Privacy notice

What personal information we collect, why, who sees it, and your rights under UK data protection law.

Draft for review. This document is a working draft and must be reviewed by a qualified solicitor before FireBid launches. Company details shown in [brackets] still need to be filled in.

1. Who we are

[FireBid Ltd] (“we”) runs FireBid and is the controller of the personal information described in this notice, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. [ICO registration number to be added.]

When a vendor receives your details after you accept their quote, that vendor becomes a separate controller of the information they use to carry out the work.

2. What we collect

Account details: name, email address, phone number, password (stored encrypted), and company name if you give one.
Job details: the service, building information, description, photos and documents you upload, site address, site contact and access notes.
Vendor details: business and director information, insurance and certification documents, and the results of our checks.
Messages and reviews sent through FireBid.
Technical information: IP address, browser type and log data needed to run and secure the service.

3. How we use it

To run your account and the marketplace, including sending jobs to matching vendors and quotes to customers. Lawful basis: performance of our contract with you.
To check vendors before they can quote, and to keep those checks up to date. Lawful basis: our legitimate interest in keeping customers safe, and legal obligations where they apply.
To send service messages, such as new quotes, messages and changes to a job. Lawful basis: performance of contract.
To prevent fraud and misuse, handle complaints and improve the service. Lawful basis: legitimate interests.
To send marketing, only if you have agreed. You can opt out at any time.

We share personal information only where we need to:

with vendors, as described in the next section;
with service providers who host our systems and send email for us, under contracts that require them to protect it;
with schemes, insurers or Companies House when checking a vendor’s details;
with the police, regulators or courts where the law requires it.

We do not sell personal information.

5. Sharing with vendors

Before you accept a quote, verified vendors who offer the service in your region can see the job description, building details, uploaded files, your timescale and budget band, and the town and first half of your postcode. They cannot see your name, address, phone number, site contact or access notes.

When you accept a quote, that vendor receives your name, the site address, site contact and access notes so they can arrange the work. Vendors you don’t choose never receive these details.

For this reason, please don’t put personal details in the job description or in uploaded documents.

6. How long we keep it

Account information: while your account is open, and for [six years] after it closes, to deal with any claims or questions about past jobs.
Jobs, quotes and messages: for [six years] after the job is completed or closed.
Vendor checks and documents: for as long as the vendor is active, then [six years].
Technical logs: [90 days].

[Retention periods to be confirmed.]

7. Your rights

You have the right to access your personal information, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent where we rely on it. Some rights are limited where we need to keep information, for example to meet a legal obligation. To use any of these rights, contact us using the details below. We will respond within one month.

8. Security and transfers

We protect personal information with access controls, encryption in transit and secure storage. Uploaded documents are stored privately and are only shown to people allowed to see them. [Hosting location and any transfers outside the UK, with the safeguards used, to be confirmed.]

9. Cookies

We use essential cookies to keep you signed in and to protect forms against misuse. We do not currently use advertising or analytics cookies. If that changes, we will ask for your consent first.

10. Contact and complaints

Questions about privacy, or a request to use your rights: [email protected].

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to resolve your concern first.

Draft dated 20 October 2026.