Privacy policy

Effective date: 7 October 2026

Who we are

BidCrest Digital Ltd ("we", "us") is the data controller for personal data collected through this website. We are registered in England and Wales, at 128 City Road, London, EC1V 2NX. Contact us at hello@bidcrestdigital.co.uk.

What we collect

From the enquiry form: name, organisation, email address, telephone number, service interest, deadline and message. From direct email or WhatsApp: that correspondence.

In delivering bid writing services we process documents you send us that may contain personal data, including staff records, policies, quality reports and previous submissions. We act as a processor for that material, under your instructions.

Our hosting provider processes technical information such as IP address and browser type to deliver the site securely. See our cookie policy.

Why we use it, and our lawful basis

• To reply to your enquiry: legitimate interests, and steps taken at your request before entering a contract.
• To deliver services you engage us for: performance of a contract.
• To send guides you subscribed to: consent, withdrawable at any time.
• To meet accounting and legal obligations: legal obligation.

We do not add enquirers to a marketing list. The Insights list is separate, opt-in, and unsubscribable in one click.

Who we share it with

We use third-party providers who process data on our behalf under contract, covering enquiry form delivery, business email, call booking (our booking calendar is provided by Google Workspace), mailing list delivery, and website hosting and security. We do not sell personal data. If you accept advertising cookies on this site, information about your visit is shared with Meta Platforms Ireland Ltd through the Meta pixel to measure our ads; see our cookie policy. If you choose “Essential only”, nothing is shared with Meta.

Where a provider processes data outside the UK, appropriate safeguards such as the International Data Transfer Agreement or UK Addendum are in place. We will name our current processors on request.

Client confidentiality

We do not publish the names of organisations we have written bids for without their written permission. Where we display award documentation, client names, addresses, officer contact details and tender references are permanently removed before publication. Contract award information published by contracting authorities is public record and may be referenced.

How long we keep it

• Enquiries that do not lead to work: twelve months from last contact.
• Client records and correspondence: for the engagement and six years afterwards, for contractual and tax purposes.
• Mailing list: until you unsubscribe.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, have inaccuracies corrected, request erasure, restrict or object to processing, and to data portability. Email us and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. You may complain to the ICO without contacting us first, though we would rather have the chance to put it right.

Security

The site is served over HTTPS. Access to enquiry and client data is limited to those who need it. No transmission over the internet is completely secure and we cannot guarantee absolute security.

Changes

We may update this policy. The effective date at the top shows when the current version took effect.