DRAFT — NOT YET OPERATIVE

Collect only what the service needs.

Draft for launch: the public service address must be confirmed before we open orders.

The capability-profile page compiles entries in your browser. It does not send or save them to our server. You choose whether to email the downloaded profile to us.

Controller

Ryan Dunleavy trading as BidBriefly, Liverpool, UK; public service address [AWAITING OWNER CONFIRMATION]; privacy contact bidbriefly@gmail.com, is the controller for customer, lead and service-contact personal data.

Data collected

Business contact details, company information, capability-profile answers, service correspondence, subscription and invoice references, delivery preferences, usage and support records. Payment-card data will be handled by the payment processor and not stored by BidBriefly.

Purposes and lawful bases

Take steps to provide and perform the requested service.
Administer billing and legal records.
Protect service security and prevent abuse under legitimate interests.
Send relevant B2B service communications where permitted, with a clear opt-out.
Use consent where the law requires it.

Processors and transfers

The current service uses Stripe for checkout and billing, Google Gmail for correspondence, and OpenAI ChatGPT Work, Library and Sites for research, records, assisted analysis and website hosting. These providers may process information outside the UK under their applicable terms and transfer arrangements. Stripe may also act as an independent controller for payment and fraud-prevention purposes. We do not submit card details to AI tools. Ask us for current provider and transfer information before supplying confidential material. A standalone form-hosting service and payment webhook are not currently deployed.

Retention and rights

Our retention policy is to review unconverted prospect records after 90 days, delete unnecessary profile material within 12 months of service ending, and retain invoices and accounting records for the legally required period. We retain the minimum suppression record needed to honour an objection. Data may be retained longer for a specific dispute or legal obligation. Individuals may have rights of access, correction, erasure, restriction, objection and data portability, and may complain to the Information Commissioner’s Office. Email us to exercise a right or object to marketing. We do not make solely automated decisions with legal or similarly significant effects about people.

Direct marketing

No purchased bulk lists, deceptive messages or automated spam. Corporate prospecting must identify the sender, be relevant and include a working opt-out. Sole traders and some partnerships require stricter handling under PECR. A suppression list must be maintained.

Contact

bidbriefly@gmail.com. Last draft update: 8 September 2026.