Privacy Policy

1. Who controls your data

Bids & More Ltd, registered office London, United Kingdom, is the data controller for personal data processed through bids&more. Contact us about privacy at [email protected].

2. What we collect

Depending on how you use bids&more, we collect:

• Name, email address, and phone number (if you provide one)
• Postal address, when you post a job that needs a location
• Photos you upload to a job listing
• The free-text description of the job you post
• Messages, questions, and answers exchanged through the platform
• Payment details are collected and processed directly by Stripe — we never see or store your full card number
• Basic technical data (IP address, browser) for security and abuse prevention

3. Why we process it, and the legal basis

• Performance of a contract — creating your account, matching posters with providers, processing the deposit payment, and sending job-related emails (a new bid, an accepted bid, a message)
• Legitimate interests — preventing fraud and abuse, keeping the platform secure, and improving the service
• Legal obligation — keeping payment records as required by UK tax and accounting law

4. Who we share it with

We use a small number of processors to run bids&more, and only share what each one needs to do its job:

• Stripe — processes the deposit payment
• Resend — delivers our transactional emails (bid notifications, magic sign-in links)
• Google (Gemini) — reads the free-text description of a job you post to suggest a category and a clean title; it does not receive your name, email, or contact details
• Amazon Web Services — hosts our servers and database (EU-West region)

Your name is visible to the other party on a job (poster ↔ provider) so they know who they're dealing with. We don't sell your personal data to anyone.

5. International transfers

Our servers are based in the EU. Some of our processors (including Stripe and Google) may transfer data outside the UK/EEA; where they do, they rely on standard contractual clauses or an equivalent approved safeguard.

6. How long we keep it

We keep account and job data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution needs (typically up to 6 years for payment records, in line with UK tax record-keeping requirements).

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can update most of it yourself in your profile)
• Request deletion of your account and data
• Object to or restrict certain processing
• Request a portable copy of your data

To exercise any of these, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data.

8. Children

bids&more is not intended for anyone under 18.

9. Security

We use industry-standard measures (encrypted connections, access controls, rate limiting) to protect your data, but no online service can guarantee absolute security.

10. Changes to this policy

We may update this policy as the service evolves. We'll update the "last updated" date above when we do.