1. Introduction

Welcome to Fortune Founder Ltd ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website fortunefounder.co.uk and use our services.

Fortune Founder Ltd is a company registered in England and Wales. We provide web development, mobile app solutions, AI-powered automation, and enterprise-grade security services to businesses worldwide.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Fill out our contact forms or request a consultation
• Subscribe to our newsletter or blog updates
• Engage with us for our services
• Participate in surveys or promotions
• Communicate with us via email, phone, or social media

This information may include:

• Identity Data: Full name, job title, company name
• Contact Data: Email address, phone number, business address
• Technical Data: IP address, browser type, device information
• Usage Data: Information about how you use our website and services
• Project Data: Details about your project requirements and business needs

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing actions, including:

• IP address and geographic location
• Browser type and version
• Operating system
• Referring website addresses
• Pages viewed and time spent on pages
• Click patterns and navigation paths

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Business partners and service providers
• Analytics providers (such as Google Analytics)
• Advertising networks
• Social media platforms

3. How We Use Your Information

We use the information we collect for various purposes, including to:

3.1 Provide and Manage Our Services

• Deliver the services you have requested
• Process and manage your project requirements
• Communicate with you about your projects and inquiries
• Provide customer support and respond to your requests

3.2 Improve Our Website and Services

• Analyse usage patterns to improve user experience
• Develop new features and services
• Conduct research and analytics
• Monitor and prevent technical issues

3.3 Marketing and Communications

• Send you newsletters and promotional materials (with your consent)
• Inform you about new services, features, and updates
• Personalise your experience on our website
• Conduct targeted advertising campaigns

3.4 Legal and Security

• Comply with legal obligations and regulations
• Enforce our terms and conditions
• Protect against fraudulent, harmful, or illegal activity
• Verify your identity when required

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on the following legal grounds:

• Consent: Where you have given us explicit consent to process your data for specific purposes (e.g., marketing communications).
• Contract: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Legal Obligation: Where we need to process your data to comply with a legal or regulatory obligation.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.

5. Data Sharing & Third Parties

We may share your information with the following categories of third parties:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our website and delivering our services:

• Hosting Providers: For website hosting and infrastructure
• Analytics Services: To analyse website traffic and user behaviour
• Email Service Providers: For sending communications
• Payment Processors: For processing transactions securely
• Security Services: Including Google reCAPTCHA for spam prevention

5.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. Cookies Policy

6.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help the website remember your preferences and improve your browsing experience. Cookies can be "session" cookies (which are deleted when you close your browser) or "persistent" cookies (which remain on your device for a set period or until you delete them).

6.2 How We Use Cookies

We use cookies and similar tracking technologies for the following purposes:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Security Cookies: Protect against spam and abuse

6.3 Cookies We Use

The following table provides detailed information about the cookies used on our website:

6.4 Managing Cookies

You have the right to decide whether to accept or reject cookies. You can manage your cookie preferences in the following ways:

• Cookie Consent Banner: Use our cookie consent tool when you first visit our website
• Browser Settings: Most browsers allow you to refuse or accept cookies through their settings. However, disabling cookies may affect website functionality.
• Third-Party Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact Inquiries: Retained for 2 years after our last communication
• Client Project Data: Retained for 7 years after project completion for legal and contractual purposes
• Marketing Data: Retained until you unsubscribe or request deletion
• Analytics Data: Retained according to Google Analytics default retention settings (14-26 months)

After the retention period expires, we will securely delete or anonymise your personal information.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

8.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal information.

8.3 Right to Erasure

You have the right to request deletion of your personal information in certain circumstances (also known as the "right to be forgotten").

8.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

8.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes.

8.7 Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time.

8.8 Right to Lodge a Complaint

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmitted to and from our website
• Secure hosting infrastructure with regular security updates
• Access controls limiting who can view personal information
• Regular security assessments and vulnerability testing
• Employee training on data protection practices

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. International Transfers

Some of our service providers may be located outside the United Kingdom and European Economic Area (EEA). When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Government or European Commission
• Binding Corporate Rules for our service providers
• Transfers to countries with adequate data protection laws

For more information about our international data transfers, please contact us.

11. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if you have provided one) or through a prominent notice on our website

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions about this Privacy Policy, would like to exercise your rights, or have concerns about how we handle your personal information, please contact us using the details provided on our Contact page. We will respond to your request within 30 days.