Privacy Policy.

1. Who We Are

Fortis Group ("we", "us", "our") is a company registered in England and Wales under company number 15349487. Our registered address is 7 Regent Terrace, Doncaster, DN1 2EE, England.

We are the data controller for personal data collected through this website. If you have any questions about how we handle your data, please contact us at office@fortis-uk.co.uk.

2. What Data We Collect

We may collect the following personal data when you use our website or contact us:

• Name and job title • Email address and telephone number • Company name and address • The content of any enquiry or application you submit • Technical data such as your IP address, browser type and pages visited (via cookies)

We do not collect sensitive personal data unless you voluntarily provide it as part of a job application.

3. How We Use Your Data

We use your personal data to:

• Respond to enquiries submitted through our contact form • Process vacancy applications and communicate with candidates • Improve our website and services • Comply with legal obligations

We will not use your data for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — responding to business enquiries and improving our services • Contractual necessity — where processing is required to take steps prior to entering a contract • Legal obligation — where we are required to process data to comply with the law • Consent — where you have given clear consent for a specific purpose

5. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Enquiry data is typically retained for 12 months. Job application data is retained for 6 months after the conclusion of a recruitment process unless you consent to longer retention.

6. Sharing Your Data

We do not sell, rent or trade your personal data. We may share data with:

• Service providers who assist us in operating our website and business (e.g. email delivery services), who are bound by data processing agreements • Professional advisers such as solicitors or accountants, where necessary • Regulatory authorities or law enforcement, where required by law

7. Cookies

Our website uses cookies to analyse traffic and improve your experience. You can accept or decline non-essential cookies using the banner displayed on your first visit. Your preference is saved in your browser's local storage.

Essential cookies required for the website to function are always active. For more detail on the cookies we use, please contact us.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you • Request correction of inaccurate data • Request erasure of your data in certain circumstances • Object to or restrict processing of your data • Data portability (where processing is based on consent or contract) • Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, contact us at office@fortis-uk.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Data submitted through our contact form is transmitted securely.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.