Privacy Policy.

1. Who we are

Acme Hub Ltd ([Registration Number]) is incorporated in [Jurisdiction of Incorporation], with its registered address at [Registered Address]. We act as the Data Controller for personal data processed through PrimusBids. For data protection enquiries or to exercise your rights, contact us at hello@primusbids.com.

2. Personal data we collect

2.1 Information you provide directly

• Account data: Name, email address, and profile details (organization, role, portfolio, sector).
• Tender and bid content: Tender descriptions, requirement responses, answer-library entries, messages, and applications you create or upload.
• Compliance and regulatory data: Documents, checklist entries, and regulatory application details you submit in the health & social care workspace.
• Payment data: Billing name and email, and transaction references. Your card number, expiry date and CVV are sent encrypted directly to our payment processor and are not stored on our servers.
• Communications: Messages you send us, including support enquiries and contact-form submissions.

2.2 Information collected automatically

• Technical data: IP address, browser type, and device information, collected as part of normal request handling.
• Usage data: Pages viewed, actions taken within the Platform, and login history, used to operate and secure your account.
• Session cookies: Strictly necessary cookies that keep you signed in and remember your role. See our Cookies Policy for the full list.

2.3 Information from third parties

• Sign-in providers: If you sign in with Google, we receive your name, email address and profile picture from Google.
• Payment confirmations: Payment status and transaction details from our payment processor, Flutterwave.

3. Why we process your personal data

• Service delivery: To create and manage your account, host your organization's tenders and workspace, process applications and messages, generate AI tender analyses, and track delivery projects.
• Operational communications: To send sign-in links, account alerts, invitation emails, tender deadline reminders, and responses to support enquiries.
• Payments: To process fees for audits, quotes and other paid services.
• Security: To detect and prevent fraud, abuse, and unauthorized access.

4. Legal basis for processing

5. Disclosure of your personal data

We do not sell, rent, or trade your personal data. We share it only with the service providers needed to run the Platform, under appropriate agreements:

• Payment processing: Flutterwave, to securely process payments.
• Database and infrastructure hosting: Supabase (database) and Vercel (application hosting).
• Email delivery: Resend, to send sign-in links and transactional email.
• Authentication: Google, if you choose to sign in with a Google account.
• Marketing measurement (only if you accept marketing cookies): Meta (Pixel and Conversions API) and Google (tag), to measure the effectiveness of our advertising. See our Cookies Policy for what is shared and how to opt out.
• Legal mandates: Law enforcement, courts, or regulators, where we are legally required to disclose information.

6. International transfers

We use cloud infrastructure that may store or process data outside your home country. Where this happens, we take reasonable steps to ensure your data remains protected to a standard consistent with this Policy, including relying on our providers' own data-protection safeguards and, where appropriate, standard contractual clauses.

7. Data retention

We retain account and workspace data for as long as your account or organization remains active, plus a reasonable period afterward in case you reactivate it. Payment and transaction records are retained for as long as required by applicable financial and tax regulations. When data is no longer needed, we delete it or irreversibly anonymize it.

8. Cookies

PrimusBids uses strictly necessary cookies to keep you signed in and remember your selected role. With your consent, given through the cookie banner, we also use marketing cookies (Meta Pixel/Conversions API and Google tags) to measure advertising effectiveness — these only load if you accept them. See our Cookies Policy for details and how to withdraw consent.

9. Your data protection rights

Depending on where you are located, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can exercise any of these rights free of charge by emailing hello@primusbids.com. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.

10. Security

We use technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls limiting who can view your data, and encryption of card details before they are sent to our payment processor. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

11. Changes to this Privacy Policy

We may update this Policy to reflect changes to the Platform or applicable law. Material changes will be announced on the Platform or by email before they take effect. The "Effective" date at the top of this page reflects our most recent update.