What we hold, and how to have it removed.

Where our data comes from

Everything about contracts and who won them comes from Find a Tender, the UK government's public procurement service, published under the Open Government Licence v3.0. We do not scrape websites, buy lists, or obtain data from third-party brokers.

Contract award notices name the winning supplier and usually include a contact email address that the supplier itself provided for bidding. Where that address belongs to a named individual rather than a generic company mailbox, it is personal data, and this notice explains how we treat it.

What we do with it

Build a profile of what a firm has delivered

Contract titles, buyers, values and categories from that firm's published awards. This is what lets us judge which open contracts suit it.

Contact firms about the service

We use published bidding contact addresses to tell firms that a shortlist exists for them. We contact incorporated companies only — those with a Companies House number. We do not send unsolicited email to sole traders or unincorporated partnerships, who under PECR are treated as individual subscribers.

Nothing else

We do not sell, rent or share personal data with anyone. We run no advertising, no tracking pixels, and no third-party analytics.

Why we are allowed to

Our lawful basis is legitimate interests under Article 6(1)(f) UK GDPR: telling a business that a service exists which is directly relevant to work it already does. We consider this proportionate because the data was published by government for transparency, the address was provided by the firm for exactly this kind of business contact, and the message concerns the recipient's own trade.

For marketing email we also rely on the corporate-subscriber position under PECR regulation 22, which is why we restrict outreach to incorporated companies.

If you think that balance is wrong in your case, say so and we will stop. You do not need to give a reason, and we will not ask for one.

Cookies and tracking

None. This site sets no cookies, uses no analytics, and loads no trackers. That is why you were not asked to accept anything. Fonts are served from Google Fonts, which means Google receives your IP address when the page loads; if you would rather it did not, a content blocker will prevent it and the site will still work.

How long we keep things

Published procurement data is kept while it remains useful for ranking, since a firm's older work is part of its record. Contact addresses are deleted on request, and are deleted anyway once a firm tells us it does not want to hear from us — we keep only the minimum needed to honour that, which is the address itself on a suppression list, so we do not contact you again by accident.

Your rights

You can ask us to:

• tell you what we hold about you;
• correct anything that is wrong;
• delete your contact details, or all data relating to your firm;
• stop processing your data, or object to it;
• send you a copy of your data in a portable format.

We will respond within one month, and there is no charge. If you are unhappy with how we handle it you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you gave us the chance to put it right first.

Accuracy, and what this is not

Rankings are estimates from published data. They are not advice on whether to bid, a prediction that you will win, or a substitute for reading the notice — which is why every result links to the original. We measure our accuracy openly, including the misses: roughly one real win in four does not reach our top ten.

Contact

Email privacy@winrate.co.uk for anything in this notice, including removal requests. A removal request needs nothing more than the firm name and the word "remove".

Last updated 28 September 2026. winrate is a sole trader business operating in the United Kingdom and is the data controller for the purposes described above. We are not affiliated with Find a Tender, the Cabinet Office, or any contracting authority.