Privacy Policy

1. Who we are

TenderBid Ltd (“TenderBid”, “we”, “us”, “our”) operates the TenderBid platform at tenderbid.co.uk. We are the data controller for personal data collected through this platform.

Contact: privacy@tenderbid.co.uk

2. What data we collect

We collect the following categories of personal data:

• Account data — your name, email address, and password (stored in hashed form) when you register.
• Company data — company name, registered address, Companies House number, trade categories, and contact details provided during onboarding.
• Early-access data — name, company, work email, phone number, role, trade, region, package information, beta fit notes, campaign parameters, and whether you opted in to product updates.
• Platform activity — tenders posted, bids submitted, messages sent, and documents uploaded through the platform.
• Usage data — log data, IP addresses, browser type, and pages visited, collected automatically when you use the platform.

3. How we use your data

We use your personal data to:

• Provide, operate, and maintain the TenderBid platform.
• Manage your account and authenticate your access.
• Enable tendering and bidding activity between users.
• Assess early-access fit, prioritise onboarding, and contact shortlisted companies.
• Send transactional emails (account confirmation, bid notifications, messages).
• Send product updates, launch news, or beta invitations where you have opted in or where another valid lawful basis applies.
• Investigate and resolve technical issues or disputes.
• Meet our legal obligations under UK law.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — to deliver the platform services you have signed up for.
• Legitimate interests — to operate and improve the platform, and to detect fraud or abuse.
• Legal obligation — where we are required to process data under applicable UK law.
• Consent — where you opt in to receive product updates, launch news, or beta invitations that are not required to handle your early-access request.

5. Data sharing

We do not sell your personal data. We share data only where necessary:

• With other platform users — your company profile and tender/bid activity is visible to other users as part of normal platform operation.
• With service providers — we use Supabase for database and authentication services. These providers process data on our behalf under data processing agreements.
• For legal compliance — where required by law or to protect our legal rights.

6. Data retention

We retain your personal data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it by law.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your data.
• Request a portable copy of your data.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, email privacy@tenderbid.co.uk.

8. Cookies

We use essential cookies for authentication and session management. For more detail, see our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or via a notice on the platform. Continued use of TenderBid after changes take effect constitutes acceptance of the updated policy.