What this site collects, which is very little.

Who is answering for this

Prestige Programming is the software development brand of Fortify 24x7, and decisions about information arriving through these pages sit with that company. Every use of the word we below means exactly that. Queries about any paragraph here go through the contact form, and reach the same people.

What the website itself does

These pages are static files. There is no shop, no login, no basket and no account. We run no advertising and no analytics of our own, we set no cookie of our own anywhere on the site, and nothing about your visit is profiled, sold or shared for marketing.

Three things are worth naming honestly rather than leaving implied:

• Web fonts. The typefaces load from Google's font service. Requesting them tells that service your network address and which browser you are using, in the same way any request to any host would. If you would rather that did not happen, blocking those two hosts leaves the site fully readable in your own fonts.
• The anti-robot check. The contact page carries Cloudflare Turnstile, which is what stands between the form and a machine filling it in. It runs only on that page, and it does write to your browser while it works out whether you are a person. Cloudflare receives your network address and signals about the browser as part of that, under their notice rather than ours. It is not an advertising product and we get no profile out of it.
• Server logs. The web host that serves these files records the usual technical lines: address, time, the page requested, the browser string. They exist to keep the site up and to investigate abuse, and they are not used to build any picture of a person.

The request form

We publish no address on these pages, so the form is the only way in. It works in two steps. You fill it in, we mail a seven character code to the address you gave, and nothing reaches us until you type that code back. Until then the request sits unread in a holding table; if you walk away, it expires there and is never delivered.

Alongside what you typed, the request carries technical detail about the device that sent it: the network address it came from, the browser and operating system it reports, the language, timezone, screen and window size, and a short code derived from those same values that distinguishes one browser from another. It is collected for one reason, which is telling a real enquiry from an automated one, and it goes into the email we read rather than into any profile, database of visitors, or analytics tool. None of it is verified, none of it identifies you by name, and none of it is passed to anyone.

The step exists because a published address is harvested within days, and a form with no proof behind it fills with machine traffic. Requiring an address that can receive mail removes almost all of both. If a booking link is ever offered in place of the form, the company providing that scheduling tool receives whatever you enter into it, under their notice rather than this one.

When you write to us

A confirmed request arrives in an ordinary business mailbox and is read by a person, and so is any reply you send to the conversation afterwards. We keep the correspondence so we can pick the conversation up where it stopped. What you tell us about your business stays between the people who need it to answer you, and it is not passed to anyone else or used for any purpose other than answering.

Paying for a blueprint

No payment is taken on this site. When a project is confirmed as a fit, we send a payment link and the payment happens on pages belonging to Stripe. Card numbers, expiry dates and security codes are typed there, are never transmitted to us, and are never stored by us. What comes back is what an invoice needs: a name, a business, an email address, an amount, and the reference Stripe uses to identify the payment.

Material you give us during an engagement

A discovery involves being shown how your business really works, which often means process documents, exports, screenshots or access to a system. We treat that material as confidential, keep it to the people doing the work, and use it only to produce your blueprint. If it contains information about your customers or staff, tell us before you send it so we can agree how it is handled, and send only what the work needs.

How long anything is kept

Correspondence and engagement records are kept while the relationship is live and for as long afterwards as tax and contract records require. Working material from a discovery is kept while it might reasonably be useful to you, since clients often return a year later with the same plan. You can ask us to remove it sooner and we will, apart from records we are obliged to retain.

Requests we will act on

Send the request through the contact form. Tell us to list the records we keep on you, hand over a copy, correct something wrong inside them, or erase them entirely. Some places make those entitlements law and some do not, which makes no difference to how we respond. A reply comes back in writing, with no form to fill and nothing to pay.

How it is protected

Access is limited to the people doing your work. Systems that hold client material use individual accounts with a second factor. No certification is claimed here that we have not earned, and you will not read a promise that some arrangement cannot be breached, because none of them can. What can be said is that information we have no use for is never collected, and uncollected information is the only kind that stays safe.

Changes

If this notice changes materially, the revision date above changes with it and the previous wording is available on request. There is no mailing list to be removed from, because we do not run one.