Privacy Policy
Last updated: 25 February 2026
1. Who We Are
Business Fortitude ("we", "us", "our") is a UK-based digital news publication operated under the Fortitude Foundation. Our registered address is available on request via [email protected].
2. Data We Collect
We collect the following personal data:
- Account data: name, email address, and profile photo when you sign in via Google OAuth.
- Newsletter subscription: full name, email address, and optionally your LinkedIn profile URL.
- Usage data: pages visited, time on site, and interactions collected via privacy-respecting analytics.
- Comment data: any content you post in article comment sections, linked to your account.
3. How We Use Your Data
- To provide and personalise your experience on the site.
- To send our newsletter if you have subscribed.
- To moderate and display comments.
- To analyse aggregated, anonymised usage patterns and improve the platform.
We will never sell your personal data to third parties.
4. Legal Basis for Processing (GDPR)
We process your data under the following lawful bases:
- Consent: when you sign up for our newsletter or create an account.
- Legitimate interest: to operate and improve the platform, and to moderate content.
- Contract: to provide services you have requested.
5. Cookies
We use essential cookies required for the site to function (e.g. authentication tokens) and analytics cookies to understand how visitors use the site. See our Cookie Policy for full details.
6. Data Sharing
We share data only with service providers who help us operate the platform (hosting, authentication, analytics). All providers are bound by data processing agreements. We do not share data with advertisers or sell data.
7. Data Retention
We retain your account data for as long as your account is active. Newsletter subscriber data is kept until you unsubscribe. Analytics data is aggregated and anonymised after 26 months.
8. Your Rights Under GDPR
If you are in the UK or EEA, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Restrict or object to processing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time.
To exercise any of these rights, contact us at [email protected].
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
10. Children's Privacy
Our services are not directed at individuals under 16. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via the site or email. The "last updated" date at the top reflects the most recent revision.
12. Contact Us
For any privacy-related enquiries, please email [email protected].
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.