Privacy policy
This policy explains what personal data the defencecontractors.com service processes, why, for how long and what rights you have. It covers people who hold an account with us and people whose business role appears in public procurement records.
Last updated 14 October 2026
Who is responsible
The controller of personal data is the administrator of the defencecontractors.com service. You can reach the administrator at support@defencecontractors.com for every question about this policy and every request listed below.
Account holders
When you create an account we process your email address, a hash of your password, your company name if you give it, your capability profiles, alert settings, saved items and a log of sign-ins and actions in the service. When you buy a plan the payment operator processes your card details; we receive only the payment status, the last four digits of the card, the billing country and invoices with the tax ID you enter.
We use this data to provide the service you ordered (legal basis: the contract), to bill you and keep accounting records (legal obligation), and to keep the service secure, prevent abuse and handle claims (legitimate interest). We send the daily alert only for profiles where you switched it on, and you can switch it off in one click.
Business contacts from public sources
The People section lists business roles, for example a contracting officer named in an official award notice or a head of business development named in a company press release. We take these details only from public sources such as official procurement notices, government announcements and company websites, and every entry shows its source and date.
- We store the name, job title, organisation, business contact details published by the source and the source link. We never store private addresses, private phone numbers or personal social media.
- The legal basis is our legitimate interest and that of our customers in identifying the right business counterpart in public procurement. We have weighed that interest against the rights of the people listed and limit the data to the professional role.
- You can ask for removal, correction or object to processing at any time through the data removal request page. We act on requests without undue delay and at the latest within one month.
Who receives data
We use carefully chosen processors bound by data processing agreements: a hosting provider with servers in the European Union, a payment operator, a provider of transactional email and a provider of AI language models used for briefings on paid accounts (only the text of the item being summarised is sent, never your account data). Data leaves the European Economic Area only under standard contractual clauses or an adequacy decision.
How long we keep it
- Account data: while the account exists and up to 12 months after closure, then deleted or anonymised.
- Billing records: as long as tax law requires, usually five years from the end of the year of payment.
- Security logs: up to 12 months.
- Business contacts: while the source remains public and relevant, reviewed at least once a year, or until a removal request.
Your rights
You have the right to access your data, to correct it, to have it erased, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to support@defencecontractors.com or use the removal request page. You also have the right to lodge a complaint with a data protection supervisory authority in your country.
Cookies
The service sets only cookies that are strictly necessary: a session cookie that keeps you signed in, a security token against cross-site request forgery and a preference for yearly or monthly prices. We do not use advertising pixels or tracking cookies, so no consent banner is shown.
Changes
We may update this policy when the service changes. The date at the top shows the latest version, and account holders are told by email about material changes.