Privacy policy
Last updated 24 October 2026
Who we are
Toolbox Tenders is run by Hüseyin Enes Yılmaz, trading as Toolbox Tenders, based in Türkiye. We are the controller of the personal data described here. Contact us at support@toolboxtenders.com about anything in this policy.
Customers: what we collect and why
| Data | Why | Legal basis (UK GDPR) |
|---|---|---|
| Your email address and your alert settings (trades, regions, contract value, preferences) | To send you the daily email you signed up for | Contract |
| Which tenders we emailed you and when, and whether each email was delivered | So we never send you the same tender twice, and to fix delivery problems | Contract; legitimate interests |
| Sign-in records: when you ask for a sign-in link, we keep your email, IP address and the time for a day; if you use Sign in with Google, we receive your email address and your Google account ID (nothing else) | To sign you in securely and to stop the sign-in form being abused | Contract; legitimate interests |
| The IP address (network) you started your free trial from, kept for 60 days | To stop the free trial being restarted again and again with new email addresses | Legitimate interests |
| Subscription status from our payment provider (trial, active, cancelled). We never see your card details. | To know whether your subscription is active | Contract |
| Technical data such as IP address and browser type in our hosting provider's logs | To keep the service secure and working | Legitimate interests |
| Invoices and payment records | Tax and accounting | Legal obligation |
Companies that win public contracts
From the government's published contract award notices, we keep a list of organisations that have won building and maintenance contracts: the organisation's name, company number, website, region, size (SME or large) and the contracts it won. Most are limited companies. Where a winner is a sole trader or partnership, its trading name can be personal data. We do not store the contact names or email addresses that appear in notices.
We use this list to understand the market and to tell limited companies about Toolbox Tenders by email (we do not send marketing emails to sole traders or partnerships without consent). Our legal basis is legitimate interests. You can object at any time by emailing us, and every marketing email includes an easy way to opt out.
Tender notices
The tenders we send come from public notices on Find a Tender and Contracts Finder, published under the Open Government Licence. To write summaries, we send the text of public notices to an AI provider. We do not send your personal data to it.
Who we share data with
We use these providers to run the service. They process data on our behalf and under contract:
- Cloudflare: hosting, database and security. Our database is stored in Western Europe.
- Resend: sending our emails
- Anthropic: writing tender summaries from public notice text only
- Google: only if you choose Sign in with Google, to confirm your email address
- Paddle: our online reseller and Merchant of Record. Paddle processes payments and is responsible for your payment data under its own privacy policy.
We do not sell personal data and we do not use advertising or tracking cookies.
International transfers
We are based in Türkiye, and some of our providers process data in other countries, including the United States. Where data leaves the UK, we rely on the safeguards our providers offer, such as the UK International Data Transfer Addendum to standard contractual clauses.
How long we keep data
- Your account and settings: while you are a customer, and up to 12 months after you leave
- Records of emails sent: up to 24 months
- The network you started a free trial from: 60 days
- Invoices and payment records: as long as tax law requires
- Hosting logs: a few weeks at most
Cookies
Our public pages set no cookies. When you sign in, we use one strictly necessary cookie to keep you signed in (for up to 30 days, or until you sign out), and Sign in with Google uses one more for up to 10 minutes while you sign in. We don't use analytics, advertising or tracking cookies.
Your rights
You can change your settings, pause emails or delete your account yourself on your account page. You can also ask for a copy of your data, or ask us to correct it, delete it, restrict how we use it, or move it to another service. You can also object to our use of it, including for marketing. Email support@toolboxtenders.com and we'll reply within one month. You can unsubscribe from our emails using the link at the bottom of every email.
If you're unhappy with how we use your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Changes
If we change this policy, we'll update the date at the top and tell customers about important changes by email.