Cookies on Find a Tender

We use some essential cookies to make this service work.

We’d also like to use analytics cookies so we can understand how you use the service and make improvements.

View cookies
Skip to main content

Beta Contact the Find a Tender team (opens in new tab) if you have feedback, questions or suggestions.

Privacy notice

This notice sets out how the Find a Tender service (FTS) will use your personal data and your rights in relation to that data. It is made under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).

Your data

Purpose

Find a Tender service (FTS) is a digital service run by the Cabinet Office.

The purpose of FTS is to publish procurement notices and related information as required by the Procurement Act 2023 and Procurement Regulations 2024 and other relevant procurement regimes for example, Public Contracts Regulations 2015.

It is also to facilitate participation in public procurement under the Procurement Act 2023 where contracting authorities require suppliers to register with the service provided by the Cabinet Office and complete their 'supplier information'. This supplier information can then be shared from the Cabinet Office FTS by the supplier to the relevant contracting authority to process and review at the time of bidding.

We collect and use personal data to facilitate:

  • the registration process onto the digital system, including matching GOV.UK One Login users to existing accounts and transferring existing account information
  • compliance with the Procurement Regulations 2024 and other relevant procurement regimes by a contracting authority in whose procurement a supplier wishes to participate

Types of personal data that may be collected

Personal data of all users

We will collect personal data on all users to facilitate the necessary registration process onto the digital system. The personal data we will collect is:

  • name
  • email address

The additional personal data we collect from suppliers and those 'connected people' who the supplier is obliged to provide information on may include:

  • address
  • date of birth
  • nationality
  • country of residence
  • associations with legal entities

We will collect your email address to facilitate the following activities on the Find a Tender service:

  • tell you about changes to notices you are following
  • alert you about new notices that match your saved search criteria
  • alert you about deadlines for notices you are following
  • keep you updated with changes to the service
  • invite you to participate in user research if you have given us consent to contact you
  • reduce the number of times this information is required to be inputted manually within the service

Types of sensitive data that may be collected

We will collect criminal convictions data of suppliers and their 'connected people', who the supplier is obliged to provide information on within supplier information to comply with Procurement Act 2023 and Procurement Regulations 2024.

Lawful basis for the processing

The legal basis for processing this personal data is UK GDPR Article 6(1)(c), namely that processing is necessary to comply with a legal obligation placed on us as the data controller. In this case that is the obligation of a Minister of the Crown (the Cabinet Office) to provide an online platform (Find a Tender service) for the publication of information required by the Procurement Act 2023 and for the collection and facilitation of sharing supplier information as required by the Procurement Regulations 2024.

Criminal convictions personal data

We may process personal data relating to criminal convictions and offences, or suspicion of the commission of an offence, of the supplier and those 'connected people' who the supplier is obliged to provide information on, to facilitate compliance with the Procurement Act 2023 as required by the contracting authority. This information may then be used to determine whether any exclusion grounds for the purposes of public procurement apply.

The criminal convictions data we may collect on individuals connected to the supplier organisation relate to the grounds set out in Schedules 6 and 7 of the Procurement Act 2023. These are:

