Privacy Policy

Aspire to Grow Ltd trading as Tendle

Last updated: October 2026

1. Who We Are

Tendle is a trading name of Aspire to Grow Ltd, a company registered in England and Wales.

Aspire to Grow Ltd is the data controller for personal information it collects and uses in connection with Tendle’s business operations, website, client relationships and administration.

Where Tendle handles personal information supplied by clients solely on their instructions as part of delivering contracted services, Aspire to Grow Ltd may act as a data processor. The applicable responsibilities will depend on the nature of the engagement.

Contact: hello@tendle.co.uk

2. Information We Collect

Depending on your relationship with Tendle, we may collect and process:

names, job titles, business email addresses, telephone numbers and professional contact details
business information, including company details, operational arrangements, qualifications, accreditations and compliance documentation
information supplied through enquiries, consultations, client onboarding forms and correspondence
tender and procurement information, including submissions, supporting evidence, Bid Libraries, historical policies, governance documents and associated records
information about individuals included within tender evidence, such as professional qualifications, training records, relevant experience and project responsibilities
contractual and transaction information, including Statements of Work, invoices, payment status and subscription records
website usage and technical information, where collected through applicable cookies, analytics or website systems

We ask clients to provide only the personal information reasonably necessary for the services being delivered.

3. How We Use Personal Information

We use personal information to:

respond to enquiries and provide quotations or proposals
deliver tender identification, bid writing, procurement readiness reviews and associated consultancy services
create, review, maintain and share client Bid Libraries
deliver Tender Watch subscriptions and relevant procurement opportunity information
communicate with clients, suppliers and other business contacts
administer contracts, subscriptions, payments and business records
maintain appropriate records of work undertaken, recommendations made and tender evidence submitted
manage business security, resolve disputes and comply with legal obligations
improve our services and business processes
send marketing communications where permitted by applicable law

We do not sell personal information to third parties.

4. Our Lawful Bases

We process personal information under one or more of the following UK GDPR lawful bases:

Contract: Where processing is necessary to enter into or perform a contract with an individual.

Legitimate interests: Where necessary for reasonable business purposes, including delivering services to corporate clients, maintaining client relationships, keeping appropriate business records, managing security and developing our services, provided those interests are not overridden by individuals’ rights.

Legal obligation: Where processing is necessary to meet applicable legal, regulatory, tax or accounting requirements.

Consent: Where consent is required, including certain marketing or non-essential cookie activities. Consent may be withdrawn at any time.

Where we process information on behalf of a client acting as data controller, we do so in accordance with the applicable contractual arrangements and lawful instructions.

5. How We Store and Share Information

We primarily use Microsoft 365 business services, including OneDrive, SharePoint, Outlook, Forms and Excel, to manage client documents, communications and operational records.

Working documents may be synchronised to authorised business devices.

Client Bid Libraries may be made accessible to nominated client representatives through email-specific sharing permissions. Access may be view-only or include editing rights, depending on the agreed arrangements.

Reports, audits, Statements of Work and other deliverables may also be provided by email.

Where necessary to deliver services, relevant information may be submitted to procurement portals or shared with contracting authorities, tendering organisations, authorised contractors and other parties involved in the procurement process.

We may also use service providers, including Microsoft and Stripe, to support document management, communications, payments and business administration.

Where third parties process personal information on our behalf, we seek to ensure appropriate contractual and data protection arrangements are in place.

6. Payments and Subscriptions

Where payments or subscriptions are processed through Stripe, Stripe provides payment processing and associated billing services.

Tendle does not ordinarily receive or store complete payment card details within its own document management systems.

We may retain relevant payment confirmations, invoices, subscription details and accounting records where necessary for administration, contractual purposes and legal compliance.

Stripe’s handling of personal information is also governed by its applicable privacy and data protection documentation.

7. Data Retention and Archiving

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, business administration, legal compliance, contractual obligations and the establishment, exercise or defence of legal claims.

Our retention approach takes account of the type of information and the reasons for retaining it.

contractual and financial records are generally retained in accordance with applicable accounting, tax and legal requirements
completed client projects may be transferred to archived storage, with access permissions reviewed as appropriate
tender submissions, Bid Libraries, historical governance documents and supporting evidence may be retained where necessary to demonstrate previous compliance, support future procurement activity, meet contractual requirements or respond to disputes
superseded documents may be retained as historical evidence rather than automatically deleted
enquiries and other records are periodically reviewed to determine whether continued retention is justified

Archiving does not mean information will be retained indefinitely. We periodically review archived personal information and securely delete or anonymise it when there is no longer a valid reason to retain it.

8. Data Security

We use technical and organisational measures appropriate to the nature of the information we handle.

These include access controls within our business systems, restricted document-sharing permissions, Microsoft 365 security features and procedures for managing client information.

We seek to restrict access to individuals who require it for legitimate business purposes.

No electronic storage or transmission method is completely secure. We review our arrangements and take reasonable steps to reduce the risk of unauthorised access, loss or misuse.

9. International Data Transfers

Our Microsoft 365 tenant identifies the United Kingdom as the data-at-rest location for key services including Exchange Online, OneDrive and SharePoint.

However, some service providers or procurement platforms may process or access personal information outside the United Kingdom.

Where international transfers are subject to UK GDPR transfer requirements, we use or rely upon applicable safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or other lawful mechanisms, as appropriate.

10. Cookies and Website Information

Our website may use essential cookies necessary for its operation and additional cookies or analytics technologies where implemented.

Where required by law, non-essential cookies will be used only with the appropriate consent.

Further details of the cookies in use, their purposes and available choices should be provided through our website’s cookie information or consent controls.

11. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, individuals may have the right to:

request access to their personal information
request correction of inaccurate information
request erasure of personal information
request restriction of processing
object to processing in certain circumstances
request data portability where applicable
withdraw consent where consent is the lawful basis

To exercise these rights, contact hello@tendle.co.uk.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, at www.ico.org.uk.

We encourage you to contact us first so that we have an opportunity to address your concerns.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, information handling practices or legal requirements.

The latest version will be published with its updated revision date.

13. Contact