Skip to Content
Legal

Data Protection Statement

Last updated: 3 July 2026

Fortisan Recruitment Solutions CIC ("Fortisan", "we", "us" or "our") is committed to protecting the privacy and security of your personal data. This statement explains what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Many of the people we work with — students, jobseekers, and Ukrainian refugee professionals in particular — are trusting us with sensitive personal and career information at an important moment in their lives. We take that responsibility seriously.

1. Who we are

Fortisan Recruitment Solutions CIC (company number 15071490) is the data controller responsible for your personal data collected through this website. Our registered office is Office 1, Izabella House, 24-26 Regent Place, City Centre, Birmingham B1 3NJ, United Kingdom.

2. What personal data we collect

Depending on how you interact with the Site, we may collect:

  • Contact details: name, email address, phone number, and any postal address you provide.
  • Enquiry and application details: the content of messages you send us through the Contact form, and — for the Fortisan Computing School application form — date of birth, gender, your selected course/level, and any background information you choose to share about yourself.
  • Recruitment-related information: where provided directly (e.g. by email or in person), your CV, work history, qualifications, and right-to-work or immigration status, where relevant to a specific placement or programme.
  • Technical data: standard web server logs such as IP address, browser type, and pages visited, used only for site security and performance.

We only ask for special category data (such as immigration or refugee status, or health information relevant to a reasonable adjustment) where it is necessary for the specific recruitment or education-support service you have asked us to provide, and we handle it with additional care and only for that purpose.

3. How we use your data

We use your personal data to:

  • respond to your enquiries and process applications (contact form, Computing School application);
  • assess candidates against, and introduce them to, relevant employer or institution opportunities;
  • manage the admissions process for Fortisan Computing School programmes;
  • maintain the security and proper functioning of the Site;
  • comply with our legal and regulatory obligations, for example under employment agency regulation.

Our lawful bases for these uses are, depending on context: your consent (for example, when you submit a form), the steps necessary to enter into or perform a contract with you (for example, arranging a placement), our legitimate interests in running an effective recruitment and education-support service, and, occasionally, a legal obligation. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Who we share your data with

We share personal data only where necessary to deliver the service you've asked for:

  • with prospective employers or educational institutions, where you have applied for or expressed interest in a specific opportunity they offer;
  • with our IT and hosting providers, who process data on our behalf and under contract to keep the Site and our systems running;
  • with regulators or authorities where we are legally required to do so.

We do not sell your personal data to third parties, and we do not share it for third-party marketing purposes.

5. International transfers

Where a placement, application, or enquiry involves an employer, institution, or service provider located outside the UK, your data may be transferred internationally. Where this happens, we take steps to ensure an appropriate level of protection is in place, such as relying on the UK's adequacy regulations or approved contractual safeguards.

6. How long we keep your data

We retain personal data only for as long as necessary for the purposes it was collected for — for example, for the duration of an active application plus a reasonable follow-up period, or as required to meet our legal and accounting obligations. Data relating to unsuccessful or withdrawn enquiries is deleted or anonymised after a reasonable period of inactivity.

7. Your rights

Under the UK GDPR, you have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data, in certain circumstances;
  • request that we restrict or object to certain processing;
  • request a copy of your data in a portable format;
  • withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in Section 10. If you are unhappy with how we have handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

8. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to enquiry and application data is limited to staff who need it to carry out their role.

9. Children's data

Our services are directed at adults and young people of further/higher education and working age. We do not knowingly collect personal data from children under 13 through this Site.

10. Contact us / Data protection queries

If you have any questions about this statement or how we handle your personal data, please contact us:

11. Changes to this statement

We may update this statement from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.