Your privacy is important to Tenderlake Ltd. ("Tenderlake", "we", "us" or "our"). Tenderlake Ltd. is registered in England and Wales under company number 10295265, with its registered office at 34 Packington Street, London N1 8QB, United Kingdom, and is the data controller for the personal information described in this policy. This privacy policy provides details about how your personal information and other data is collected and used by us. Personal information is any information that identifies you or would enable someone to contact you, such as your name, email address, phone number and other non-public information associated with your individual identity. This privacy policy explains our commitment to protecting the privacy of personal information about users of Tenderlake websites, software, products, APIs and services (collectively, the "Site"). We reserve the right to change this Policy from time to time and will notify you of any changes via email or on our web site.
We may collect personal information when you register to use the Site. Personal information may include your name, username, your password (we only store an encrypted version of this; not the actual password), one or more email addresses and other contact information. For paying customers we may ask for additional information such as credit card number, billing address and related information. We do not store credit card numbers or any other numbers from your credit cards, and they are never transmitted to our servers. We transact payments via Stripe.com.
Like most web-based services, we may automatically collect information that your browser sends whenever you visit a website. This information includes Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information, which does not identify individual users, to analyze trends, to administer the site, to track users' movements around the site and to gather demographic information about our user base as a whole. We do not link this automatically-collected data to personal information or the Tenderlake user ID.
Like many websites, we use "cookies". A cookie is a small data file that your browser stores on your device. When you sign in we set a sign-in cookie so that you stay signed in as you move between tenderlake.com pages and the Tenderlake app; it holds an encrypted ticket that identifies your signed-in session and never contains your password. If you tick "Remember me" when signing in, that cookie is kept for a period (currently 14 days) after you close your browser; otherwise it ends with your browser session. We also use session cookies to enable certain features of the Site, and the analytics and advertising services listed below set their own cookies to help us understand how the Site is used and to measure our advertising. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all portions of the Site or all functionality of our services.
We use the information collected to enable your access to and use of the Site, to personalize the Site for you, or to supply your services that you have asked for. If you are a paying customer, we will also use this information to charge your credit card or collect payments from you. We may also occasionally contact you via email to tell you about web maintenance, upgrades and new features regarding our promotions or those on behalf of third parties but will provide you with a vehicle for opting out of these emails.
Our website may include advertising. We use the information you have directly and indirectly provided to us to improve the relevance of these ads.
We do not sell, rent or share customer personal information with third parties. We do not sell customer lists to marketers.
To provide a good service, we may share some information about your website visit with third party services that we use. On our website and in the Tenderlake app we specifically share information with Google (website traffic analysis and online advertising), Microsoft Clarity (session analytics), Crisp.chat (on-site chat and support), Facebook and LinkedIn (online advertising and its measurement), and Stripe (payment processing).
We may contact you by email regarding your orders and our services. You may elect not to receive commercial marketing messages from us about the services.
We may assign you a user ID and password to use the Site. We assume no responsibility for preventing third parties (other than our own employees) from using your login credentials, whether with or without your permission.
Tenderlake offers a REST API so that your own software can retrieve the notices and searches in your Tenderlake account. API access uses keys that your workgroup administrator creates in Tenderlake; we store only a hashed form of each key, so a key cannot be read back from our systems. We log every API request – which endpoint was called and with what parameters, which key and workgroup made the call, when, and the outcome – and use these logs for security, auditing, troubleshooting, fair-use limits and, where usage is metered, billing. Request logs are retained while your account is active and as needed for billing, security and legal obligations. Data that the API returns is delivered to the systems you connect, and what happens to it there is governed by your own arrangements with those systems.
Tenderlake can be connected to AI assistants such as Claude and ChatGPT through the Tenderlake AI connector. What the connector collects, what it never receives (your conversations with the assistant), where the data goes, how long it is kept and how to revoke the connection are set out in the Tenderlake AI Connector Privacy Policy. That policy supplements this one, which continues to apply to your Tenderlake account as a whole.
Our customer and user list is an asset and trade secret of Tenderlake Ltd. and may be transferred with the company's assets in connection with any merger, acquisition or change of control of the business of the company. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
Except as stated in this privacy policy, we will not disclose your personal information to third parties except when we must comply with laws that require such disclosure to law enforcement authorities or other government third party officials such as subpoenas.
If we are required by law, regulation or legal process (e.g. subpoena) to disclose information about you, we will notify you to the extent permitted by law, but we reserve the right to disclose such information as legally required in our judgment. We also may disclose information about your use of the Site if we have reason to believe you have used the Site for purposes prohibited in our Terms of Service or that it is necessary to avoid injury, damage to property or violation of someone's rights.
We process personal information under the UK General Data Protection Regulation and the Data Protection Act 2018. Our legal bases are: performance of our contract with you (providing the Site and the services you have asked for, and taking payment); our legitimate interests (keeping the Site secure, understanding how it is used, improving our services, and telling business contacts about our services); your consent, where we ask for it (for example for marketing emails), which you can withdraw at any time; and compliance with our legal obligations.
You have the right to ask for access to the personal information we hold about you, to have it corrected or deleted, to restrict or object to our processing of it, and to receive a copy of it in a portable form. You can correct or update much of it yourself through the Site, or email our Customer Support team at privacy@tenderlake.com to exercise any of these rights. If you are unhappy with how we handle your personal information you also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority.
We retain your information for as long as your account is active or as needed to provide you services, and thereafter as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
Some of the service providers listed in this policy, and the AI assistant providers you may connect to Tenderlake, process data outside the United Kingdom, including in the United States. Where that is the case the transfer is covered by appropriate safeguards, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.
The security of your personal information is important to us. Information you enter is encrypted in transit using Transport Layer Security (TLS, i.e. HTTPS) between your browser and our servers.
Our computers and their storage are located in United Kingdom.
We follow generally accepted industry standards to protect personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you have any questions about security on our site, you can email us at privacy@tenderlake.com.
The Site may contain links to other websites or services maintained by our customers or third parties. We make no representation or warranties and are not responsible for the privacy policies or practices of any third party.
The Site is intended for business use. Under UK data protection law a child can consent to online services from the age of 13, and the Site is not designed for anyone younger.
Tenderlake does not knowingly collect or maintain personal information from anyone under the age of 13. Any person who provides personal information through the Site represents to us that they are 13 years of age or older. If we learn that personal information has been collected from someone under 13, we will delete it.
This policy was last updated on the 22nd of August, 2026 (previous revision: 16th of March, 2019)