Privacy Policy
Last updated 2 August 2026
This policy explains what personal data fortytech.co.uk collects, why, and what you can do about it. It is written to describe what the site actually does rather than to cover every hypothetical.
Who we are
FortyTech Limited is the data controller for this site. We are a private limited company registered in England and Wales, company number 15111199, with our registered office at 30 Arabian Avenue, Swindon, England, SN5 5EL.
For anything in this policy — including any request about your data — contact will@fortytech.co.uk.
What we collect, and why
When you complete an assessment (the founder assessment or the team assessment) we collect your name, email address, company name where you give one, and your answers — including any free-text you write. We use it to produce your result, to email you a copy of it, and to work out whether what FortyTech does is a fit for what you need.
When you use the enquiry form we collect your name, email address, company name where you give one, a description of what you need, and your rough timing. We use it to reply to you.
When you simply browse we collect analytics — see below — and our hosting provider records standard server logs, which include IP addresses. We also hold your IP address briefly in memory to rate-limit form submissions and stop automated abuse. That is discarded within the hour and is never written to a database or attached to your enquiry.
We also record how you arrived — the campaign tags on the link you clicked, and the site that referred you, if there was one. It is kept in your browser for the length of your visit and sent to us only if you go on to submit a form, so we can tell which advert or article actually reaches people. It is not a cookie, it is not shared with anyone, and it disappears when you close the tab.
Our lawful basis for handling enquiry and assessment data is legitimate interests — you contacted us about our services and we need to respond and keep a record of the conversation. Our basis for non-essential analytics and advertising cookies is your consent, asked for the first time you visit and described below.
Cookies and analytics
The first time you arrive you’ll be asked whether to allow analytics and advertising cookies. Nothing in that category loads until you say yes — if you decline, or simply ignore the question, those scripts are never added to the page and no such cookie is written. You can change your mind whenever you like using the Cookie choices link at the bottom of any page; declining after previously accepting also clears the advertising cookies already set.
- Vercel Analytics — aggregate page-view measurement. Cookieless, does not identify you individually, and therefore runs for everyone without needing consent. It is how we know how many people visit at all.
- Google Analytics — page views and a small number of events (such as starting or completing an assessment). Sets cookies. Only loads with your consent.
- Meta pixel — used when we are running advertising on Facebook or Instagram, to measure whether those ads lead anywhere. Sets advertising cookies. Only loads with your consent.
You can also block or delete cookies in your browser settings, opt out of Google Analytics with Google’s browser add-on, and control how Meta uses data about you from your Facebook or Instagram ad preferences.
Who your data is shared with
We do not sell your data, and we do not share it with anyone for their own marketing. It is processed on our behalf by:
- Vercel — hosting and analytics
- Resend — sending the assessment result and enquiry emails
- Google — analytics
- Meta — advertising measurement, when advertising is running
Some of these providers process data outside the UK. Where they do, that transfer is covered by the safeguards those providers have in place, such as the UK International Data Transfer Addendum or an adequacy decision.
How long we keep it
Assessment results and enquiries arrive as email and stay in our mailbox for as long as the conversation is live and for a reasonable period afterwards as a business record. Ask us to delete yours and we will. Analytics data is retained according to each provider’s own retention settings. Rate-limiting IP data is transient, as described above.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time. Email will@fortytech.co.uk and we will deal with it.
If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
Changes
If this policy changes, the date at the top changes with it. There is no version history — the current version is the one that applies.