Winnable

Privacy notice

Last updated 2 November 2026

Who we are

Winnable is run by Alfie Dodridge, The Bridges, Upper Slaughter, Cheltenham GL54 2JA, who is the data controller for the personal data described here. Contact: hello@getwinnable.co.uk. ICO registration number ZC257540.

What we collect and why

Subscribers. Your name, work email, company name, and the profile you give us (what your firm does, where you work, the contract sizes you want), and any "Good fit" or "Not for me" feedback you send us about tenders. We use these to send your digest and to improve which tenders we pick for you. The lawful basis is performing our contract with you. Payment is handled by Stripe; we never see your card number.

Emails you send us. We keep them so we can reply and keep a record of changes you ask for (contract, or our legitimate interest in running the service).

Business contacts from public notices. Contract award notices published by the government can include a supplier's business email address. We may send a small number of relevant emails to organisations that have recently won public contracts, telling them about similar tenders. We do this under legitimate interests, only to limited companies and other corporate bodies, and every email says who we are and how to opt out. To opt out, reply "no thanks" to any of our emails or write to hello@getwinnable.co.uk; we record that and never email you again.

This website. The site sets no cookies and runs no advertising trackers. We count visits with Cloudflare Web Analytics, which also uses no cookies and doesn't identify or follow individual visitors: it records which pages are viewed, the site you came from, and your browser, device type and country, so we can see what's useful. Our host (GitLab) keeps standard server logs, including IP addresses, for security.

Who we share it with

We use these processors, each under a contract that protects your data:

  • Stripe: subscriptions and payments.
  • Resend: sending digest emails.
  • Google Workspace: our email and file storage. Messages you send us, our replies, and the business emails we send are held in our Google Workspace mailbox, and a backup of our outreach records is kept in its Drive.
  • Cloudflare: anonymous website visit statistics (Cloudflare Web Analytics).
  • Anthropic: AI that reads notices and compares them with your profile. Your profile text is sent to it when we score tenders for you. Anthropic does not use API data to train its models.
  • GitLab: hosting this website and running the daily job.

Some of these companies are in the United States. Transfers rely on the UK–US data bridge or the UK's international data transfer agreement. We never sell your data.

How long we keep it

While you subscribe, plus 12 months after you cancel so we can deal with any questions, then we delete it. Billing records are kept for 6 years because HMRC requires it. Business contacts we've emailed from public notices: a record of what we sent and any reply, kept for 2 years after our last email so we never email a firm twice by mistake, then deleted. Opt-outs are kept permanently, as a one-way scrambled (hashed) copy of the address, so we can honour them.

Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, restrict it, or move it. You can object to any use based on legitimate interests; for marketing we always stop. Email hello@getwinnable.co.uk. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Public procurement data

Tender and award information on this site is republished from Find a Tender, Contracts Finder, Public Contracts Scotland and Sell2Wales under the Open Government Licence v3.0. If a page shows your personal details and you would like them removed from our site, email us and we'll do it.