RFP QuestBeta

Privacy Policy

Last updated 13 July 2026

1. Who is responsible for your data

Fractional Quest Ltd (company number 17322105), registered office 71–75 Shelton Street, London WC2H 9JQ, is the data controller for personal data processed through rfp.quest. We are committed to protecting your privacy and handling your data in line with UK GDPR and the Data Protection Act 2018.

2. What we collect

Account data: your name and email, provided directly or via Google sign-in, and authentication records handled by our auth provider (Neon Auth).
Company profile: the company details, sectors, regions, keywords and preferences you enter to power matching.
Usage data: the tenders you view, save, and search, and feature usage, used to provide and improve the Service.
Website scrape:if you use the “prefill from website” feature, we fetch your public website to suggest profile fields; we store only the resulting profile data you choose to save.

3. How we use it

We use your data to operate your account, match you to relevant tenders, provide saved lists and alerts, improve the Service, and communicate with you about your account. We process this data on the basis of performing our contract with you and our legitimate interest in running and improving the Service.

4. Who we share it with

We do not sell your personal data. We share it only with the processors that run the Service on our behalf — including our database and authentication provider (Neon), our hosting provider (Vercel), and, where you use AI features, our AI provider — each bound to process data only on our instructions. Public tender data shown in the Service is already public information under the Open Government Licence.

5. Cookies

We use strictly necessary cookies to keep you signed in and secure your session. We do not use advertising cookies.

6. Retention

We keep your account and profile data for as long as your account is active. When you delete your account from your profile page, your account, company profile, saved tenders and associated data are permanently removed.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. You can edit your profile and delete your account directly in the app, or contact us to exercise any right. You may also complain to the Information Commissioner’s Office (ico.org.uk).

8. Contact

For any privacy question or request, contact privacy@rfp.quest.