Privacy Policy

1. Overview and Scope

TenderHub Sri Lanka ("TenderHub", "we", "us", or "our") operates the national procurement intelligence gateway available at tenderhub.lk. This Privacy Policy sets out how we collect, use, store, process, and safeguard personal and organizational data obtained when you interact with our platform, subscribe to tender alert feeds, or publish commercial procurement notices.

2. Data We Collect

• Account & Contact Information: Name, professional corporate email, phone number, company name, CIDA grading, and business registration details when creating bidder or publisher accounts.
• Procurement Alert Preferences: Specific sectors (e.g. Civil Construction, Information Technology, Medical Supplies) and geographical regions (Provinces and Districts) you select for real-time notification dispatch.
• Direct Notice Submissions: Official tender dossiers, RFP documentation, scanned gazette clippings, and contact officer credentials provided by procuring entities.
• Platform Analytics & Logs: IP address, device telemetry, browser type, search queries, and access timestamps collected to prevent automated scraping abuse and ensure system resilience.

3. How We Use Your Information

Your information is processed strictly for:

• Delivering targeted, non-intrusive tender alerts via email and WhatsApp according to your declared preferences.
• Authenticating authorized staff, institutional buyers, and registered commercial bidders.
• Facilitating official communications between contractors and procuring desks.
• Ensuring compliance with statutory procurement transparency obligations across Sri Lanka.

Optional Meta Pixel and Google Analytics on public pages run only after you allow analytics in Cookie settings. You can reject or change that choice at any time; browser privacy signals are respected.

TenderHub also measures public page visits with its own first-party, cookieless analytics. It does not store your IP address: visits are counted with a daily-rotating anonymous code, and your approximate location (country, region and city) comes from our network provider. We never store your IP address, coordinates or postcode. Only if you allow analytics do we keep a random visitor ID in your browser to tell new and returning visits apart; rejecting analytics removes it. Do Not Track is respected, and private account and staff pages are never measured.

Account activity. When you are signed in, TenderHub keeps a record of your account activity (sign-ins and sign-outs, failed sign-in attempts, password and security changes, tenders you view, search or download, alerts you change, and bids and payments) so we can protect your account and help you when you contact support. Each entry keeps a shortened IP address (we never store the full address), your device type, operating system and browser. This record stays inside TenderHub, is never used for advertising or website analytics, is visible only to authorised TenderHub staff, and is deleted automatically after 12 months.

4. Sealed Bids and Financial Confidentiality

TenderHub strictly respects competitive bidding confidentiality. Sealed bid submissions, confidential pricing tables, and private financial bids are encrypted in transit and at rest. Such records are never exposed publicly, crawled by third-party search engines, or made accessible to competing bidders.

5. Data Retention & Your Rights

In accordance with Sri Lanka's Personal Data Protection Act (PDPA), you retain the right to request access to your personal data, rectify inaccurate records, request deletion of non-statutory account records, or opt out of automated alert notifications at any time.

For inquiries or data privacy requests, contact our Data Governance Officer at hello@flxwaretech.com.