How we handle personal data
Last updated: [date of publication]
Who we are
FlashFortify is provided by [legal entity name], [registered address], [company number, if a limited company]. We are the controller for the personal data described in this notice. You can contact us at [email protected].
This website
This website doesn't use cookies, analytics or tracking. Our hosting provider may keep standard server logs (such as IP address, time and page requested) for security and to keep the site running. These are kept for [retention period].
When you contact us
If you email us, we use your name, email address and anything you include in your message to reply to you and, if you ask, to set up an account. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract. We keep enquiries for [retention period].
Using the FlashFortify service
- Account details: name, email address, role, sign-in times and an activity log of actions in the portal, used to provide the service securely.
- Alert recipients: the email addresses you choose to receive alerts.
- DMARC aggregate reports: sending server IP addresses, message counts and authentication results for your domains. These describe mail servers, not individual people. We don't request forensic reports, which can contain personal data.
Data is stored in the UK (Amazon Web Services, London region). Sign-in is handled by our identity service, which stores your password and multi-factor authentication details; FlashFortify itself never sees your password.
Who we share it with
We use these service providers to run FlashFortify: [Amazon Web Services (hosting, email), any other providers]. We don't sell personal data or use it for advertising.
Your rights
You have the right to access, correct or delete your personal data, to object to or restrict how it is used, and to data portability. Contact us to use these rights. You can also complain to the Information Commissioner's Office (ico.org.uk).