Privacy Policy

1. Who we are

Labii Reatum Limited, trading as TenderBid (“TenderBid”, “we”, “us”, “our”), operates the TenderBid platform at tenderbid.co.uk. Labii Reatum Limited is a company registered in England and Wales (company number 17174080), registered office 1 Cambridge Court, Harrowdene Road, Wembley, HA0 2JW. We are the data controller for personal data collected through this platform.

Contact: privacy@tenderbid.co.uk

2. What data we collect

We collect the following categories of personal data:

• Account data — your name, email address, and password (stored in hashed form) when you register.
• Company data — company name, registered address, Companies House number, trade categories, and contact details provided during onboarding.
• Early-access data — name, company, work email, phone number, role, trade, region, package information, beta fit notes, campaign parameters, source page, anti-spam signals, and whether you opted in to product updates.
• Platform activity — tenders and trade packages created, quotations submitted or recorded, clarifications, award decisions, messages sent, and documents uploaded through the platform. We keep this history so a company can see how each decision was made.
• Supplier contacts added by contractors — a contractor can save the business name, trade, contact name and work email of its own suppliers and send them invitations to price its work, including suppliers who do not have a TenderBid account. A supplier contact is private to the contractor that added it.
• Email delivery records — for emails the platform sends, whether each one was accepted, delivered, delayed or bounced, so the sender can see if it arrived. We do not track whether emails are opened or links clicked.
• Usage data — log data, IP addresses, browser type, pages visited, CTA interactions, form start/submission events, and hashed IP-derived abuse-prevention signals.

3. How we use your data

We use your personal data to:

• Provide, operate, and maintain the TenderBid platform.
• Manage your account and authenticate your access.
• Enable tendering and bidding activity between users.
• Assess early-access fit, prioritise onboarding, and contact shortlisted companies.
• Manage lead status internally, including review, shortlist, contact, onboarding, or rejection decisions.
• Send transactional emails (account confirmation, bid notifications, messages).
• Send product updates, launch news, or beta invitations where you have opted in or where another valid lawful basis applies.
• Investigate and resolve technical issues or disputes.
• Measure first-party site conversion without advertising cookies.
• Meet our legal obligations under UK law.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — to deliver the platform services you have signed up for.
• Legitimate interests — to operate and improve the platform, and to detect fraud or abuse.
• Legal obligation — where we are required to process data under applicable UK law.
• Consent — where you opt in to receive product updates, launch news, or beta invitations that are not required to handle your early-access request.

5. Data sharing

We do not sell your personal data. We share data only where necessary:

• With the companies you work with — tenders are private. A contractor's jobs, documents and supplier notes are visible only to its own team and to the suppliers it invites, and each invited supplier sees only the package and documents shared with it. A supplier's quotation is visible to the contractor that invited it, never to competing suppliers.
• With service providers — we use Supabase for database, authentication and file storage, Netlify for website hosting, Resend for sending emails and Microsoft for our support mailbox, and may use anti-spam, analytics, or workflow providers. These providers process data on our behalf under data processing arrangements.
• For legal compliance — where required by law or to protect our legal rights.

6. Data retention

We retain your personal data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it by law.

Early-access enquiries that do not become active accounts are reviewed periodically and deleted or anonymised when they are no longer needed for beta onboarding, product research, legal compliance, or abuse prevention.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your data.
• Request a portable copy of your data.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, email privacy@tenderbid.co.uk.

8. Cookies

We use essential cookies for authentication and session management. We may also record first-party, cookie-free analytics events to understand conversion and improve the website. For more detail, see our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or via a notice on the platform. Continued use of TenderBid after changes take effect constitutes acceptance of the updated policy.