Marketing
Privacy Policy
Last updated: 5 Jul 2026
1. Data Controller
The data controller for evtenders.com is EVT Data Ltd, a company registered in England and Wales (company number 17255478) whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, trading as EVTenders. For data protection enquiries, contact us at:
Email: privacy@evtenders.com
2. What Data We Collect
We collect the following categories of personal data:
Account Information
- Name and email address
- Company name and job title (optional)
- Account preferences and alert settings
Payment Data
- Billing information is collected and processed by Stripe, our payment processor
- We do not store credit card numbers or full payment details on our servers
- We retain transaction records (amounts, dates, subscription status) for accounting purposes
Usage Data
- Pages viewed and features used
- Search queries and alert configurations
- IP address, browser type, and device information
- Referring website and session duration
3. Legal Basis for Processing
We process your personal data under the UK General Data Protection Regulation (UK GDPR) on the following legal bases:
- Contract performance: Processing necessary to provide our services to you, including account management and subscription fulfilment
- Legitimate interests: Analytics and service improvement, fraud prevention, and security monitoring
- Consent: Marketing communications and newsletter subscriptions, which you can withdraw at any time
- Legal obligation: Where we are required to retain data for tax, accounting, or regulatory purposes
4. Usage analytics and your cookie choice (legitimate interest)
We collect information about how EVTenders is used — the pages you visit and the features you use — to understand and improve the service. For signed-in users, this is linked to your account. Our lawful basis is legitimate interest.
Your analytics-cookies choice controls cookies, not whether we collect this usage data. If you decline analytics cookies: we won't store analytics cookies or a persistent identifier on your device; cookie-dependent features such as session replay and automatic activity capture stay off; but we'll continue to collect core usage events without cookies — including through our analytics provider, PostHog, which may process this data in the United States — to improve the service. For signed-in users, these events carry your account identifier (as event data, not a cookie), so your usage is linked to your account in both our own systems and PostHog.
We don't use this data to build advertising or marketing profiles, or to make automated decisions about you. You can object at any time (Article 21 UK GDPR) — contact us at privacy@evtenders.com and we'll stop processing your usage data on that basis.
You can review or change your analytics-cookies choice at any time:
5. How We Use Your Data
We use your personal data to:
- Provide, maintain, and improve our services
- Process payments and manage subscriptions
- Send tender alerts and notifications you have configured
- Send service updates and, where you have opted in, marketing communications
- Analyse usage patterns to improve the Service
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
6. Data Sharing
We do not sell your personal data. We share data with the following categories of third parties only as necessary to provide our services:
- Stripe: Payment processing. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy.
- Email service provider: For sending transactional emails, alerts, and marketing communications
- Analytics provider (PostHog): For understanding how the Service is used. For signed-in users, usage events carry your account identifier — see "Usage analytics and your cookie choice" above.
- Hosting providers: Infrastructure services for running the platform
We may also disclose your data if required by law, regulation, legal process, or enforceable governmental request.
7. Data Retention
We retain your personal data as follows:
- Account data: Retained for as long as your account is active, and for up to 12 months after account closure
- Payment records: Retained for 7 years as required by UK tax and accounting regulations
- Usage analytics data: Retained for up to 24 months, after which it is deleted or aggregated; for signed-in users it is linked to your account during that period (see "Usage analytics and your cookie choice")
- Marketing preferences: Retained until you withdraw consent
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data in certain circumstances
- Right to restrict processing: Request that we limit how we use your data
- Right to data portability: Request your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at privacy@evtenders.com. We will respond to your request within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Signing in with Google
You can create your EVTenders account or sign in using your Google account. When you do, we receive only the information you approve on Google's consent screen:
- your name
- your email address
- your Google profile picture
We use this information for a single purpose: to create your account and sign you in. We do not use it for advertising, and we never sell it or share it with third parties for advertising or any other purpose unrelated to running your account.
You stay in control. You can review or revoke EVTenders' access to your Google account at any time at myaccount.google.com/permissions. Revoking Google access simply removes the Google sign-in option; you can delete your EVTenders account and all associated data at any time using the rights described in this policy.
11. International Transfers
Your data may be transferred to and processed in countries outside the United Kingdom. Where we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office or transfers to countries with adequate data protection laws.
12. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or through the Service. The "last updated" date at the top of this page indicates when the policy was last revised.
14. Contact
For any questions or concerns about this Privacy Policy or our data practices, please contact:
EVT Data Ltd (trading as EVTenders)
Company number 17255478 · Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: privacy@evtenders.com