Legal
Privacy notice
Fortivium is a boutique cybersecurity and technology consultancy, and we extend the same discipline to how we handle personal information. This notice covers fortivium.ky and email correspondence you send us.
Who we are
Fortivium, the consultancy trading under that name in the Cayman Islands, is the data controller. For any privacy question, write to info@fortivium.ky.
What we collect
The site itself runs no analytics, no advertising tags, no third-party scripts, no forms, and no accounts. The only personal information we receive is what you choose to send us by email: typically your name, your email address, the organisation you represent, and the contents of your message.
Our hosting provider keeps standard server access logs (IP address, browser type, requested page, timestamp) to operate the site. We do not use these logs for profiling.
How we use it
We use what you send us to respond to your enquiry, evaluate whether we can help under a confidential engagement, and keep professional records of our correspondence. We do not sell, rent, or trade your information, and we do not use it for marketing.
Legal grounds
Under the Cayman Islands Data Protection Act, 2017, we rely on:
- Steps prior to a contract, to evaluate and respond to your enquiry.
- Performance of a contract, where correspondence becomes part of an engagement record.
- Legitimate interests, balanced against your rights, to operate the site, maintain professional records, and protect security.
- Legal obligations, where Cayman Islands law requires us to retain or disclose information.
Cookies and tracking
This site sets no cookies and uses no local storage, analytics, or third-party scripts. If that ever changes, we will update this notice and show any consent banner the law requires before it does.
How long we keep information
We keep prospect correspondence for 3 years from our last contact, then delete it unless the enquiry has matured into an engagement. Engagement records are kept for as long as our professional, contractual, and legal obligations require. Server access logs are retained on a short, rolling basis by our hosting provider.
Your rights
Under the Data Protection Act, 2017, you have the right to be informed about how we use your information, to access it, to have inaccurate information corrected, to ask us to stop or restrict processing in certain circumstances, to object to processing based on legitimate interests, and to ask us to erase your information where the law permits.
To exercise any of these rights, write to info@fortivium.ky. We may ask you to confirm your identity first. If you are not satisfied with our response, you can complain to the Office of the Ombudsman of the Cayman Islands at ombudsman.ky.
Security
We apply the same controls we advise our clients on: need-to-know access, hardened and patched systems, encryption in transit, and regular review. If your enquiry involves sensitive material, we are happy to agree a secure channel before you share it.
Changes
We may update this notice from time to time. The current version is always the one published here, with the date at the top.