Privacy notice

This notice is not legal advice. UK GDPR and the Data Protection Act 2018 apply. An ICO data-protection fee is payable if we store prospect emails as a controller.

1. Controller

Ellis Greensitt, sole trader trading as BidFit, is the data controller. Email: hello@bidfit.co.uk. No telephone. Geographical address: 2 Chestnut Terrace, Riccall, North Yorkshire, YO19 6QT.

2. This website

The public pages are static HTML. The order form POSTs to BidFit so we can raise a Stripe invoice. The site sets no cookies, runs no analytics pixel, and has no login. We do not use Google Analytics or a third-party stats script.

The web server keeps ordinary access logs (date and time, path, HTTP status, referring URL, browser type, and IP address) on the London host so we can count which pages are used and keep the server secure. Those logs rotate daily and are kept for about 14 days. They are not published. Your browser will also talk to Google Fonts if it loads the typefaces; you can block third-party fonts and the layout still works in Georgia and system sans-serif.

Funnel events: The server may record coarse product funnel events (page path, event name, and timestamp) in ordinary access logs for internal product analytics. No marketing pixels or third-party trackers. The IP address is logged by the web server as usual (see above). No cookies are set for funnel tracking.

3. If you email us or buy a memo

We process:

• your name, work email, company name and any phone number you choose to send (we do not ask for a phone number);
• the notice URL, the four profile facts, and any ITT pack you forward;
• payment metadata when you pay a Stripe invoice (processed by Stripe; we do not store full card numbers);
• the memo we send you, and a copy for our records.

Lawful bases: contract (to deliver the memo you ordered) and legitimate interests (keeping records of what we sold, defending a complaint, and — only for UK limited-company work addresses — occasional email about the product, with an opt-out on every mail). We do not cold-email sole traders or consumers.

4. What we do not do

• No sale of your data.
• No open-tracking pixels on our emails.
• No bought lists.
• Personal names and personal contact details printed on public notices are redacted in memos we publish or send.

5. Processors and sources

Email hosting / routing (for example Cloudflare Email Routing or a similar mailbox). A payment provider when checkout is live. Public sources we consult for a memo include Contracts Finder, Companies House, NHS.uk and buyer websites, under the Open Government Licence where it applies. Those sources have their own notices.

If a processor is outside the UK, we will use a UK-approved transfer tool (adequacy or IDTA/SCCs) or not use that processor.

6. How long

Order emails, packs and memos: kept for up to six years after the contract (limitation for simple contract claims in England and Wales). Outreach suppression / opt-out lists: kept until you ask us to delete the suppression, so we do not email you again. Unpublished drafts: deleted when no longer needed.

7. Your rights

You may ask for access, correction, deletion, restriction, objection, or portability, and you may complain to the Information Commissioner’s Office. Email hello@bidfit.co.uk. We will not usually charge.

8. Children

The product is for UK businesses. We do not knowingly take orders from children.