Last updated: 29 September 2026
BidsWorks Ltd ("BidsWorks", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, create an account, use the BidsWorks platform, upload documents, purchase our services or otherwise interact with us.
BidsWorks is an AI-powered procurement platform designed primarily for businesses and SMEs. Our platform helps businesses identify public-sector procurement opportunities that may be relevant to their capabilities and where they may have a realistic opportunity to compete.
This Privacy Policy applies to the BidsWorks website, platform and related services (collectively, the "Services").
The company responsible for the processing of your personal data is:
BidsWorks Ltd
United Kingdom
For privacy and data protection enquiries, please contact:
BidsWorks does not currently have a designated Data Protection Officer (DPO). Privacy and data protection matters are handled through the contact address above.
Depending on where you are located and how you use our Services, we may be subject to and will comply with applicable data protection and privacy laws, including:
PECR operates alongside data protection law and contains specific rules concerning electronic marketing and cookies and similar technologies.
Where applicable law provides you with greater or additional rights than those described in this Privacy Policy, we will respect those rights.
We collect information that you provide to us, information generated through your use of the Services, and certain information obtained from other sources where permitted by law.
3.1 Information you provide directly
Depending on how you use BidsWorks, we may collect:
3.2 Free scorecard requests
When you request a free scorecard on our website, we collect the company name, company website, business sector and description of services you enter, and your email address.
We use this information to:
Some scorecards are checked by a member of our team before they are sent, for example when the match is uncertain. The scorecard is an assessment of public tender opportunities for a business. It is not a decision about you that has legal or similarly significant effects.
To stop automated abuse of the form, Cloudflare Turnstile checks that the request comes from a person. This involves your IP address and information about your browser being processed by Cloudflare. A copy of your request is also kept by Netlify, our website host, as a backup. Your browser keeps a copy of what you typed in its local storage; this stays on your device and is not sent to us.
We keep a record of each request (in our database, hosted by Supabase in London) so that we can send the scorecard, limit the free scorecard to one per company and per email address, and keep track of who we have been in contact with. We keep it for 24 months after our last contact with you, unless you become a client or ask us to delete it sooner.
Our lawful basis is our legitimate interests in responding to your request and in following up with businesses that have asked for a scorecard. Where you ask us to, we process it to take steps before entering into a contract with you. We will not add you to a marketing mailing list unless you agree to it.
Because BidsWorks is a business-to-business procurement platform, information provided by users may include information about their organisation, such as:
Some business information may not constitute personal data.
Where information identifies or relates to an identifiable individual, however, we will treat it as personal data where required by applicable law.
BidsWorks allows users to upload documents and files to their customer profile.
These files may include:
Uploaded files are stored within the customer's BidsWorks profile and are processed as necessary to provide the Services.
We may use uploaded files to:
You are responsible for ensuring that you have the necessary rights and permissions to upload the information.
When you access or use BidsWorks, we may automatically collect certain technical and usage information.
This may include:
We use this information to operate, secure, maintain and improve BidsWorks.
We may use personal data for the following purposes.
Providing the BidsWorks Services
We may use information to:
Operating and improving BidsWorks
We may use information to:
Communications
We may use your information to:
Artificial intelligence is an important part of the BidsWorks platform.
BidsWorks uses AI technology, including technology provided by Anthropic, to power certain procurement-related functionality.
Depending on the feature being used, AI may process information such as:
AI may be used to:
Information may be transmitted to Anthropic or another applicable AI technology provider where necessary to provide an AI-powered feature.
We take reasonable steps to ensure that third-party providers processing information on our behalf are subject to appropriate contractual, security and data protection requirements.
AI-generated information
AI-generated information may contain errors, omissions or inaccuracies.
BidsWorks does not guarantee that AI-generated information is:
You should independently verify important information before relying on it or submitting it to a contracting authority.
BidsWorks uses Anthropic technology for certain AI-powered functionality.
The information sent to Anthropic will depend on the functionality being used and may include relevant text, document content and other information necessary to process the request.
Where Anthropic processes information on behalf of BidsWorks, we will use the applicable commercial/API arrangements and appropriate contractual safeguards.
We will not make representations about Anthropic's retention or model-training practices beyond the specific Anthropic service and contractual arrangement actually used by BidsWorks.
We may update the AI providers used by BidsWorks from time to time where necessary to operate or improve the Services.
Where UK GDPR or EU GDPR applies, we will rely on one or more lawful bases for processing personal data.
These may include:
Contract
We may process personal data where necessary to provide the Services or perform our agreement with you.
Legitimate interests
We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.
These interests may include:
Consent
We may rely on consent where required by law, including for certain marketing activities and non-essential cookies or similar technologies.
You may withdraw consent at any time.
Legal obligation
We may process personal data where necessary to comply with a legal or regulatory obligation.
We may send marketing communications about BidsWorks, including information about:
Where required by applicable law, we will obtain appropriate consent before sending electronic marketing communications.
