How we look after your data

This page is a plain-language summary of how TenderSignal looks after your personal data. The full wording is in our privacy policy, which is the authoritative version. If anything here differs from it, the policy wins.

Who is responsible for your data

TenderSignal is a trading name of the company named in the privacy policy, a company registered in England and Wales. That company is the data controller for the personal data handled through the service.

What we hold

• Account information: your name, your email address and your password. The password is stored in hashed form, which means we do not keep it as readable text.
• Business profile: the industry sectors, regions and keywords you give us during onboarding.
• Usage data: pages visited, tenders viewed and search queries.
• Preferences: your alert frequency, saved searches and notification settings.

What we use it for

• Personalising the tenders and recommendations you see, based on your business profile.
• Sending email digests and notifications about relevant opportunities.
• Improving and developing the service.
• Responding to your enquiries and providing support.
• Preventing fraud and keeping the service secure.

Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies. Analytics cookies may be used to understand how the service is used, and these are anonymised where possible.

Who else sees it

We do not sell your personal data. We share data only with trusted service providers who process it on our behalf under strict data processing agreements, for example to deliver email and to take payments for paid plans. The privacy policy lists our key providers by name. Where a provider is outside the UK or the European Economic Area, appropriate safeguards protect any transfer of personal data.

How long we keep it

We keep your personal data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to keep it for longer. To start that process, see Delete your account.

Your rights under UK GDPR

You have the right to:

1. Access the personal data we hold about you.
2. Ask us to correct inaccurate data.
3. Ask us to delete your data. You can also delete your account yourself at any time in Settings: see Delete your account.
4. Object to or restrict how we process it.
5. Receive your data in a structured, machine-readable format.
6. Withdraw consent at any time where we rely on consent.

How to use them

For the other rights, email [email protected] and say which one you would like to use. Write from the email address on your account so we can match your request to the right data.

Good to know

• You can edit your name and your Email preferences yourself under Settings. Your email address is shown there too.
• Your password can be changed at any time. See Reset your password.
• The privacy policy shows the date it was last updated at the top of the page.