We collect and process the following information:

• Title, Name, Surname
• Contact details – (e.g. mobile phone numbers and email addresses)
• Professional information (e.g., industry, company, and job title)
• Professional interests (e.g., expressions of interest in particular frameworks)
• Event attendance

Most of the personal information we process is provided to us directly by you when you contact us with enquiries, subscribe to receive marketing communications, submit an expression of interest in a tender or complete a tender application, or you are nominated contact on an existing framework.

We also receive personal information indirectly, from the following sources in the following scenarios:

• where it is publicly available on the website of the organisation you represent, or a professional register and the communication is relevant to the organisation you work for .
• where a third party such as a client, supplier or contractor has passed on your contact details as an interested party.

Under the UK General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent – when you provide us at the point of collection your personal data to receive information about our products and services. You can remove your consent at any time by contacting procurementadmin@procure-plus.com.

(b) Legitimate interest – we may process your personal data in reliance on a legitimate interest in the effective and lawful operation of our businesses. For example, to develop our products and services, maintain our client, supplier and contractor relationships, and ensure the continued relevancy of communications, and the effective delivery of information and services.

(c) Compliance with a legal obligation – for example, notifying you about changes to this privacy policy

We use the information that you have given us to send you (or the organisation you represent) marketing communications by email. Our marketing will include information about us, our products and services, any events we may hold from time to time. We may advise you of future framework procurement opportunities we believe may be of interest to you.  We may also send you feedback surveys following registration and/or tendering for an opportunity to improve the process in the future.

You can opt out of receiving marketing communications at any time via emailing us at procurementadmin@procure-plus.com.

We may share this information with third parties where we have a legitimate interest to do so, for example with partners on collaborative projects; or third parties that provide services to us for example website or system hosting, management, and support; data back-up; data analysis; security and storage services; IT infrastructure services; customer service; and email delivery services.

All the personal data we process is processed by our staff in the UK who received training in data protection.

We have security arrangements in place to guard against unauthorised access, improper use, alteration, destruction or accidental loss of your personal information. We take appropriate organisational and technical security measure and have rules and procedures in place to ensure that any personal information we hold is not accessed by anyone it shouldn’t be.

Our IT hosting and maintenance is located on servers within the European Economic Area (EEA).  Your data receives the same level of protection in the EEA as it does in the UK through the safeguard of Adequacy Decisions.

We do not intend to transfer data outside of the EEA but in the event that we do so we will comply will all appropriate transfer mechanisms as stipulated by Data Protection Legislation.

We keep your personal information for the duration of the current opportunities that are relevant to your (e.g. framework or DPS) and the renewal of those opportunities.  We will then dispose your information by removing your details from our marketing lists.

Under data protection law, your rights in relation to data we hold about you include:

• Right of access – you can ask us for a copy of the data we hold about you
• Right to rectification – if the data we hold is inaccurate or incomplete you can ask us to update this information.

You also have the right to:

• Erasure – you can ask us to erase your personal information.
• Restriction of processing – you can ask us to limit the way we use your data for a period
• Object to processing – you can stop us from processing your data for a particular purpose.
• Data portability – you can ask to receive the information you have provided to us in a format that will allow you to easily transfer it to another organisation.

However, these rights and our ability to meet these requests will depend on the circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

We do not use automated decision making.

Procure Plus is a registered data controller (number Z1072740).

If you wish to exercise any of your rights or raise a complaint on how we have handled your personal data, you can contact:

Group Company Secretary, Katie Taylor by email to katie.taylor@procure-plus.com or in writing at Procure Plus, Duckworth House, Lancastrian Office Centre, Talbot Road, Manchester, M32 0FP).

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address is:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113