  • an offence under section 1 of the Corporate Manslaughter and Corporate Homicide Act 2007 (corporate manslaughter or corporate homicide)
  • an offence listed in section 41 or 42 of the Counter-Terrorism Act 2008 (terrorism offences, and offences having a terrorist connection, in respect of which the notification requirements under Part 4 of that Act apply), other than an offence under section 54 of that act
  • an offence under any of the following sections of the Theft Act 1968
    • (a) sections 1 to 13 (theft, robbery, burglary)
    • (b) sections 17 to 21 (fraud and blackmail)
    • (c) sections 22 and 23 (offences relating to stolen goods)
    • (d) section 24A (dishonestly retaining a wrongful credit)
    • (e) section 25 (going equipped for stealing)
  • an offence under any of the following sections of the Theft Act (Northern Ireland) 1969 (c. 16 (N.I.))
    • (a) sections 1 to 13 (theft, robbery, burglary)
    • (b) sections 17 to 20 (fraud and blackmail)
    • (c) sections 21 and 22 (offences relating to stolen goods)
    • (d) section 23A (dishonestly retaining a wrongful credit)
    • (e) section 24 (going equipped for stealing )
  • an offence under section 3 of the Theft Act 1978 (making off without payment)
  • an offence under section 5 of the Theft Act (Northern Ireland) Order 1978 (S.I. 1978/1407 (N.I. 23)) (making off without payment)
  • an offence under Article 172 or 172A of the Road Traffic (Northern Ireland) Order 1981 (S.I. 1981/154 (N.I. 1)) (taking vehicle without authority)
  • an offence under section 58 of the Civic Government (Scotland) Act 1982 (convicted thief in possession)
  • an offence under section 113 of the Representation of the People Act 1983 (bribery of electors)
  • an offence under section 178 of the Road Traffic Act 1988 (taking motor vehicle without authority )
  • an offence under section 327, 328 or 329 of the Proceeds of Crime Act 2002 (money laundering offences)
  • an offence under section 2, 3, 4, 6 or 7 of the Fraud Act 2006 (fraud offences)
  • an offence under section 993 of the Companies Act 2006 (fraudulent trading)
  • an offence under section 1, 2 or 6 of the Bribery Act 2010 (bribery offences)
  • an offence under section 49 of the Criminal Justice and Licensing (Scotland) Act 2010 (asp 13) (offences relating to articles for use in fraud)
  • an offence under the Employment Agencies Act 1973 (offences relating to employment agencies) other than an offence under section 9(4)(b) of that act
  • an offence under the Employment (Miscellaneous Provisions) (Northern Ireland) Order 1981 (S.I. 1981/839) (N.I. 20)) (offences relating to employment agencies) other than an offence under Article 7B(11) of that order
  • an offence under section 31(1) of the National Minimum Wage Act 1998 (refusal or wilful neglect to pay the national minimum wage)
  • an offence under the Gangmasters (Licensing) Act 2004 (offences relating to gangmasters)
  • an offence under section 1, 2, 4 or 30 of the Modern Slavery Act 2015 (slavery and human trafficking offences)
  • an offence under section 1, 4 or 32 of the Human Trafficking and Exploitation (Scotland) Act 2015 (asp 12) (slavery and human trafficking offences)
  • an offence under section 1, 2 or 4 of the Human Trafficking and Exploitation (Criminal Justice and Support for Victims) Act (Northern Ireland) 2015 (c. 2) (N.I.)), or paragraph 16 of Schedule 3 to that act (slavery and human trafficking offences)
  • an offence under section 27 of the Immigration Act 2016 (failure to comply with labour market enforcement order)
  • an offence under section 28 of the Criminal Justice and Licensing (Scotland) Act 2010 (agreeing to become involved in serious organised crime)
  • an offence under section 45 of the Serious Crime Act 2015 (participating in activities of organised crime group)
  • an offence at common law of cheating the public revenue
  • an offence under the law of any part of the UK consisting of being knowingly concerned in, or in taking steps with a view to, the fraudulent evasion of a tax. 'Tax' means a tax imposed under the law of any part of the UK, including National Insurance contributions under
    • (a) Part 1 of the Social Security Contributions and Benefits Act 1992
    • (b) Part 1 of the Social Security Contributions and Benefits (Northern Ireland) Act 1992
  • an offence under section 45 or 46 of the Criminal Finances Act 2017 (failure to prevent facilitation of tax evasion)
  • an offence under section 188 of the Enterprise Act 2002 (cartel offence)
  • in relation to an offence otherwise referred to in Schedule 6 Part 1 of the Procurement Act 2023, any of the following offences
    • (a) aiding, abetting, counselling or procuring the commission of the offence
    • (b) in Scotland, being art and part in the commission of the offence
    • (c) an offence under Part 2 of the Serious Crime Act 2007 (encouraging or assisting crime) in relation to the offence
    • (d) inciting a person to commit the offence; (e) attempting or conspiring to commit the offence
  • an offence under the law of a country or territory outside the UK which would be an offence otherwise referred to in Schedule 6 Part 1 of the Procurement Act 2023 if the conduct constituting that offence was carried out in any part of the UK. For the purposes of this paragraph, an act punishable under the law of a country or territory outside the UK constitutes an offence under that law, however it is described in that law
  • an offence which caused, or could have caused, significant harm to the environment

