Forti Nova Ltd
Privacy Policy
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR.
Company No. 15988757VAT No. 48 27215 80Data Controller: Forti Nova Ltd
Effective date: April 2025 · Compliant with UK GDPR & Data Protection Act 2018
Data Retained For
10 Years
Marketing
Opt-in Only
Data Sold?
Never
Your Rights
UK GDPR
Privacy Contact & Your Rights at a Glance
1
To exercise any data right — access, deletion, correction or objection — email info@fortinova.co.uk with your name and proof of identity.
2
We will acknowledge your request within 5 working days and respond in full within one calendar month.
3
If you are unhappy with our response, you have the right to complain to the ICO at ico.org.uk or 0303 123 1113.
Who We Are & Data Controller
- Data Controller — Forti Nova Ltd is the Data Controller responsible for your personal data. We are a specialist supplier of waterproofing, structural and composite building systems, based at Unit 1–3 Bridgewater Business Park, Gladstone Street, Blackburn, BB1 3DL. Company No. 15988757. VAT No. 48 27215 80.
- Contact for Privacy Matters — For all privacy-related queries, data subject access requests or complaints, contact us by email at info@fortinova.co.uk or by post to the address above.
- Applicable Law — We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains your rights and how we handle your data.
- Changes to This Policy — We may update this Privacy Policy from time to time. We will post any changes here with a revised effective date. We encourage you to check this page periodically.
What Personal Data We Collect
- Enquiry & Contact Data — When you submit a project enquiry, contact form, or call us, we collect: your full name, email address, phone number, postcode or town, company name (if applicable), and details about your project — including project type, dimensions, scope, timeline and any uploaded drawings or photographs.
- Transaction Data — If you place an order, we collect: billing name and address, delivery address, payment method type (we do not store card numbers), and order history.
- Technical & Usage Data — When you visit our website, we automatically collect: your IP address, browser type, device type, operating system, referring URL, pages visited, and time spent on pages. This data is collected via Google Analytics.
- Communications Data — If you email or call us, we may retain records of that communication to process your enquiry and improve our service.
- Marketing Preferences — Where you have opted in, we hold your name and email address for the purpose of sending occasional product updates, guides or offers. You can opt out at any time.
How We Use Your Data
- Responding to Enquiries — We use your name, contact details and project information to respond to your enquiry, prepare quotations, and provide technical guidance. Legal basis: legitimate interests / contract performance.
- Processing Orders — We use your name, address, and order details to process and fulfil your purchase, arrange delivery, and provide post-sale support. Legal basis: contract performance.
- Marketing Communications — Where you have opted in, we may send you occasional emails about new products, guides, or promotions relevant to your project type. Legal basis: consent. You may withdraw consent at any time by emailing info@fortinova.co.uk.
- Website Analytics — We use Google Analytics to understand how visitors use our website — which pages are popular, where visitors come from, and how they navigate. This data is aggregated and anonymised where possible. Legal basis: legitimate interests.
- Legal Obligations — We may process data where required to comply with a legal obligation — for example, retaining financial records for HMRC purposes. Legal basis: legal obligation.
Third Parties We Share Data With
- Google Analytics — We use Google Analytics (Google LLC) to analyse website traffic. Google may process data on servers outside the UK. Google's privacy policy applies: https://policies.google.com/privacy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
- Email & Marketing Platforms — We may use a third-party email platform to send marketing communications to opted-in subscribers. Such platforms process your name and email address on our behalf and are bound by data processing agreements.
- Payment Processors — Card payments are processed by our payment provider. We do not store card numbers. Our payment provider is PCI-DSS compliant.
- Delivery & Logistics — We share your name, address and order details with our courier and logistics partners solely for the purpose of fulfilling your delivery.
- Legal Disclosure — We may disclose your data to law enforcement, regulatory bodies or other third parties where required or permitted by law — for example, to prevent fraud or comply with a court order.
- No Sale of Data — We do not sell, rent or trade your personal data to third parties for their own marketing purposes.
Cookies
- What Are Cookies — Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your browser, remember preferences, and gather analytical data.
- Cookies We Use — We use: (1) Essential cookies — required for the website to function correctly. (2) Analytics cookies — set by Google Analytics to collect anonymised data about how visitors use our site. (3) Preference cookies — to remember your choices where applicable.
- Managing Cookies — You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. Note that disabling certain cookies may affect website functionality. For more information, visit www.aboutcookies.org.
- Google Analytics Opt-Out — To opt out of Google Analytics tracking specifically, install the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
Data Retention
- Retention Period — We retain personal data for up to 10 years from the date of last contact or transaction. This period reflects our need to retain business and financial records, manage potential warranty claims, and comply with HMRC requirements.
- Marketing Data — Where you have opted in to marketing, we retain your contact details until you withdraw consent. You may opt out at any time by emailing info@fortinova.co.uk.
- Deletion — When the retention period expires, or upon a valid deletion request, personal data is securely deleted or anonymised. We will confirm deletion in writing on request.
Data Security
- Security Measures — We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration — including secure servers, access controls, and encrypted communications.
- Data Breaches — In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay, as required by UK GDPR.
- Third-Party Links — Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We recommend you read their privacy policies before submitting any personal data.
Your Rights Under UK GDPR
- Right to Access — You have the right to request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one calendar month. Submit requests in writing to info@fortinova.co.uk with proof of identity.
- Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Contact us at info@fortinova.co.uk.
- Right to Erasure — You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note: we may be required to retain certain data for legal or financial compliance purposes.
- Right to Restrict Processing — You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have contested.
- Right to Object — You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
- Right to Data Portability — Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
- Right to Complain — If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
Legal Basis Summary
- Consent — Used for: marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Contract Performance — Used for: processing orders, arranging delivery, responding to enquiries that lead to a purchase.
- Legitimate Interests — Used for: responding to general enquiries, website analytics, improving our services. We have assessed that our legitimate interests are not overridden by your rights in these cases.
- Legal Obligation — Used for: retaining financial and tax records as required by HMRC and applicable law.
Information Commissioner's Office (ICO)
The ICO is the UK's independent body set up to uphold information rights. If you believe we have not handled your data correctly, you have the right to complain to the ICO at www.ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO.
Questions about your data?
Email us and we'll respond within one working day.
Forti Nova Ltd · Company No. 15988757 · VAT No. 48 27215 80 · Unit 1–3 Bridgewater Business Park, Gladstone Street, Blackburn, BB1 3DL