Privacy Policy

1. Who We Are

Buzz Tender Alert ("we", "us", "our") operates the tender alert service at www.buzztenderalert.co.uk. We are the data controller for the personal data collected through this website.

Contact: support@buzztenderalert.co.uk

2. What Data We Collect

We collect and process the following personal data:

• Email address – to send you tender alerts and service communications
• Payment information – processed securely by Stripe (we do not store card details)
• Keywords and preferences – to customise your tender alerts
• Additional email recipients – if you add team members to receive alerts

3. How We Use Your Data

We use your data for:

• Sending daily tender alert emails matching your keywords
• Processing your subscription payments
• Providing customer support
• Sending essential service communications (e.g., payment confirmations, account changes)

4. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract (Article 6(1)(b)): To fulfil the service you subscribed to (sending tender alerts).
• Legitimate Interests (Article 6(1)(f)): For fraud prevention, ensuring network security, and improving our services. We have balanced these interests against your rights.
• Legal Obligation (Article 6(1)(c)): To comply with legal requirements (e.g., tax records).

We do not send marketing emails unless you explicitly opt in.

5. Data Sharing and International Transfers

We share your data with trusted third-party processors. Some are based outside the UK/EU (specifically in the USA). We ensure your data is protected using the UK Extension to the EU-US Data Privacy Framework (UK Data Bridge) or Standard Contractual Clauses (SCCs).

• Stripe – Payment processing (USA, Data Privacy Framework certified)
• Supabase – Database hosting (EU region)
• Resend – Email delivery service (USA, Data Privacy Framework certified)
• Vercel – Website hosting (Global, utilizing UK/EU edge locations)

We do not sell your data to third parties.

6. How Long We Keep Your Data

We retain your data for the duration of your subscription plus 30 days after cancellation (to allow for reactivation). Payment records are retained for 7 years as required by UK tax law. You can request deletion of your account at any time.

7. Your Rights

Under UK GDPR, you have the right to:

• Access – Request a copy of your personal data
• Rectification – Correct inaccurate data
• Erasure – Request deletion of your data
• Portability – Receive your data in a portable format
• Object – Object to processing in certain circumstances
• Complain – Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at support@buzztenderalert.co.uk.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication (magic links), and access controls. All third-party processors we use maintain appropriate security certifications.

9. Cookies

We use essential cookies only for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this policy from time to time. For significant changes, we will notify you by email. The latest version is always available on this page.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@buzztenderalert.co.uk