Privacy policy

01Who we are

tenderITT is a trading name of GRC Health Group Ltd, a company registered in England and Wales (company number 16753129). We are the data controller for the personal data described here.

Contact us about anything on this page at support@tenderitt.com.

02What we collect

• Account details: your name, business email, company name and password.
• Business profile: your trade, regions, turnover band, the insurance and accreditations you hold and, if you add them, cover levels, renewal or expiry dates and whether you have a Carbon Reduction Plan. We use these to check whether you qualify for a tender and to remind you before something lapses.
• Bid outcomes: if you tell us whether you bid on or won a tender, we store your answer to improve your matches and readiness insights.
• Billing: your plan and invoices. Card payments are handled by our payment provider; we never see or store your full card number.
• Usage: the searches you run, the tenders you open and basic device and log data that keep the service secure.

03How we use it

04AI and your verdicts

tenderITT uses AI to read public tender notices once and pull out their requirements (such as turnover, insurance and accreditations). Your Go, Gap or No-Go verdict is then worked out by fixed rules that compare those requirements with your business profile. Your profile is not sent to the AI service.

• Verdicts are guidance to help you decide whether to bid. They are not decisions with legal or similarly significant effects about you.
• We do not allow your data to be used to train third-party AI models.
• Each verdict explains why, and links to the original notice so you can check the full tender pack yourself.

05Who we share it with

We never sell your data. We share it only with service providers who help us run tenderITT, under contracts that require them to protect it:

• Hosting and database providers
• Our payment provider
• Our email delivery provider
• Our AI service provider, which reads public tender notices (not your profile)

We may also share data if the law requires it.

06International transfers

Some of our providers may process data outside the UK. When they do, we use approved safeguards such as the UK International Data Transfer Agreement or Addendum, or a UK adequacy decision.

07How long we keep it

• Account and profile data: while your account is open, then deleted within 90 days of closing it.
• Invoices and payment records: 6 years, as UK tax law requires.
• Marketing contacts: until you unsubscribe, after which we keep only what we need to stop emailing you.

08Your rights

You can ask to see, correct, delete or move your data, or object to or restrict how we use it. Email support@tenderitt.com and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

09Cookies

We use essential cookies to keep you signed in and the site working. We use analytics cookies (Google Analytics, provided by Google) only if you say yes. They tell us which pages are visited and how people find us; we turn off Google’s advertising features and do not use them to identify you. You can change your choice at any time with “Cookie settings” at the bottom of every page.

10Keeping data safe

Data is encrypted in transit and at rest, access is limited to people who need it, and we review our providers’ security before we use them.

11Changes to this policy

If we change this policy in a way that matters, we will email account holders before the change takes effect. The date at the top shows the latest version.