Privacy policy

Who we are

Fortis Business Advisory Limited (“Fortis”, “we”, “us”) is the data controller for personal data collected through this website and in the course of providing our services. Our registered office is 18 Callywith Gate, Launceston Road, Bodmin PL31 2RQ. You can contact us about data protection at richard@accountscovered.com.

What we collect

Information you give us

• Contact details: name, business name, email address and phone number when you use our contact form, email us or call.
• The content of your enquiry and any subsequent correspondence.
• If you become a client: the information needed to deliver the engaged services, which may include financial records, payroll data about your employees, HR records and supplier information. This is set out in our engagement letter.

Information collected automatically

• Technical data such as IP address, browser type, device and pages visited, collected through server logs and any analytics we deploy.
• We do not use advertising cookies. Where we use analytics, we configure it to minimise personal data and will ask for consent where the law requires it.

Why we use it and our lawful basis

• Responding to enquiries: our legitimate interest in answering you and running our business.
• Delivering services: performance of our contract with you, and compliance with legal obligations such as anti-money laundering checks, tax legislation and professional body requirements.
• Introducing you to partner firms: your consent, obtained before we share your details with any independent, FCA-authorised broker or planner.
• Marketing: our legitimate interest in keeping existing clients informed about relevant services. You can opt out at any time and we will never sell your data.
• Site security and improvement: our legitimate interest in keeping the website secure and useful.

Who we share it with

We share personal data only where necessary and only with:

• Service providers who process data on our behalf, such as cloud hosting, accounting software, payroll software, email and document storage providers, under contracts that protect your data.
• HMRC, Companies House, The Pensions Regulator, pension providers and other bodies where required to deliver the engaged services.
• Independent, FCA-authorised partner firms, with your consent, where you ask us for an introduction.
• Professional advisers, insurers and regulators where required by law or to protect our legal rights.

Where data is transferred outside the UK we rely on adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement.

How long we keep it

• Enquiries that do not become engagements: up to 24 months.
• Client records: for the duration of the engagement and typically six years afterwards, or longer where tax or anti-money laundering rules require.
• Website logs: typically 90 days.

Your rights

Under UK GDPR you have the right to access your personal data, have it corrected or erased, restrict or object to processing, request portability and withdraw consent where consent is our basis. To exercise any right, email richard@accountscovered.com. We will respond within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve the matter first.

Security

We use encrypted connections, access controls, multi-factor authentication and reputable cloud providers to protect your data. No system is perfectly secure, and we will notify you and the ICO where the law requires if a breach affects you.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be highlighted on this page.