Trust & Security
This page is maintained by Fort Stones Limited to answer common security and privacy questions about our procurement platform and website.
Our application is built on Lovable Cloud, which provides managed SSL/TLS certificates, encrypted database storage, authentication and row-level access controls. We do not operate our own servers; platform security is a shared responsibility between Fort Stones Limited and Lovable.
When you request a quote or book a consultation, your message is sent securely to our team by email. Optional file uploads are stored in a private storage bucket and are only accessible via time-limited signed URLs sent to our internal inbox. Uploaded files must match an approved extension list and are organised under a unique submission folder.
Backend data access is protected by authenticated sessions and row-level security policies. Administrative operations use a privileged service role only inside our server-side handlers, never in the browser.
We use the minimum cookies required for site functionality and authentication. We do not run third-party advertising or tracking pixels.
The site and its backend are hosted on Lovable Cloud infrastructure. Email delivery is handled through Lovable Email from our verified sender domain. We do not share your data with additional marketing or analytics services.
Contact submissions and uploaded documents are retained only as long as needed to respond to your request and manage our procurement relationship. If you would like your submission deleted, email us at hello@fortstones.com.
If you notice suspicious activity, a misconfiguration, or have a security disclosure, please contact us at hello@fortstones.com. We review reports promptly and coordinate any required fixes with our platform provider.
The controls described on this page reflect the security features we have enabled and our current operating practices. This page is not an independent security certification, audit report, or legal guarantee. If your organisation requires a formal security questionnaire or DPA, please reach out and we will be happy to discuss it.
