Privacy notice

What I do with your details.

Short version: I use what you send me to reply to you and to do the work. I do not sell it, share it for marketing, or send you anything you did not ask for.

Who is responsible

Alexander Staniforth, trading as Staniforth Bid Writing, of Lincoln, Lincolnshire. I am the data controller for the information described here.

Email hello@staniforthbidwriting.co.uk or phone 07442 748234.

What I collect

When you use the enquiry form: Your name and email address, and — if you choose to fill them in — your organisation, what kind of help you need, your deadline, and whatever you write in the message box.
When you sign up for the tender alerts: Your email address, which area and audience you asked for, the date you confirmed, and a one-way hash of the IP address the signup came from. The hash cannot be turned back into an address; it exists only to stop the form being used to sign other people up in bulk.
When you email or ring me: Whatever you send or tell me, including anything in attachments.
When you work with me: The material needed to write the bid: your organisation's information, monitoring data, financial figures, and any documents you send. Occasionally this includes personal data about your staff or the people you support.
Automatically: My host records standard server logs, including IP addresses, for security and to keep the site running. I do not use these to identify individuals.

Why, and on what legal basis

To reply to your enquiry and quote for work — taking steps at your request before entering a contract, UK GDPR Article 6(1)(b). For general enquiries that never become work, my legitimate interest in responding to people who contact me, Article 6(1)(f).
To carry out the work — performance of our contract, Article 6(1)(b).
To send you the tender alerts — your consent, UK GDPR Article 6(1)(a). Nothing is sent until you click the link in the confirmation email, and every alert carries a one-click unsubscribe. You can withdraw at any time and it takes effect immediately; withdrawing does not affect anything sent before that.
To keep accounting records — legal obligation, Article 6(1)(c).

If a bid requires personal data about the people you support, you remain the controller for that data and I process it on your instructions.

Who else sees it

Web3Forms delivers enquiry-form submissions to my inbox.
My email provider stores our correspondence.
Resend delivers the tender alert emails, and holds the addresses on the list for that purpose only.
Anthropic powers the question assistant on this site. If you type a question into it, that message is sent to Anthropic to produce the answer, and it is not used to train their models. The assistant is deliberately built not to accept bid or tender content — see below.
Cloudflare hosts this website, stores the alert list, and handles the server logs described above.
HMRC and my accountant, where invoicing records require it.

That is the full list. I do not sell your data, and I do not pass it to anyone for marketing. I will not name you as a client, or quote anything you have sent me, without asking you first.

The question assistant

The "Ask a question" box on this site is an AI assistant, not me. It answers general questions about how I work — what I do, lead times, copyright, how to get in touch. It is not a person and it does not speak for me on anything specific to your bid.

It will not take your bid or tender content, and you should not paste any in. That is deliberate. My commitment that client material never goes into AI tools is one I intend to keep, so the assistant is built to refuse that work and send you to me instead. Anything to do with an actual bid goes by email or phone, and I work on it myself.

Messages you type into it are sent to Anthropic to generate the reply and are not used to train their models. I keep a count of how many replies have been given, alongside a one-way scrambled form of your IP address, purely to stop the assistant being abused — that record contains no message content and cannot be turned back into your address.

Your material is not put into AI tools. I use them for drafting, on business terms where what I put in is not retained or used for training, but the documents, figures and personal data you send me stay out of them.

Cookies

This site sets no cookies of its own, and there is no advertising or cross-site tracking on it. Cloudflare may set a cookie strictly necessary for security. If I add visitor statistics they will be a cookieless kind that does not track individuals between sites.

How long I keep it

Enquiries that do not turn into work: up to twelve months, then deleted.
Tender alert signups: for as long as you stay subscribed. If you never confirm, the request is deleted within thirty days. If you unsubscribe, I keep the address on a do-not-send list so that nothing reaches you by accident later — tell me if you would rather it were erased outright.
Client files and correspondence: six years after the last piece of work, which is the period I need for tax and for any question about work I have done.
Anything you ask me to delete: as soon as I am able, subject to the accounting records I am legally required to keep.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict what I do with it, or object to my using it. Email me and I will respond within one month.

If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you told me first so I can put it right.

Changes

If this notice changes, the new version goes up here with a new date below.

Last updated 5 August 2026