Platform security
Our application is built on a secure cloud host, which provides managed SSL/TLS certificates, encrypted database storage, authentication and row-level access controls.
Trust & Security
How we keep your data safe.
This page is maintained by Fort Stones Limited to answer common security and privacy questions about our procurement platform and website.
Contact form & uploads
When you request a quote or book a consultation, your message is sent securely to our team by email. Optional file uploads are stored in a private storage bucket and are only accessible via time-limited signed URLs sent to our internal inbox. Uploaded files must match an approved extension list and are organised under a unique submission folder.
Access control
Backend data access is protected by authenticated sessions and row-level security policies. Administrative operations use a privileged service role only inside our server-side handlers, never in the browser.
Cookies & analytics
We use the minimum cookies required for site functionality and authentication. We do not run third-party advertising or tracking pixels.
Hosting & subprocessors
The site and its backend are hosted on a secure Cloud infrastructure. Email delivery is handled through our verified sender domain. We do not share your data with additional marketing or analytics services.
Data retention
Contact submissions and uploaded documents are retained only as long as needed to respond to your request and manage our procurement relationship. If you would like your submission deleted, email us at hello@fortstones.com.
Report a concern
If you notice suspicious activity, a misconfiguration, or have a security disclosure, please contact us at hello@fortstones.com. We review reports promptly and coordinate any required fixes with our platform provider.
Not a certification
The controls described on this page reflect the security features we have enabled and our current operating practices. This page is not an independent security certification, audit report, or legal guarantee. If your organisation requires a formal security questionnaire or DPA, please reach out and we will be happy to discuss it.