Privacy

Last updated 9 October 2026.

Who is responsible

The controller is Chris Elder (sole trader, UK), who runs Roofing Tender Brief. Contact: the contact form.

What we store when you join the waitlist

• Your email address (required), and — only if you fill them in — your company/trade and region.
• The date and time you joined, which page you joined from, and the exact consent wording you ticked.
• Nothing else: no name unless you type it, no IP address, no cookies, no device fingerprint.

To stop spam, the site keeps a short-lived counter keyed by a one-way hash of your IP address for up to one hour; the address itself is never stored and the counter deletes itself.

Why, and lawful basis

To send you one email when Roofing Tender Brief launches (with the founding offer), and to know which regions to prioritise. Lawful basis: your consent (UK GDPR Art. 6(1)(a)); the email is sent under PECR only because you asked for it. We don't send waitlist members anything else, and we never sell or share the list.

Where it is stored

In Cloudflare Workers KV, a database run by Cloudflare, Inc. (our web host, acting as our processor; data may be processed outside the UK under Cloudflare's standard data-protection terms). Only Chris Elder can read it. When we launch, we'll move the list to an email-sending service and update this page first.

How long

Until you ask us to remove you, or 12 months after you joined — whichever is sooner. Records delete themselves automatically after 12 months. After launch, people who don't sign up to the launched service are deleted from the waitlist.

Deleting your data and your rights

Use Remove me (deletes your entry immediately), or ask via the contact form. You can also ask for a copy or correction, object, or complain to the ICO.

Business outreach emails

Not started yet: no outreach emails are being sent for this service. This section describes how they will work, so it is published before the first one.

Chris Elder plans to send a small number of one-off introductory emails (at most 20 a day) about Roofing Tender Brief to UK limited companies and LLPs in roofing. We do not email sole traders or partnerships this way.

• Where the details come from: the company's name and number from the Companies House public register (checked as active); public contract award notices on Contracts Finder and Find a Tender (Open Government Licence); and a generic business address (such as info@ or office@) that the company publishes on its own website. We record the page where we found it. We never guess addresses, buy lists, or collect named personal addresses.
• What we keep: company name and number, website, that generic address and its source page, the date we emailed, and any reply or opt-out.
• Lawful basis: legitimate interests (UK GDPR Art. 6(1)(f)) — telling relevant businesses about a service that lists public tenders in their trade. Under PECR, emails to companies and LLPs do not need prior consent, but every email says who we are and how to opt out. We have written a legitimate interests assessment (purpose, necessity and balancing test); ask via the contact form for a copy. In short: the emails are rare, relevant to the company's own trade, sent to addresses the company publishes for enquiries, and stop immediately on request.
• Opting out: use the link in the email, reply "STOP", or use this form. We stop at once and keep the address (or a one-way hash of it) on a do-not-contact list so it is never emailed again.
• How long: prospect records that don't reply are deleted 12 months after the email; do-not-contact entries are kept indefinitely (that is what makes the opt-out stick).
• Who processes it: Resend (email delivery, our processor) and Cloudflare (website and opt-out records). We never sell or share the data.
• You can ask for a copy, correction or deletion, or object at any time via the contact form; you can also complain to the ICO.

Contact form messages

We store your message and the reply address you give, to answer you; deleted automatically after 12 months.

This website

No cookies, no analytics, no tracking pixels, no third-party scripts. Cloudflare processes standard request logs to serve and protect the site.

Tender data

Tender and award information is public sector information published under the Open Government Licence. Where an award names a supplier who appears to be a private individual, we don't repeat the name.