Fortress Compliance (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and share your personal data when you interact with us, whether through our website, via email, or through other communication channels.

By using our services or providing your personal data, you agree to the practices described in this policy.

What This Policy Covers

This policy applies to personal data collected by Fortress Compliance in connection with:

• The services we provide as a compliance and recruitment organisation.
• Your use of our website.

It does not apply to services or practices that we do not control, even if accessible through our website.

Who We Are

Fortress Compliance is a trading name of Fortress Recruitment Services Limited, registered in England and Wales under company number 15560302.

We are the controller of your personal data, meaning we are responsible for deciding how and why your data is processed. When we process your personal data, we comply with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU General Data Protection Regulation (EU GDPR).

Personal Data We Collect

The personal data we collect depends on the nature of your interaction with us. This may include:

• Contact Details: Name, email address, phone number, and company information.
• Application Details: CVs, employment history, education, references, and any specific details requested by a potential employer.
• Verification Data: Date of birth, proof of identity, and other compliance documents such as passports or DBS checks.
• Usage Data: Information about how you use our website, including browsing activity.

How Your Data is Collected

We collect personal data in several ways, including:

• Directly from you: via forms, email, phone, or face-to-face communication.
• From third parties: including LinkedIn, recruitment agencies, references, and referrals.
• Automatically: through cookies and other website technologies.

How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide recruitment and compliance services.
• To verify your identity and meet regulatory requirements.
• To share your CV and application with potential employers (only with your consent).
• To prevent fraud and maintain system security.
• To communicate with you about changes to our policies or services.

Legal Grounds for Use:

• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests.

Marketing

We may use your contact information to send you updates about our services. You have the right to opt out of receiving marketing communications at any time by contacting us.

Who We Share Your Personal Data With

We only share your data when necessary and with your consent, or as required by law. This may include:

• Potential employers as part of the recruitment process.
• Service providers, such as CV formatting or IT support services.
• Regulatory authorities and law enforcement, if required.
• Professional advisors, including auditors and legal consultants.

International Data Transfers

If your data is transferred outside the UK or EEA, we ensure adequate protection is in place, such as using contractual agreements or relying on adequacy decisions.

Data Retention

We retain your personal data only for as long as necessary:

• Candidate data: Up to 7 years for recruitment purposes.
• Financial records: 6 years for tax compliance.
  After the retention period, your data will be securely deleted or anonymised.

Your Rights

Under data protection law, you have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request corrections to inaccurate data.
• Erasure: Request deletion of your data in certain circumstances.
• Restriction: Limit how we process your data.
• Data Portability: Request your data in a portable format.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact us at the details below.

Cookies

Our website uses cookies to improve user experience and analyse website performance. For more information, refer to our [Cookie Policy].

Keeping Your Data Secure

We use technical and organisational measures to safeguard your personal data. In the event of a data breach, we will notify affected individuals and regulators as required.

How to Complain

If you have concerns about our use of your data, please contact us directly. If you are not satisfied, you can complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint.

Changes to This Policy

We may update this privacy policy periodically. Significant changes will be communicated to you directly or via our website.

Contact Us

If you have questions or wish to exercise your rights, you can reach us at:

Fortress Compliance
Suite 8k Trigg House, Warren Drive, Prestatyn, Wales, LL19 7HT
[email protected]
+44 (0)2920 024217