Privacy policy

TenderStandard UK, UK FM Tender Toolkit. Last updated 6 May 2026.

1. Who we are

TenderStandard UK operates tenderstandard.co.uk and sells the UK FM Tender Toolkit. Contact: hello@tenderstandard.co.uk.

2. What data we collect

When you use the website or buy the toolkit, we may process:

Name, email address, order details and refund status.
Billing details needed by Whop or Stripe for payment, tax and fraud checks.
Support emails you send to us.
First-party website analytics: page viewed, referring site, campaign tags, device category, approximate country, scroll depth, time on page and clicks on key links such as guide links and checkout buttons.
First-party website optimization data: which page variant was shown and whether that session reached pricing or checkout.

We do not store raw IP addresses in the analytics database. Visitor identifiers are hashed server-side and used only for aggregate reporting. Order webhooks from Whop are stored with hashed customer identifiers rather than raw email addresses in the analytics database.

3. Why we process data

To deliver purchases and support customers: performance of a contract.
To keep tax and accounting records: legal obligation.
To respond to support, prevent abuse and improve the website: legitimate interests.
To understand whether visitors can find the right information before checkout: legitimate interests.

4. Who we share data with

Payments and product delivery are handled by Whop and Stripe. Support email is handled through our email provider. We may share records with accountants, HMRC or regulators where required by law. We do not sell personal data or use third-party advertising trackers.

5. Website analytics

The analytics system is first-party and runs on Cloudflare infrastructure for TenderStandard UK. It is designed to show aggregate website behaviour, including popular pages, visitor flow, checkout clicks and likely points of friction.

The analytics system does not record keystrokes, form-field contents, payment details, full card numbers, private tender data or raw IP addresses.

We may run controlled page variants and aggregate optimization analysis to improve the website. Variants are used to compare outcomes such as pricing views, checkout clicks and completed orders; they do not make legal, credit, employment or similarly significant decisions about visitors.

6. How long we keep data

Order, refund and tax records: normally six years.
Support email: normally 24 months from the last reply.
Website analytics: normally up to 14 months.

7. Your rights

Under UK GDPR you may ask to access, correct, delete, restrict or object to processing of your personal data, subject to legal record-keeping duties. You may also complain to the Information Commissioner's Office.

To exercise your rights, email hello@tenderstandard.co.uk.

8. Security

We use HTTPS, Cloudflare security controls, access-protected analytics, and payment processors that handle card data directly. No system is perfectly secure, but we keep access limited and avoid collecting unnecessary data.

9. Changes

We will update this page if our privacy practices change materially.