On this page
What personal data we collect depends on the route you use.
General contact details and your message.
If you use Contact, we may collect your name, email address, organisation and message, together with the acknowledgement required to submit the form.
Business contact and public-opportunity context.
If you use Send One Tender, we collect your name, work email, organisation, role, sector, public tender link or reference, optional notes and your submission acknowledgement.
For limited professional research and relevant business-to-business outreach, WinIntel may use professional information about people acting in a business capacity. This can include your name, current role or job title, organisation, publicly visible professional profile or public business contact route where applicable, relevant organisation or public-procurement context, the public or official source used, interaction state, and any objection or suppression status needed to respect your preference. We do not use bought prospect lists, mass-scrape personal data for this purpose, guess private contact details or collect unnecessary private or sensitive information for prospecting. This activity is human-reviewed and manually assisted.
CookieYes records cookie-consent choices and related consent evidence needed to operate the preference mechanism. This can include a consent identifier, consent status, date and time and a pseudonymised or masked IP address. If you accept analytics, Google Analytics may collect pseudonymous measurement data such as page views, session statistics, approximate geolocation and browser or device information. This implementation is not intended to send form-field contents or special-category personal data to Google Analytics.
Why we use personal data, and the lawful basis.
We use business-contact information to respond to enquiries, corrections and service requests, administer the requested interaction, protect the website and service, and meet legal obligations that apply to privacy rights or complaints.
Ordinary B2B enquiries and service administration.
For ordinary B2B enquiries, tender requests and service administration, WinIntel relies on legitimate interests where that basis is appropriate, including the legitimate interest in operating and responding through a proportionate B2B service.
Where the law requires processing.
Where processing is required to meet a legal obligation, that legal obligation is the basis. If a later activity needs a different lawful basis, the relevant privacy information must be updated before that activity begins.
Optional Google Analytics processing relies on consent. Google Analytics is configured to remain off until analytics consent is given through CookieYes, and you can change or withdraw that consent at any time through Cookie settings. Necessary consent-management records are processed to administer user choices and support accountability for the consent mechanism.
Genuine, non-promotional market or product research is kept separate from relevant B2B marketing or commercial outreach. Limited professional information may be used to understand whether the problem WinIntel is working on is relevant to a professional role and, separately, to make proportionate business contact where appropriate. Durable product or market learning is de-identified or aggregated where identity is not needed. We do not reuse identifiable professional information for a materially different purpose without considering compatibility and the lawful basis required for that further use.
Where appropriate, limited professional research or relevant B2B outreach may rely on Article 6(1)(f) UK GDPR, legitimate interests, only where the specific purpose, necessity and balancing assessment supports that processing. Electronic marketing is assessed separately under the applicable Privacy and Electronic Communications Regulations requirements for the communication method and subscriber type. Legitimate interests is not blanket permission for indiscriminate or automated mass outreach.
Where information comes from, who may receive it and transfers.
Most personal data handled through the public website comes directly from you. Professional information used for research or relevant B2B outreach may also come from organisation public websites, Companies House, Find a Tender and other official or public procurement sources, publicly visible professional profiles, or information supplied directly during a relationship. Where personal data is obtained indirectly, WinIntel provides the required privacy information within a reasonable period and no later than one month. If WinIntel communicates with you sooner, the required information is provided or clearly surfaced no later than the first communication, unless a lawful exception applies. The fact that information is publicly available does not remove this transparency obligation.
Information may be handled by providers used for website hosting and form processing, by CookieYes for consent management and consent records, and by Google Analytics for optional website measurement only after analytics consent. Business cloud services may also be used for proportionate operational record handling. The Technology Providers page identifies the current verified providers that WinIntel chooses or needs to name publicly.
If personal data is transferred outside the UK and UK data-protection law treats the transfer as restricted, WinIntel will use an applicable adequacy decision, appropriate safeguard or other lawful transfer mechanism as required. You can contact WinIntel for information about safeguards relevant to your data.
How long we keep personal data.
We keep personal data only for as long as needed for the purpose for which it was collected and for relevant legal, operational, complaint, audit or defence needs. Where a fixed period is not appropriate, we use those purpose-based criteria to decide how long the information is kept. Named-professional research or outreach records are reviewed and deleted or minimised when they are no longer necessary. If someone objects to direct marketing or asks not to be contacted for marketing, WinIntel retains only the minimum suppression information reasonably needed to respect that preference and prevent repeat marketing contact.
Your data-protection rights.
Depending on the circumstances and lawful basis, you may have rights including access, rectification, erasure, restriction, objection and data portability. Where optional analytics relies on consent, you can withdraw that consent at any time through Cookie settings; withdrawal does not affect processing that was lawful before withdrawal. Contact hello@winintel.co.uk to exercise a right or ask a privacy question.
Questions, rights requests and complaints.
You can raise a data-protection complaint with WinIntel through the Complaints route. You also have the right to complain to the Information Commissioner's Office.
Email hello@winintel.co.uk for a privacy question or rights request, or use the public Contact route.
You can use the ICO's official complaint route if you are concerned about how your personal data has been handled. Open the ICO complaint service →
Reviewed 16 September 2026. This notice should be reviewed again if the processing described here materially changes.
Need to ask WinIntel about your personal data?Use the public Contact route or email the controller directly.
Contact WinIntel