Last updated 1 October 2026. On that date we removed the cookie bar. We now count visits to this website without asking first, and you can opt out at any time. We also switched off session recording. This notice is complete, and there is no second document.
Bidfeed is a UK email service. We read public procurement notices. Each day we send small businesses a short digest. We are the data controller for the personal data described below.
Gudgie Digital Ltd, company number SC880840, registered office: 18 Young St, Edinburgh. Contact us about anything on this page at hello@bidfeed.co.uk. We answer privacy requests ourselves. There is no ticket system.
| Your email address | We send the digest to this address. If you are a subscriber, we also send your receipts and your account emails to it. |
|---|---|
| Your description of your business | You write these sentences yourself. They say what your business does. We use them to choose which notices you see. |
| Your settings | Your sectors, the parts of the UK you work in, and the largest contract value you want to see. |
| A record of what we sent you | We record which notices went into which email, and when. This record stops us sending you the same notice twice. |
| Payment status | A Stripe customer reference, a Stripe subscription reference, and whether the subscription is active. We never see or store your card number. |
| Email delivery results | Our email provider tells us whether an email arrived. It tells us if an email bounced, which means it did not arrive. It also tells us if an email was marked as spam. |
| If we contacted you first | Your business email address and your company name. We also keep a link to the public source we found them in. That source is a published contract award notice, your own website, or Companies House. We record the source for every contact, so that we can show you where your details came from. |
That is the complete list. We do not collect your name, unless you put it in an email to us. We do not ask for a phone number. We do not buy contact lists from anyone.
We count visits to this website. We want to see which pages people use and where they stop reading. We use the counts only to improve the website. We do not use them for advertising. We do not share them for targeting.
UK law lets us do this without a cookie bar, because it is for statistics only. In return, we tell you what we count, and you can opt out at any time. Opting out is free and takes one click.
| Who | PostHog, an analytics provider. We use its European servers, in Frankfurt, Germany. PostHog Inc. is an American company. Your data goes to Frankfurt, not to the United States. |
|---|---|
| What is counted | Which pages you opened, and in what order. The time. The rough
size of your screen. The kind of device and browser you use. The
website that sent you here, if one did. Clicks on buttons and
links, counted as plain usage.
PostHog uses your IP address, which is the number your internet connection uses, to work out a rough location. That location is about as exact as a city. Your IP address is not stored beside the events. |
| What is never recorded | We do not record sessions. There is no replay of your visit and
no recording of your mouse. We never send your name, your email
address or your company. We never send anything that ties a
visit to a person. We remove the part of a web address that comes
after the “?”, before anything is sent. A sign-in
link carries its code in that part.
On your account pages we count one page view and nothing else. If we emailed you first, we do not know that it was you who visited. We cannot find out. |
| What is stored on your device | PostHog stores a small identifier on your device. It lets PostHog tell one visit from another. It holds no name and no email address. It is not used to follow you to other websites. If you opt out, your browser also keeps a small note of that, so that we do not count you again. |
| How long we keep it | We keep visit counts while we need them to improve the website. We review them once a year. |
| How to opt out | Analytics opt-out.
That click stops the counting at once. It deletes the PostHog
identifier. It works on every page of this website, in this
browser.
We also treat a Global Privacy Control signal from your browser as an opt-out. You do not need to click anything. You can also clear cookies and site data for this website in your browser. That has the same effect. |
| To turn it back on | Turn analytics on. |
Our lawful basis for this is our legitimate interests (UK GDPR Article 6(1)(f)). The interest is improving this website. You can object at any time, using the link above. PostHog is our processor, on the same terms as the four processors below.
There is no tracking pixel in the digest emails. A tracking pixel is a hidden image that reports when an email is opened. There is no analytics of any kind inside an email we send you.
We know that an email arrived because our email provider tells us. We do not watch you open it. We do not know which of the people we have emailed have visited this website. We built it that way on purpose, so that we cannot find out.
We only email business addresses at incorporated companies. We say who we are. Every email has a one-click opt-out. We honour it immediately.
| Cloudflare | Cloudflare hosts this website. It runs the service. It stores the database. Our database is in Western Europe. |
|---|---|
| Stripe | Stripe takes the payment. Your card details go to Stripe. They never come to us. |
| Resend | Resend sends the emails. |
| Anthropic | Anthropic reads the notices. It writes the summaries. Each morning we send your business description and the text of the public notices to Anthropic’s Claude models. The models write your digest from them. We send nothing else about you. It is not used to train anyone’s model. |
| PostHog | PostHog counts visits to this website. It does this unless
you have opted out. We send PostHog no name, no email
address and no company. The data is stored on PostHog’s
European servers, in Germany.
See “Counting visits” above for what is counted and what is not. |
These five companies are our processors. They act on our instructions. They cannot use your data for their own purposes.
Stripe, Resend and Anthropic process data in the United States. They do this under the UK Addendum to the European Commission’s standard contractual clauses. PostHog stores the website data in Germany. PostHog Inc. is an American company. Its staff can reach that data to support the service, under the same clauses.
We do not sell, rent or share your data with anyone else. No advertising network is involved at any point.
Under UK GDPR you can ask us for a copy of your data. You can ask us to correct it, to delete it, or to restrict what we do with it. You can ask us to hand it over in a portable format. You can object to us processing it under legitimate interests. If you object to marketing contact, we must stop, and we will not argue.
To delete everything: email hello@bidfeed.co.uk with the word “delete”. We do it within 30 days, and usually the same day. We tell you when it is done. You do not have to give a reason, and it costs you nothing.
The unsubscribe link at the bottom of every digest also works on its own. It works instantly.
The service scores each notice for how relevant it is to you. It writes a one-line verdict for each notice. That decides what appears in your email. It decides nothing else. It has no legal effect on you. It is not profiling in the sense that the law is concerned with.
You can change what the service sees at any time. To do that, edit your description and your settings.
Tell us first, and we will try to fix it. If you are not satisfied, you can complain to the Information Commissioner’s Office. This is the UK’s data protection regulator. Complain at ico.org.uk/make-a-complaint, or on 0303 123 1113.
You do not need our permission to complain. It does not cost anything.
If we change this notice, we will change the date at the top. If the change is a significant one, we will tell subscribers by email before it takes effect.