You can unsubscribe from marketing communications at any time.
You may continue to receive essential service communications after opting out of marketing.
BidsWorks may offer paid subscriptions or other paid services.
We expect to use a third-party payment provider to process payments. The specific provider may change or may be introduced after this Privacy Policy is first published.
Payment information may include:
Where a specialist payment provider processes payment card information, that provider may process your payment details under its own privacy policy and terms.
We do not intend to unnecessarily store full payment card details ourselves.
This Privacy Policy will be updated if necessary once our payment provider and payment-processing arrangements are finalised.
We may use third-party service providers to operate BidsWorks.
These may include providers for:
Our anticipated or current third-party services include Anthropic, Google Analytics, GitHub, Netlify (website hosting and forms), Supabase (database, hosted in London), Resend (sending emails, including free scorecards) and Cloudflare Turnstile (a check that website forms are filled in by a person, not an automated script).
We may add, remove or replace service providers as BidsWorks develops.
Where a third party processes personal data on our behalf, we will take reasonable steps to ensure appropriate contractual and data protection safeguards are in place.
BidsWorks may use Google Analytics to understand how users interact with our website and to improve the Services.
Analytics technologies may collect information about:
Where applicable law requires consent for analytics cookies or similar technologies, we will seek that consent before using them.
BidsWorks may use cookies and similar technologies.
These may include technologies used for:
Strictly necessary technologies may be used where required to provide a service requested by you or where another applicable exception applies.
For non-essential cookies and similar technologies, we will obtain consent where required by applicable law.
We will provide clear information about the technologies we use and their purposes.
Our cookie practices may change as the BidsWorks website develops.
The ICO's current guidance requires organisations to explain their use of cookies/storage technologies and generally obtain appropriate consent for non-essential technologies.
We may share personal data with:
We do not sell personal data.
We will only share personal data where we have an appropriate legal basis and where the disclosure is necessary for the relevant purpose.
BidsWorks may process information obtained from public procurement sources (such as Find a Tender, Contracts Finder and Public Contracts Scotland), from Companies House and from other publicly available sources.
Some information relating to public procurement may already be publicly available and may not constitute personal data.
Where publicly available information contains personal data, we will process it in accordance with applicable data protection law.
BidsWorks is currently based in the United Kingdom but may operate internationally in the future.
Some service providers may process information outside the United Kingdom or European Economic Area.
Where personal data is transferred internationally, we will use an appropriate lawful transfer mechanism where required.
This may include:
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
This includes retaining information as necessary to:
Uploaded documents may remain in your customer profile while they are needed to provide the BidsWorks Services.
If you delete your account or request deletion, we will take appropriate steps to delete or anonymise information that we no longer need, subject to legal, security, contractual or other legitimate retention requirements.
We use reasonable technical and organisational measures designed to protect personal data against:
However, no internet-based service can be guaranteed to be completely secure.
You are responsible for keeping your login credentials secure.
Uploaded files may contain personal data relating to:
You are responsible for ensuring that you have an appropriate legal basis and any necessary permissions to provide that information to BidsWorks.
Where possible, you should avoid uploading unnecessary personal information.
Depending on the applicable law and circumstances, you may have rights including:
These rights are subject to applicable legal conditions and exemptions.
To exercise your privacy rights or ask a question about your personal data, contact:
We may need to verify your identity before processing certain requests.
We will respond within the period required by applicable law.
If you have concerns about how BidsWorks processes your personal data, please contact us first:
If you are located in the UK, you may also complain to the Information Commissioner's Office (ICO).
You may also have the right to complain to the relevant data protection authority in another jurisdiction where applicable.
BidsWorks is intended for businesses and professional users.
It is not directed at children, and we do not knowingly collect personal data from children.
If you believe that a child has provided personal data to us, please contact:
BidsWorks may contain links to third-party websites, including procurement portals.
We are not responsible for the privacy practices, security or content of third-party websites.
You should review the privacy policy of any third-party service you access.
We may update this Privacy Policy from time to time.
Changes may be necessary because of:
The latest version will be published on the BidsWorks website.
The date at the top of this Privacy Policy indicates when it was last updated.
For privacy and data protection enquiries:
BidsWorks Ltd
United Kingdom
Email: enquiries@bidsworks.com
BidsWorks collects and processes information to provide an AI-powered procurement service that helps businesses discover, match and work on public-sector tender opportunities.
We may process business information, account information, tender information, uploaded documents and usage information.
Uploaded documents are stored within your BidsWorks customer profile and may be processed to provide tender-finding, tender-matching and tender-completion functionality.
BidsWorks uses Anthropic technology for certain AI functionality.
We may use Google Analytics and other third-party technology providers as our Services develop.
We do not sell personal data.
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy and applicable legal requirements.
For questions about your personal data, contact enquiries@bidsworks.com.