Privacy notice

Draft. This is an outline and will be completed and checked before launch. It is not yet legal advice or a final policy.

Version 0.1 (draft), November 2026. Covers UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

[TRADING NAME / OWNER], trading as Bidsill, [ADDRESS]. Contact: hello@bidsill.co.uk. ICO registration number: [TO ADD once the data protection fee is paid].

2. What we collect

  • Contact details you give us (name, work email, phone).
  • Company details (company name, Companies House number, trades).
  • Tender documents and links you send us.
  • Business contact details we collect from public sources: Find a Tender, Contracts Finder, Companies House and company websites.

3. Why we use it, and our lawful basis

  • Delivering services you buy: contract.
  • Responding to enquiries and free bid checks: legitimate interests / steps before a contract.
  • Business-to-business marketing to corporate subscribers: legitimate interests (assessment on file).
  • Marketing to individuals and sole traders: consent only.
  • Accounting and tax records: legal obligation.

4. Where we get data

The public registers listed above. For unsolicited outreach we only use generic business addresses (for example info@ or office@).

5. Who we share it with

Our service providers (processors): website host, email provider, form provider, CRM, payment processor and AI model provider(s) on terms that do not allow training on your data. [TO ADD: named providers, countries and transfer safeguards such as UK adequacy regulations or the UK IDTA.]

6. How long we keep it

  • Client files: 6 years (tax).
  • Prospect data: 12 months without engagement, then deleted.
  • Suppression list: kept indefinitely with minimal data so we can honour opt-outs.

7. Your rights

Access, rectification, erasure, restriction, objection (including an absolute right to object to direct marketing) and portability. Email hello@bidsill.co.uk to use them.

8. Automated decision-making

None with legal or similarly significant effects. AI assists with drafting only; a person reviews everything.

9. Cookies

This site sets no cookies and uses no analytics. If we add analytics, we will only use it with your consent (PECR regulation 6) and update this notice.

10. Complaints

Please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.

11. Updates

We will date and version every change to this notice.