This notice explains how personal data is handled when you visit tenderintelpro.agency, make an enquiry or arrange services. It is written for the website and workflow described below, without assuming that a separate company exists.
1. Who is responsible
Pavel Basavets, an independent individual based in Poland, is the controller of the personal data described in this policy. TenderIntel is a service brand, not a separate company or legal person.
Email: pavelbasavets@tenderintelpro.agency
Postal / service address: ul. Cyprysowa 3/2, 64-030 Śmigiel, Poland
This policy covers this website, service enquiries and the administration of client engagements. If a project requires processing personal data on a client’s behalf, the parties will agree any required data-processing terms separately.
The provider operates from Poland. Data-protection duties are not excluded merely because a business customer or its representative is located in the United States. This notice also covers named contacts and sole traders acting in a professional capacity.
2. What data is processed
- Website visits: Netlify processes technical request data such as IP address, browser information, page requested and time of access to deliver and secure the website.
- General enquiries: your name, business email, company name, message and business/privacy acknowledgements. No enquiry is automatically forwarded to a referral partner.
- VIP requests: your name, business email, company name, SAM.gov status, a public solicitation link or number, deadline and time zone, and any optional message.
- Service intakes: your business contact details, payment email or receipt reference, selected service and the business information you enter. Depending on the service, this can include registration status, a public website or UEI/CAGE identifier, service capabilities, coverage areas, or the selected state and portal.
- Payments: Stripe collects payment and billing information on its hosted checkout. Payment status, customer contact information and relevant transaction records are available to the provider through Stripe. Card details are not collected by these website forms.
- Correspondence and project work: messages and the information necessary for the agreed scope. Additional document collection and any processing on a client’s behalf are arranged separately.
- Other sources: where necessary to review your request or perform agreed work, public procurement notices, public business websites and records, or information from your authorized colleagues. The relevant source can be explained on request.
The website forms are not a secure document vault. Do not submit EIN/TIN or Social Security numbers, bank details, passwords, MFA codes, identity documents, classified, CUI or export-controlled material. Provide only non-sensitive business information.
Pre-checkout confirmation: your service selection and business/Terms confirmations are used within the page to open the appropriate Stripe link. They are not sent to a website form database or saved by this page. Stripe collects its own checkout details separately. These confirmations are not a substitute for any acceptance record required at checkout.
3. Purposes and legal bases
- Responding to a requested quote or providing a service: steps before a contract or performance of a contract under Article 6(1)(b) GDPR, where you are the contracting individual.
- Communicating with company representatives, managing business relationships and keeping proportionate project records: legitimate interests under Article 6(1)(f) GDPR. The interests are responding to relevant business enquiries, administering client work, and establishing or defending legal claims.
- Website delivery, security and abuse prevention: legitimate interests under Article 6(1)(f) GDPR in operating a secure, functioning website.
- Tax, accounting and other applicable legal duties: Article 6(1)(c) GDPR.
- Optional activities requiring consent: Article 6(1)(a) GDPR, where consent is requested. It can be withdrawn at any time without affecting earlier lawful processing.
Contact information is needed to answer an enquiry. Information necessary for the agreed service or legal obligations must be provided to proceed with that service. Other information is optional. No decisions with legal or similarly significant effects are made solely by automated processing.
4. Recipients and service providers
Information is disclosed only as needed for the stated purposes to:
- Netlify: hosting, website security and form processing. Submissions are stored in the Netlify account and may be included in email notifications to the business mailbox.
- Zoho Mail: hosting, delivery and storage of business correspondence and form-notification emails sent to pavelbasavets@tenderintelpro.agency. The business mailbox uses Zoho’s EU service region. Zoho’s handling of service and account data is described in its Privacy Policy.
- Stripe: payment processing and associated billing, fraud-prevention and transaction administration. Stripe also processes some data under its own legal obligations and privacy policy.
- LinkedIn: if you choose to contact Pavel there. Its own platform terms and privacy notice apply. This website does not embed a LinkedIn tracking script.
- Government agencies and procurement portals: only information required for the agreed registration or bid, within your lawful instructions and the relevant requirements.
- Agreed document-service providers, professional advisers and authorities: only when necessary for the service, legal obligations or establishing, exercising or defending legal claims. Additional document-sharing providers are identified before use.
There is no sale of personal data or sharing for cross-context behavioral advertising. Client documents and identifying business or personal data are not submitted to public AI chat tools. De-identified examples may be used to assist preparation; replacing names alone is not treated as sufficient anonymization. Any use of identifiable client data with an external AI provider requires prior agreement and appropriate data-protection arrangements.
5. International transfers
The business mailbox uses Zoho’s EU service region, but this is not a promise that every related processing operation is confined to the EU. Zoho’s published terms describe processing by its group companies and engaged providers in other countries, including for service operations and support. Any applicable international transfer must be covered by the relevant contractual and legal safeguards; the EU service region does not replace those arrangements.
Email, hosting and other providers may process information outside the European Economic Area, including in the United States. A transfer requiring GDPR safeguards must use a valid mechanism, such as an applicable adequacy decision (including the EU–U.S. Data Privacy Framework only for a participating recipient and covered transfer) or European Commission Standard Contractual Clauses with any required supplementary measures.
You can contact Pavel for information about the relevant recipients, transfer basis and a copy or description of applicable safeguards. Government submissions are shared only through the agreed process. Appropriate arrangements must be confirmed before transferring client documents to a new provider.
6. How long data is kept
- Enquiries that do not become client work: up to 12 months after the last substantive contact, unless a shorter period is appropriate or a specific dispute requires longer retention.
- Netlify form submissions and notification emails: enquiry copies follow the 12-month enquiry period; intake working copies ordinarily follow the 90-day period after completion or termination. Records needed for billing, an agreed service or a specific legal claim may be retained under the core-record criteria below. Deletion is managed across the form account and mailbox.
- Working copies of client documents: ordinarily deleted within 90 days after completion or termination, unless continued retention is agreed or needed for a legal duty or a specific claim.
- Agreements, invoices and core service records: retained for the periods required by applicable tax and accounting law, and where necessary for the relevant legal limitation period. Access is restricted and unnecessary supporting documents are removed.
- Technical logs: kept under the hosting provider’s applicable logging and security retention settings. They are not used here for advertising profiles.
- Objection / do-not-contact records: minimal details may be kept for as long as needed to respect an objection.
Specific legal-retention periods depend on the record and the applicable obligation. You may ask for the criterion or period relevant to your data. Copies in routine backups are removed through the relevant provider’s deletion cycle.
8. Your rights
Where the GDPR applies, you may request access, correction, erasure, restriction or portability of your personal data, subject to the conditions and exceptions in the law. You may object to processing based on legitimate interests and may object to direct marketing at any time. Where processing relies on consent, you may withdraw it.
To make a request, email pavelbasavets@tenderintelpro.agency. Necessary and proportionate identity verification may be requested. A response will be provided without undue delay and normally within one month. If the GDPR permits an extension, you will be told within that first month and given the reason.
You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or another competent supervisory authority, including in the EU country where you live or work. Nothing in this policy limits rights available under other applicable privacy laws.
9. Security, audience and changes
Reasonable technical and organizational safeguards are used, including limited access and data minimization. No system or method of communication is completely secure. Account access and any required secure document transfer are arranged separately.
The website is intended for adult business users, not children. Do not provide children’s personal data.
This policy may be updated to reflect actual practices and legal requirements. The updated date will change. Material changes will be communicated where required. Privacy questions: pavelbasavets@tenderintelpro.agency.