necessary to establish, exercise or defend legal rights.

Service providers are expected to handle personal information only for the purposes for which it has been provided and subject to appropriate contractual and security controls.

7. International transfers

Some service providers may process information outside the United Kingdom. Where this involves a restricted transfer of personal data, we use an applicable lawful transfer mechanism and appropriate safeguards as required by UK data protection law.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, contractual and record-keeping requirements.

Routine enquiries that do not lead to an engagement will normally be deleted or anonymised when they are no longer useful for that purpose. Client, contractual and financial records may need to be retained for longer periods to meet legal and business requirements. Technical logs are retained according to operational and security needs and the retention practices of our hosting providers.

9. Security

We use proportionate technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

10. Your rights

Subject to the conditions and exemptions in UK data protection law, you may have rights to request access to your personal information, correction, erasure, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw that consent.

Your right to object

If we use your personal information on the basis of legitimate interests, you can object for reasons relating to your particular situation. Email contact@fortunasystems.co.uk to raise an objection. We will consider your objection and explain our decision.

To exercise a right or ask a privacy question, contact contact@fortunasystems.co.uk.

11. Data protection complaints

To make a complaint about how Fortuna Systems handles your personal information, email contact@fortunasystems.co.uk or write to our registered office shown above. Please explain your concern and how we can contact you.

We will acknowledge your complaint within 30 days of receiving it, make appropriate enquiries without undue delay, keep you informed of progress and tell you the outcome without undue delay.

You also have the right to complain to the UK Information Commissioner's Office (ICO). Visit ico.org.uk/make-a-complaint for current contact details and guidance.

12. Cookies and website technologies

Our use of cookies and similar technologies is described separately in our Cookie Notice.

13. Changes to this notice

We may update this notice when our processing activities, services or legal requirements change. The current version will be published on this website.

Last updated: 16 October 2026