Last updated: 21 September 2026
Who we are
TenderAI is a tender intelligence service for UK small and medium-sized businesses. We are the data controller for the personal data described on this page.
Questions about this policy, or any request about your data, can go to brief@tenderai.uk.
What we collect
If you sign up for the free weekly digest
- Your email address
- Your business sector
If you subscribe to the paid daily brief
- Your name, email address and phone number
- Your business sector and a description of your business
- Billing details, handled by Stripe (see below)
Automatically, when you use the site
We keep a simple record of page views so we can see which parts of the site are useful. Each record contains the page requested, the time, your IP address, your browser's user-agent string and, if you arrived from another site, the referring address.
Email engagement
We record whether the emails we send you were opened, and which links were clicked, so we can improve what we send.
Why we use it, and our legal basis
- To send the digest or brief you asked for — performance of a contract, or your consent for the free digest.
- To take payment and manage your subscription — performance of a contract.
- To understand how the site and emails are used — our legitimate interest in running and improving the service.
- To keep records and meet our legal obligations — legal obligation.
We do not sell your personal data, and we do not share it for anyone else's marketing.
Who we share it with
We keep this to the minimum needed to run the service:
- Stripe — processes card payments. Stripe receives your billing details and email address. We never see your full card number. See Stripe's privacy policy.
- Our email delivery provider — sends the digest and brief, and records opens and clicks on our behalf.
- Our hosting provider — stores the site and its data on servers in the European Union.
We may also disclose data where we are legally required to.
How long we keep it
- Digest and subscription data — for as long as you remain subscribed, then removed.
- Payment records — kept as long as tax and accounting rules require.
- Page-view records — kept for a limited period for reporting, then deleted.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- have inaccurate data corrected
- ask us to delete your data
- ask us to restrict or stop processing your data
- receive your data in a portable format
- object to processing based on our legitimate interests
Email brief@tenderai.uk and we will respond within one month. Every email we send includes a one-click unsubscribe link.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Data is transmitted over HTTPS and stored on access-controlled servers. Access is limited to those who need it to run the service. No system is perfectly secure, but we take these measures seriously and review them.
The WordPress plugin
Our free TenderAI Tender Alerts WordPress plugin is separate from this site, and collects nothing about you or your visitors.
Installed on your own site, the plugin stores only your keyword list and your attribution-link preference in your own database, plus a cached copy of the public tender list so pages load quickly. To refresh that list it makes one server-side request to tenderai.uk — the site you are on now — which returns a public data file. That request carries no information about your site, its users or its visitors. The plugin sets no cookies, loads no third-party scripts and contains no analytics or tracking.
Deleting the plugin removes everything it stored.
Changes to this policy
If we change how we handle personal data we will update this page and revise the date above. Significant changes will be communicated to subscribers by email.