We may collect the following data in relation to suspicion of, or allegations of, the commission of an offence, where there is or has been an investigation into conduct which would amount to an offence:

  • under section 1, 2, 4, or 30 of the Modern Slavery Act 2015
  • under section 1, 4 or 32 of the Human Trafficking and Exploitation (Scotland) Act 2015
  • under section 1, 2 or 4 of the Human Trafficking and Exploitation (Criminal Justice and Support for Victims) Act (Northern Ireland) 2015, or paragraph 16 of Schedule 3 to that act

This includes data about investigations into conduct outside the UK which, if it had occurred in the UK, would amount to any of the above offences.

We process criminal convictions data on the basis that processing is necessary for reasons of substantial public interest for the exercise of a function of the crown, a minister of the crown or a government department (para 6, schedule 1, Data Protection Act 2018).

Analytical data

We collect some analytical data on use of the digital service. We use Google Analytics to collect information about how you use FTS. Find more information on cookies

Google Analytics collects your IP Address and assigns to your device a cookie containing a randomly generated unique identifier called ‘Client ID’. This is your personal data. When using the same device to access FTS, we will use Google Analytics to track the pages visited and any links you select.

We will only track your activity in this way if you have given consent. You can control whether Google Analytics tracks you by adjusting your cookies.

Our lawful basis for processing your analytics data is consent (Article 6 (1)(a) UK GDPR).

Recipients of your data

For all users, the Cabinet Office has access to your data in line with this privacy notice.

In addition, if you are a supplier, any contracting authority to whom you have shared your data in order to participate in public procurement will have access to your data. This includes the data of any connected people you as the supplier have input into the service. This data may be shared with the contracting authority’s chosen e-sender.

We will also share your data when necessary with our suppliers. These comprise our cloud hosting provider, GOV.UK One Login (to verify your identity), GovNotify (for the sending of emails to you), our web analytics provider (if you have consented to cookies), our reporting dashboard supplier and our technical support teams.

Where personal data have not been obtained from you

Your personal data was obtained by us from suppliers who are obliged to provide information on 'connected people' to their organisation. The supplier is obliged to provide information to facilitate compliance with the Procurement Act 2023 as required by the contracting authority. This information may then be used to determine whether any exclusion grounds for the purposes of public procurement apply.

Links to other websites

This privacy notice applies to FTS but does not cover other government services or websites that we link to. These services, such as GOV.UK One Login, have their own terms and conditions and privacy notices.

If you go to another website from this one, you can read its privacy notice to find out what it does with your information.

If you come to this service from another website we may receive personal information about you. Read the privacy notice of the website you came from to find out more.

Data retention

We are required to retain data published on FTS in order to meet the obligations of the Procurement Act 2023, which require us to establish and maintain this platform. If a contract is awarded the data is required to be published on the platform for the duration of the procurement. Once the contract has ended we will retain the information for 7 years.

We will review your account if you have not used it for 5 years and will contact you to ask if you want us to delete your data or not.

Your rights

You have the right:

  • to request information about how your personal data are processed, and to request a copy of that personal data
  • to request that any inaccuracies in your personal data are rectified without delay
  • to request that any incomplete personal data are completed, including by means of a supplementary statement
  • to request that your personal data are erased if there is no longer a justification for them to be processed
  • in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted

International transfers

All personal and sensitive data collected by FTS is shared with Amazon Web Services (AWS) and is stored in the UK. Data collected by Google Analytics may be transferred outside the European Economic Area (EEA) for processing.

Where data processing happens in the US, suppliers need to meet the certification standards set out in the UK-US data bridge agreement. This facilitates flows of personal data to certified US companies that have opted into the EU-US Data Privacy Framework.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
icocasework@ico.org.uk
Telephone: 0303 123 1113

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact details

The data controller for your personal data is the Cabinet Office. The contact details for the data controller are:

Cabinet Office
70 Whitehall
London
SW1A 2AS
Telephone: 020 7276 1234

Where a supplier or connected persons of a supplier has shared information with a buyer for the purpose of bidding on a procurement, Cabinet Office and that buyer are joint data controllers.

The email address for the data controller’s Data Protection Officer is:

dpo@cabinetoffice.gov.uk

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.