Privacy Policy
1. Who we are
123 Tenders Ltd ("123 Tenders", "we", "us") is a company registered in England and Wales, company number 17407172, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the data controller for the personal data described in this notice. 123 Tenders Ltd is registered with the Information Commissioner's Office as a data controller, registration reference ZC233798. You can verify this on the ICO's public register. Contact us at hello@123tenders.co.uk for anything data-protection related.
2. What we collect and why
Account details (email, name, business name, plan) to run your account; business profile details you enter (industry, experience, accreditations, etc.) to personalise drafts and calculators; the business description and contract notice text you submit for a Bid Pack draft, and the generated draft itself; email and calculator choice for free-tool leads; order intent (email, company, plan, payment route) while card payments are being connected; usage/activity data to enforce plan limits and secure your account; referral codes; and anything you send via feedback or email. We do not collect special category data (health, ethnicity, religion, etc.) and do not store card or bank details ourselves.
3. If you give us information about someone else
Some fields (for example case studies, references and previous contracts) may include a third party's details you're citing as evidence. You're responsible for having a proper basis to share it. We only use it to help produce your draft; we don't contact third parties named in your content.
4. Public contract data is different
Contract notices shown on the site come from Find a Tender and Contracts Finder, published under the Open Government Licence v3.0. That's public sector information, not personal data you've given us, and may be incomplete or out of date.
5. How your business information is used to generate a draft
When you request a Bid Pack draft: the business name/description you provide, together with the relevant contract notice text, are sent to an AI drafting service. That service is provided through Lovable's AI gateway, which uses Google's Gemini 2.5 Pro model to generate the draft text. The generated draft is stored against your account and shown to you to review and finalise; it is never submitted anywhere on your behalf. We do not use your content to train any AI model and don't share it with any AI provider beyond generating your requested draft.
6. Who we share data with
We use a small number of processors: Lovable (hosts the app; via its AI gateway, generates bid drafts using Google's Gemini model); Supabase (hosts our database); Resend (sends account and product emails on our behalf); and Stripe (processes card payments). We never see or store your full card number. We do not sell your data or share it with data brokers or advertisers.
7. International transfers
Some processors may process data outside the UK, including the US, most relevantly the AI drafting service in section 5. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism as required by UK GDPR.
8. Payments
Card payments are processed by Stripe, our payment provider. When you pay by card you are taken to Stripe Checkout, where your card details are entered directly into Stripe's own secure systems. 123 Tenders never sees, handles or stores your card number, CVC or expiry date. We receive only the outcome of the payment plus limited details such as your email, billing name/country, the plan purchased and the last four digits of the card, which we use for account access, receipts and accounting records. Stripe's own privacy notice applies to the payment step. Invoice and bank transfer remain available as alternatives; if you use those, we handle only the billing details you send us.
9. Marketing and product emails
Account/service emails (e.g. confirming your draft is ready) are not marketing and can't be opted out of while your account is active. We also send a small number of product/upgrade emails if you haven't used the service in a few days; every one of these includes a one-click unsubscribe link. If you opted in via a free calculator, we'll only email you about 123 Tenders and similar tools, and you can unsubscribe at any time.
10. How long we keep your data
We keep your account and business data for as long as your account is active, plus a limited period after deletion to handle final queries; financial records are kept six years as UK law requires; we delete or anonymise data we no longer need.
11. Your rights
Under UK GDPR you can: access your data; have inaccurate data corrected; ask us to delete it; restrict or object to processing including direct marketing; receive your data in a portable format; withdraw consent where we rely on it. Email hello@123tenders.co.uk and we respond within one month. You can also complain to the ICO (ico.org.uk).
12. Security
See our Security page for how we protect your data: encryption in transit and at rest, account-level isolation, no card/bank details stored on our systems. We're early-stage and don't yet hold formal certifications like ISO 27001 or Cyber Essentials; we'll say so if that changes.
13. Changes to this notice
We'll update this page if how we handle data changes, and post the date of the latest version. Last updated: 18 August 2026.
See our Security page for how we store and protect your data.
123 Tenders provides automated tools, drafts and reminders, not professional, legal, tax or bid-writing advice. You are responsible for verifying all information and for your final submissions.