Privacy

Bidwire is run by one person in the United Kingdom. It is not a registered company, so there is no company number or registered office to give you. For anything on this page, including a request about your data, email [email protected]. That address reaches a person, and it is the same address the digest is sent from.

Under UK data protection law Bidwire is the controller of the data described below.

If you sign up for the digest. Your email address, the categories of work you picked, the area you picked, and whether you asked to include contracts that state no region. Also the dates you signed up and confirmed, and two random tokens: one for the confirmation link, one for the unsubscribe link in every email. This is what the weekly email is built from, and it is held on the basis of your consent, given by clicking the confirmation link.

If you use an account. Signing in creates a single-use link, which expires after 30 minutes. If you save a notice, star a contract or add a supplier to your competitor watch, that choice is stored against your subscriber id so the account pages and your digest can show it.

Whether or not you sign up. When the signup or sign-in form is submitted, your IP address is stored against a counter, so that neither form can be used to send a stream of email to other people's inboxes. It is kept for the length of that limit and pruned afterwards, and it is used for nothing else. The basis is legitimate interests: the alternative is a form that can be used to send mail in Bidwire's name.

What the email provider reports back. If a digest hard bounces, or someone marks it as spam, that address is recorded so nothing is sent to it again. A bounce is never cleared; a spam complaint is cleared only if the same address signs up again and confirms.

There is no analytics on this site: no Google Analytics, no tag manager, no pixels, no advertising, no third-party scripts of any kind. Nothing tracks you between visits or between sites, nothing profiles your business, and your data is never sold, rented or shared for anyone else's marketing.

The digest does not report whether you opened it or which links you clicked. The only delivery data kept is the bounce and complaint record above, which exists so you are not mailed when you should not be.

Three cookies, all of them necessary for the site to work. Under the Privacy and Electronic Communications Regulations, strictly necessary cookies do not need consent, which is why this site has no cookie popup. If you block them, browsing still works and signing in does not.

One more, CF_Authorization, is set only on the administration page, which is behind a login that only the site's operator can pass.

Cloudflare host the site and the database, and provide the protection that keeps it up. Resend send the email: the confirmation, the sign-in links and the weekly digest. Both are United States companies, so data reaches servers outside the UK, under the safeguards their terms provide. Neither uses your address for anything of their own.

Nothing on a page is loaded from anywhere else: the typefaces, the stylesheet and the two small scripts all come from this domain, so reading a page here does not tell a third party that you did.

Nobody else receives your data. It is not passed to buyers, to suppliers, or to anyone whose contracts appear on the site.

• Your subscription, for as long as you want the digest. Unsubscribing stops the email immediately.
• An unsubscribed or bounced address is kept on the list of addresses not to mail. Deleting it would mean the next import could start mailing you again, which is the thing you asked to stop.
• Sign-in links expire after 30 minutes and are single use.
• The IP rows behind the rate limits last only as long as their window and are pruned periodically.

Ask for deletion and the subscription and everything attached to it goes, apart from the do-not-mail record described above.

You can ask for a copy of what is held about you, ask for it to be corrected or deleted, object to it being used, or ask for it in a portable form. Two of those you can do yourself at any time: the unsubscribe link at the foot of every digest ends the emails, and your digest settings change the categories and area once you are signed in.

For anything else, email [email protected]. There is no charge and the law allows a month to reply, though in practice it will be sooner. Because there is no password, a request about an account is answered to the address that account uses.

If you think your data has been handled badly you can complain to the Information Commissioner's Office at ico.org.uk, and you are welcome to raise it here first.

If what the site does with data changes, this page changes with it and the date at the top moves. A change that needs your consent will be asked for rather than announced here. The terms of use cover the rest of how the site may be used.