Privacy policy

DRAFT TEMPLATE, not yet reviewed. This is a plain-English starting point for an automated B2B subscription service. It is not legal advice. Fill in the placeholders (business name, address, contact, ICO number) at setup, and get it checked if in doubt.

Last updated: [DATE AT GO-LIVE]

Who is responsible

Contracts Due, 80A Ruskin Ave, Welling, London DA16 3QQ, is the controller of the personal data described here. ICO registration: Exempt from the ICO data protection fee (self-assessment, 7 Oct 2026). Contact: support@contractsdue.co.uk.

What we collect about customers

Your e-mail address, plan, saved searches, and the dates digests were sent: to run your account and send the alerts you asked for (contract).
Billing status from Stripe (customer and subscription IDs, payment dates). Card details are handled by Stripe and never reach us (contract; legal obligation for financial records).
Support e-mails you send us: to answer them (legitimate interests).
Basic server logs (IP address, pages requested), kept for 30 days for security (legitimate interests).

Cookies

We use one essential cookie to keep you signed in. We don't use analytics or advertising cookies, so there is no cookie banner.

Public-sector data on the site

The site republishes organisation-level data from official procurement notices. We deliberately don't republish buyer contact names, e-mail addresses or phone numbers, and we don't name suppliers who appear to be individuals or sole traders. If you think a page shows your personal data, e-mail us and we'll remove it.

Who we share data with

Stripe (payments), Resend (sending e-mail), DigitalOcean (hosting, London region) and Cloudflare (DNS/CDN and e-mail routing). Each acts as our processor or provides infrastructure under its own terms.
We don't sell data or use it for advertising.

How long we keep it

Account data is kept while your account is open. It is deleted when you delete your account, or after 24 months of inactivity on a free account. Stripe keeps payment records as the law requires. Backups are overwritten within 30 days.

Your rights

You can download your data (Account, then Export my data) and delete your account yourself at any time. You can also ask us to access, correct, restrict or object to processing by e-mailing support@contractsdue.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk).

E-mail

We only e-mail people who signed up. Every digest has a one-click unsubscribe link.