Privacy & Cookies
Tenderline republishes UK public procurement notices. Most of what it shows is about organisations, but some of it — the name of a sole trader who won a contract, the role mailbox of a buying team — is personal data. This notice says what we publish, why we are allowed to, what we strip out, what cookies the site sets, and how to object.
1. Who is responsible
The controller is Vivid Analytics Ltd, a company registered in England and Wales (number 16555468), registered office 58 New Bedford Road, Luton, LU1 1SH. It operates Tenderline (tenderline.uk).
We are registered with the UK Information Commissioner's Office under data protection registration reference ZC256297 (registered 23 September 2026).
For anything in this notice, write to [email protected].
2. What personal data appears on this site
Tenderline is built from procurement notices published by UK contracting authorities. Three kinds of personal data can occur inside them:
Supplier names that are individuals. Where a contract is awarded to a sole trader, a locum, a consultant or a “trading as” business, the supplier name, the awarding authority, the award value and the dates are personal data about that individual, even though an authority published them.
Authority contact points. We show the contact block the authority put in its notice when it is a role contact — a team mailbox such as procurement@…, a switchboard number, an organisation website.
What we remove. We do not publish named officers, personal mailboxes that look like an individual's, or UK mobile numbers, even when the notice contains them.
3. Where the data comes from
We do not collect this information from you. It comes from Find a Tender, the UK government's notice service, released as open data under the Open Government Licence v3.0. Company registration details are linked to Companies House rather than copied. Our methodology describes the pipeline in full.
4. Why we publish it, and our lawful basis
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): making public spending searchable and comparable, so that suppliers, journalists, researchers and authorities can see who buys what, from whom, at what price. The data was already published by a public body for the purpose of transparency, we add no contact targeting, we send no marketing, and we do not profile individuals. We judge that this does not override the rights of the people involved — but if it does in your case, section 7 tells you how to say so.
Because the data did not come from you, Articles 13 and 14 of the UK GDPR are met by this notice being public rather than by us writing to each person named in a notice.
5. How long we keep it
Procurement notices are a permanent public record, and the value of the catalogue is that history can be compared over time, so we keep notice-derived data for as long as we operate the service. Where a source notice is corrected or withdrawn at the publisher, our next synchronisation reflects that.
6. Who else processes it
The site runs on hosting infrastructure in the United Kingdom, behind Cloudflare, which serves and protects the site and processes IP addresses and request metadata in order to do so. If you accept analytics cookies (section 8), Google Analytics processes usage data; Google is a separate controller for its own purposes and may transfer data outside the UK under its standard contractual clauses and the UK addendum. We do not sell data and we do not share it with advertisers.
7. Your rights
You can ask us for a copy of the personal data we hold about you (access), ask us to correct it (rectification), ask us to restrict or stop publishing it (restriction and objection, Article 21), and ask us to delete it (erasure). Send any of these to [email protected]. We answer within one month.
Two honest limits. Erasure and objection are not absolute where publication serves a public interest in transparency of public spending; we will look at your circumstances, explain our decision, and if we keep publishing we will say why. And removing an entry here does not remove it from the government service that published it — that request goes to the authority that issued the notice.
If you are unhappy with how we handle it you can complain to the Information Commissioner's Office, ico.org.uk/make-a-complaint, or call 0303 123 1113.
8. Cookies and analytics
Tenderline needs no account and sets no cookies of its own to show you a page. The only cookies are the ones Google Analytics sets, and they only exist if you press Accept on the cookie bar. If you reject, or simply ignore the bar, nothing analytical is loaded and no analytics cookie is written.
What they are, if you accept: _ga and _ga_<id>, set by Google Analytics 4 for up to two years, which let us count visits and see which pages are used. They do not personalise content, they drive no advertising, and we have disabled nothing of yours by storing them.
We ask rather than assume because this is third-party analytics: the statistics exemption added to the Privacy and Electronic Communications Regulations by the Data (Use and Access) Act 2025 covers first-party measurement that is not shared onward, and Google Analytics is not that.
Changing your mind. Your choice is remembered in your browser for a year, which is why the bar does not come back on every visit. Use here or in the footer to change it at any time. Withdrawing deletes the analytics cookies immediately; a script already running in the page you are on stops measuring when you move to the next page. Clearing your browser's site data also clears the choice, and we will ask again.
We also keep server-side counts of page requests, which contain no cookies and identify no individual.
9. Changes
If this notice changes materially we update the date at the top of the page. Continued use after a change means the current version applies. Our Terms of Use govern the rest of your use of the service.