Privacy Policy

1. Data Controller

The data controller for evtenders.com is EVT Data Ltd, a company registered in England and Wales (company number 17255478) whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, trading as EVTenders. For data protection enquiries, contact us at:

Email: privacy@evtenders.com

2. What Data We Collect

We collect the following categories of personal data:

Account Information

• Name and email address
• Company name and job title (optional)
• Account preferences and alert settings

Payment Data

• Billing information is collected and processed by Stripe, our payment processor
• We do not store credit card numbers or full payment details on our servers
• We retain transaction records (amounts, dates, subscription status) for accounting purposes

Usage Data

• Pages viewed and features used
• Search queries and alert configurations
• IP address, browser type, and device information
• Referring website and session duration
• Acquisition data: the campaign parameters in the links you arrive through, the site that referred you, and the page you land on, recorded on your first visit and your most recent campaign visit.

3. Legal Basis for Processing

We process your personal data under the UK General Data Protection Regulation (UK GDPR) on the following legal bases:

• Contract performance: Processing necessary to provide our services to you, including account management and subscription fulfilment
• Legitimate interests: Analytics and service improvement, understanding how people find EVTenders so we can attribute sign-ups to the source they came from, fraud prevention, and security monitoring
• Consent: Marketing communications and newsletter subscriptions, which you can withdraw at any time
• Legal obligation: Where we are required to retain data for tax, accounting, or regulatory purposes

4. Usage analytics and your cookie choice (legitimate interest)

We collect information about how EVTenders is used — the pages you visit and the features you use — to understand and improve the service. For signed-in users, this is linked to your account. Our lawful basis is legitimate interest.

Your analytics-cookies choice controls cookies, not whether we collect this usage data. If you decline analytics cookies: we won't store analytics cookies or an analytics identifier on your device; cookie-dependent features such as session replay and automatic activity capture stay off; but we'll continue to collect core usage events without cookies — including through our analytics provider, PostHog, which may process this data in the United States — to improve the service. For signed-in users, these events carry your account identifier (as event data, not a cookie), so your usage is linked to your account in both our own systems and PostHog.

How you found us. We store small first-party cookies recording how you got here (the campaign parameters, referring site, and landing page): one for your first visit, one for your most recent campaign visit, so a sign-up is credited to the campaign that drove it. They hold no identifying details, last up to 90 days, and are set on a legitimate-interest basis.

We don't use this data to build advertising or marketing profiles, or to make automated decisions about you. You can object at any time (Article 21 UK GDPR) — contact us at privacy@evtenders.com and we'll stop processing your usage data on that basis.

You can review or change your analytics-cookies choice at any time: Manage privacy choices

5. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve our services
• Process payments and manage subscriptions
• Send tender alerts and notifications you have configured
• Send service updates and, where you have opted in, marketing communications
• Analyse usage patterns to improve the Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

6. Data Sharing

We do not sell your personal data. We share data with the following categories of third parties only as necessary to provide our services:

• Stripe: Payment processing. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy.
• Email service provider: For sending transactional emails, alerts, and marketing communications
• Analytics provider (PostHog): For understanding how the Service is used. For signed-in users, usage events carry your account identifier — see "Usage analytics and your cookie choice" above.
• Hosting providers: Infrastructure services for running the platform

We may also disclose your data if required by law, regulation, legal process, or enforceable governmental request.

7. Data Retention

We retain your personal data as follows:

• Account data: Retained for as long as your account is active, and for up to 12 months after account closure
• Payment records: Retained for 7 years as required by UK tax and accounting regulations
• Usage analytics data: Retained for up to 24 months, after which it is deleted or aggregated; for signed-in users it is linked to your account during that period (see "Usage analytics and your cookie choice")
• Marketing preferences: Retained until you withdraw consent

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@evtenders.com. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Signing in with Google

You can create your EVTenders account or sign in using your Google account. When you do, we receive only the information you approve on Google's consent screen:

• your name
• your email address
• your Google profile picture

We use this information for a single purpose: to create your account and sign you in. We do not use it for advertising, and we never sell it or share it with third parties for advertising or any other purpose unrelated to running your account.

You stay in control. You can review or revoke EVTenders' access to your Google account at any time at myaccount.google.com/permissions. Revoking Google access simply removes the Google sign-in option; you can delete your EVTenders account and all associated data at any time using the rights described in this policy.

10. Cookies

We use cookies and similar technologies to provide and improve our services:

• Essential cookies: Required for the Service to function, including authentication and session management
• Analytics cookies: Help us understand how visitors interact with the Service. These can be disabled without affecting core functionality
• Preference cookies: Remember your settings and preferences (such as dark mode)
• Attribution cookies: Two first-party cookies recording how you found us (the campaign link and referring site), used only to attribute your sign-up to its source. No identifying details; up to 90 days.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service. You can review or change your analytics-cookies choice at any time — see "Usage analytics and your cookie choice" above.

11. International Transfers

Your data may be transferred to and processed in countries outside the United Kingdom. Where we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office or transfers to countries with adequate data protection laws.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or through the Service. The "last updated" date at the top of this page indicates when the policy was last revised.

14. Contact

For any questions or concerns about this Privacy Policy or our data practices, please contact:

EVT Data Ltd (trading as EVTenders)

Company number 17255478 · Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

Email: privacy@evtenders.com