Legal
Privacy Policy
Last updated: March 2026
1. Who we are
eSourcingData Ltd is a Wales-first procurement software company registered in England and Wales. We operate esourcingdata.com, winacontract.com and demo.esourcingdata.com. Contact us at info@esourcingdata.com or 07936 561007.
2. What data we collect
We collect name, email, organisation, job title and phone number when you contact us, request a demo, use our ROI calculator, register for the free Welsh public sector pilot or sign up for our newsletter. We also collect usage data automatically through cookies. Welsh public sector pilot signups may include public-body type and procurement context.
3. How we use your data
We use your data to respond to enquiries, provide services, send product information where consented, improve our websites, comply with legal obligations, and process job applications. We do not sell your data. Welsh public body data is held to the same standard as all other client data — UK-hosted, GDPR-compliant, encrypted at rest and in transit.
4. Legal basis
We process data on the following bases: contract performance, legitimate interests, consent (newsletters and cookies), and legal obligation. For Welsh public sector clients, we additionally adhere to the data-handling expectations set out in Welsh Government and NHS Wales information governance frameworks.
5. Data retention
Contact data: 3 years. Newsletter data: until unsubscribe. Job applications: 12 months. Analytics: 26 months. Procurement records on the eSourcingData platform: 7 years as required by UK procurement law (PA23 + Welsh public sector record-keeping). Grant management records: retained per funder agreement, typically 7 years post-grant-close.
6. Data sharing
We share data with Resend (email), Render (hosting), Supabase (database, EU/UK region), and Google Analytics. All are GDPR-compliant under data processing agreements. We do not share data with other third parties without consent. All client data is hosted in the UK / EU.
7. Your rights
Under UK GDPR you have rights to access, correct, erase, restrict, port and object to your data. Email info@esourcingdata.com to exercise these rights. You may also complain to the Information Commissioner's Office at ico.org.uk. Welsh-language correspondence on data protection matters is welcomed where you prefer.
8. Cookies
We use cookies to operate our websites. See our Cookie Policy for details.
9. Welsh Language Standards
For Welsh public sector clients with Welsh Language Standards obligations, we support correspondence and key data-handling notices in Cymraeg or English at the client's preference. Bilingual data-protection notices for Welsh-public-body pilots can be supplied on request.
10. Contact
Privacy queries: info@esourcingdata.com or eSourcingData Ltd, registered in England & Wales.