Set out below is the treatment of information arriving at Fortify 24x7 by way of this storefront, together with the treatment of material the security services touch once they are operating. It names categories concretely, one entry family at a time, on the view that a privacy statement written to be skimmed has not really been written.
Revision dated 24 August 2026Equity IT Solutions is a trading name. Fortify 24x7 stands behind it, determines the treatment of what arrives here, and answers for the handling of material the purchased services touch. Read every instance of the word we below as Fortify 24x7.
Send a question about any paragraph on this page to support@equityitsolutions.com. A member of staff will read it and answer it.
Very little happens here. No advertising trackers run, no behavioural profile gets assembled, and no third party marketing script has been embedded in these pages.
Checkout is executed by Stripe. Card number, expiry, and security code are entered on pages Stripe controls. Those values never travel to this site, are never displayed to any member of our staff, and are never written into any system of ours.
Stripe returns only what an account requires in order to exist: a contact address, a firm name, the chosen entries with their quantities, the health of the subscription, and the identifiers Stripe itself uses for the customer record and the subscription record.
Because these services are operated for you, we handle whatever the enrolled systems emit. Which categories apply depends entirely on which entries your firm holds.
Every one of those categories is processed on your instruction and for the delivery of what you purchased. None of it is analysed for our commercial benefit, and none of it is offered for sale. That position is fixed rather than provisional.
When a case is raised, whether from the portal or by ordinary email, its heading, its narrative, the notes engineers append, and any attachment are retained inside our service management platform, so that the record of an issue stays attached to the issue.
Where a case can be described without naming a client, please describe it that way. We will look after the detail properly if you include it, but a case record that never had to carry an account number is the tidier outcome for everybody.
A managed service is assembled from other companies' platforms, each of them bound to us by contract. They are listed by name here partly for transparency and partly so that the vendor oversight duty your own programme carries has something specific to work with.
Outside that list, we disclose only under legal compulsion. Personal information is not sold at any price and is not released to advertising networks under any arrangement.
Account and billing records persist while the subscription is live, and afterwards for the span that tax law and ordinary accounting practice oblige. Security telemetry persists for the window printed on the relevant register or fixed during scoping. Copies produced by a recovery entry follow whichever schedule you selected.
Account closure is handled as a discussion rather than a switch. Tell us you are going and we will put in writing what is deleted and on what date. Destruction timetables vary by platform, so what you receive is the answer for your own configuration and not a generic assurance.
Your jurisdiction may give you the ability to obtain a copy of what is held, to have inaccuracies corrected, to require deletion, or to object to a particular kind of processing. Raise it with us and we will work the request through. Asking costs nothing and carries no consequence.
Where our role is that of a processor acting for a business customer, an employee of that business should approach their own employer first. Our part is to help the employer respond.
An engineer enters a customer environment only where a task requires it, our own authentication demands a second factor, and activity carried out inside a customer tenant is recorded. Treat that as an account of our working practice and not as an assurance of perfection. Any supplier offering the latter should worry you.
Written diligence questionnaires about our controls get answered. Your programme is obliged to oversee its suppliers, and making that difficult would be a strange way for us to behave.
Any change of substance advances the revision date printed above. Where a change affects the treatment of material already in our hands, account holders are contacted directly instead of being left to spot the difference.