Privacy Policy
Last updated: 8 August 2026
This privacy notice explains how TenderMet collects and uses personal data when you use our tender analysis platform at tendermet.co.uk, and the rights you have under the UK GDPR and the Data Protection Act 2018.
1. Data controller
The data controller for TenderMet is Mr Paul Benie, trading as TenderMet, United Kingdom.
- ICO Registration Reference: ZC201458
- Website: https://tendermet.co.uk
- Privacy contact: privacy@tendermet.co.uk
- Support contact: support@tendermet.co.uk
2. Personal data we collect
- Account information — your email address, authentication credentials (stored in hashed form by our authentication provider) and account settings.
- Company profile information — business details you choose to enter, such as company name, business type, sectors, turnover, insurance levels, accreditations and contract experience.
- Billing and subscription information — your plan, subscription status, billing period, usage counts and the customer/subscription identifiers issued by Stripe. We do not collect or store full payment card details; card data is handled entirely by Stripe.
- Tender documents you upload — the files you submit for analysis, which may contain personal data if you include it.
- Analysis results and generated outputs — extracted requirements, deadlines, risks, Company Fit assessments, Decision Scores and recommendations.
- Technical and security information — IP address, browser and device information, and server, security and error logs generated when you use the service.
3. Why we process your data and our lawful bases
- Contractual necessity (Article 6(1)(b)) — creating and managing your account, analysing the documents you upload, storing your tender history, applying plan usage limits and administering your subscription.
- Legitimate interests (Article 6(1)(f)) — keeping the platform secure, preventing abuse and fraud, diagnosing faults, and improving the reliability and quality of the service. We balance these interests against your rights and freedoms.
- Consent (Article 6(1)(a)) — where we ask for it, for example any optional communications or optional non-essential cookies. You may withdraw consent at any time.
- Legal obligation (Article 6(1)(c)) — retaining billing and tax records and responding to lawful requests.
4. How uploaded tender documents are processed
When you upload a tender document it is transmitted securely to our analysis service, where automated and AI-assisted processing extracts key information such as the contracting authority, contract value, deadlines, eligibility requirements and risks. The resulting analysis is stored against your account so you can return to it without re-uploading the document.
You must only upload tender documents you are authorised to process and share. If a document contains personal data or confidential information belonging to others, you are responsible for ensuring you have a lawful basis and any necessary permissions to submit it. In respect of that content, you act as the controller and TenderMet acts as your processor.
Automated analysis does not produce legal effects or similarly significant effects for individuals; it produces decision-support information for your business.
5. AI and automated analysis disclosure
TenderMet uses automated and AI-assisted technology to read and interpret tender documents. AI output can contain errors, omissions or misinterpretations. TenderMet analysis, Company Fit results, Decision Scores and recommendations are decision-support information only and do not replace professional legal, procurement, financial or commercial advice. You must verify all important requirements, deadlines and obligations against the original tender documentation before relying on them.
6. Service providers and third-party processors
- Stripe Payments Europe / Stripe, Inc. — subscription billing and payment processing. Stripe collects and processes your payment details directly under its own privacy policy.
- Hosting, database and authentication infrastructure — our platform hosting, managed database, authentication and file-handling providers, who store your account data, company profile and saved analyses on our behalf.
- Document analysis and AI processing providers — the services that perform the automated extraction and analysis of uploaded tender documents.
All processors act on our documented instructions under written data-processing terms. We do not sell your personal data or share it for advertising.
7. International data transfers
Some of our providers process data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement / the EU Standard Contractual Clauses with the UK Addendum, together with appropriate technical and organisational safeguards.
8. Data retention
- Account and company profile data — kept while your account is active.
- Uploaded documents and analyses — kept until you delete them or close your account.
- Billing and subscription records — kept for up to seven years to meet UK tax and accounting obligations.
- Security and technical logs — kept for a limited period, normally up to 12 months.
When you close your account we delete or anonymise your personal data, except where we must retain it by law.
9. Security
We use encryption in transit (HTTPS), access controls, row-level database security so that your records are only accessible to your account, secure authentication and least privilege access for administrative operations. No system can be guaranteed completely secure, but we take appropriate technical and organisational measures to protect your data and will notify you and the ICO of any qualifying personal data breach.
10. Your rights under UK GDPR
- Right of access to the personal data we hold about you
- Right to rectification of inaccurate or incomplete data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to object to processing based on legitimate interests
- Right to data portability where applicable
- Right to withdraw consent where processing is based on consent
To exercise any of these rights email privacy@tendermet.co.uk. We will respond within one month. You can also delete saved tenders and edit your company profile yourself from within the application.
11. Complaints to the ICO
If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would appreciate the chance to resolve your concern first.
12. Cookies
TenderMet uses only the cookies and similar storage needed to run the service and keep it secure. See our Cookie Policy for details.
13. Changes to this policy
We may update this notice from time to time. Material changes will be highlighted in the application or by email, and the "last updated" date above will change.