Privacy notice
The short version: this site sets no cookie, runs no analytics and profiles no one. The only personal data that exists is what you choose to type into the enquiry form, and you can have it deleted by asking.
Who we are
FORTOXA builds agentic workflows, security workflows and agentic web apps as complete custom builds. The enquiry form on fortoxa.com is how to reach us, and you can write to sales@fortoxa.com.
What this site collects on its own
- No cookies are set, and none are read.
- No analytics, no advertising tags, no tracking pixels, no session recording, no fingerprinting.
- No third-party embeds. The fonts are embedded in the page itself rather than loaded from a font service.
Nothing is sent anywhere until you press send in the enquiry form. Nothing you type is kept in your browser in this build: there is no draft saving, so no local storage, session storage or IndexedDB is written, and a half-written enquiry does not survive a reload or a return visit.
What happens to an enquiry you send
What you send is posted to our own intake on fortoxa.com and stored
there for the team to read. It holds the outcome you describe, the systems involved,
the approver, the timeline and the email address you give. No calendar event is
created and no document is written until you and we have agreed the work.
We use it to answer you and to do the work. We do not profile you, we do not sell it, and we do not pass it to anyone else for their own purposes. Ask us by email to delete it and we will delete it.
Security reports
Vulnerability reports go through the form linked on the security page, which is a Google Form. Google processes those submissions under its own terms as our service provider; we receive the report. The disclosure policy itself is published machine-readably at /.well-known/security.txt.
Ordinary server records
Like every website, ours keeps ordinary technical records of requests — IP address, time, page requested, browser user agent. They exist for security and fault finding, are not combined with anything else, are not used to build a profile, and are kept only as long as they are useful for those two purposes.
Who processes data for us
- Cloudflare — serves and protects this site at the edge, so it sees requests in transit.
- Google — hosts the mailbox we answer from, and hosts the vulnerability report form.
Those are the only third parties involved. There is no data broker, no advertiser and no analytics vendor in the chain.
Retention
An enquiry stays in our intake while the conversation about it is live and while work that came out of it is being delivered. You can ask us to remove it at any time by writing to sales@fortoxa.com. Reports sent through the security form are kept as a security record of the disclosure.
Your choices
- Ask what we hold about you.
- Ask for it to be corrected.
- Ask for it to be deleted, and have that confirmed.
Write to sales@fortoxa.com and say so; there is no account to log into. We answer the same way an enquiry is answered.
Changes
If this notice changes, the date below changes with it. This page is one file with no script, so what you read is what is served.