Privacy Policy
Last updated: 18 July 2026
1. Overview
TenderCircle Ltd ("we", "us") is committed to protecting your personal data. This privacy policy explains what we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data we collect
We collect the following categories of personal data:
- Account data — name, email address, and password (handled by Clerk authentication).
- Business profile data — company name, Companies House number, SIC codes, sectors, regions, contract value preferences, certifications, and employee count.
- Usage data — pages visited, features used, and interaction patterns within the platform.
- Payment data — billing email and subscription status. Card details are processed and stored by Stripe; we do not have access to your full card number.
- Communications — any messages you send to us by email or through the platform.
3. How we use your data
We use personal data for the following purposes:
- To provide, operate, and maintain the TenderCircle platform.
- To match you with relevant procurement opportunities based on your business profile.
- To process subscription payments and manage your account.
- To send service-related notifications (e.g. deadline alerts, subscription updates).
- To respond to your enquiries and provide customer support.
- To improve the platform through aggregated, anonymised usage analytics.
4. Legal basis for processing
We process your data under the following lawful bases:
- Contract — processing is necessary for the performance of our contract with you (providing the service you subscribed to).
- Legitimate interests — improving the platform and communicating with you about the service.
- Consent — where you opt in to marketing communications (you may withdraw consent at any time).
5. Third-party services
We share data with the following third-party processors, each of which operates under its own privacy policy:
- Clerk — authentication and user management.
- Stripe — payment processing and subscription billing.
- Cloudflare — infrastructure hosting and edge computing.
- Vercel / Railway — application hosting.
We do not sell, rent, or trade your personal data to any third parties for marketing purposes.
6. Data retention
We retain your personal data for as long as your account is active. If you delete your account or your subscription lapses, we will retain the minimum data necessary for legal and accounting obligations (up to 7 years) and delete the rest within 90 days.
7. Data security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your rights
Under the UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data ("right to be forgotten").
- Restriction — request that we limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email hello@tendercircle.co.uk. We will respond within 30 days.
9. Cookies
We use essential cookies to operate the platform (e.g. session management). We do not use advertising or tracking cookies. Clerk may set authentication cookies necessary for sign-in.
10. International transfers
Some of our third-party processors may store data outside the UK. Where this occurs we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
11. Changes to this policy
We may update this privacy policy from time to time. Material changes will be notified by email or via the platform at least 14 days before they take effect.
12. Contact us
For any questions about this privacy policy or your personal data, contact our data protection lead at hello@tendercircle.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.