Fortify Security Systems (Gibraltar) Ltd (“Fortify”, “we”, “us”), company number 126816, is a security company based in Gibraltar, providing CCTV, access control, monitoring and related services to businesses. This policy explains how we collect, use and protect personal data when you contact us, use our website, or receive our services.
We process personal data where it is necessary to perform a contract with you, where we have a legitimate interest in running our business, where you have given consent, or where we are required to by law.
We never sell your data. We share it only with trusted partners who help us deliver our services — such as hardware and monitoring providers — and where required by law or a regulatory authority.
Where we operate or monitor CCTV on your behalf, footage is handled under our service agreement with you, stored securely, and retained only for the period we have agreed or that the law requires.
When you ask us to release footage from a system we manage or maintain — using the form at /request-cctv-footage, or any other way — we record the details of that request and everything we do in response to it. That record includes your name and contact details, your relationship to the site, what you asked for and why, your electronic signature, and the date and time you submitted it. If footage is released, we also record who authorised it, which engineer exported it, what was exported, who it went to and how.
We keep that record because a disclosure of CCTV footage is a disclosure of other people’s personal data, and we have to be able to account for it afterwards. Our lawful basis is our legitimate interest in maintaining an auditable disclosure log, and compliance with our legal obligations. Submitting a request does not oblige us to release anything: where the system belongs to someone else, they are the data controller and the decision is theirs.
Disclosure records are kept for six years from the date of the request, after which they are securely deleted. Exported footage itself is not stored on this website and is never uploaded through the form.
We keep personal data only as long as necessary for the purposes set out above, after which it is securely deleted or anonymised.
You have the right to access, correct or delete your personal data, to object to or restrict its processing, and to lodge a complaint with the Gibraltar Regulatory Authority. To exercise any of these rights, contact us using the details below.
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
Questions about this policy or your data? Email us at hello@fortify.gi.
