Login
Register

Privacy Policy

Last updated: 24 January 2026

This Privacy Policy explains how personal data is collected, used, stored, and protected when you use the Essex Growth Agency Supply Chain Portal (the “Platform”).
We are committed to protecting your privacy and handling your data in a transparent and lawful way, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The Platform is operated in connection with Essex Growth Agency and Essex County Council (as applicable).
References to “we”, “us”, or “our” mean the Platform operator.

We act as a data controller for the personal data processed through the Platform, except where stated otherwise.

2. What Personal Data We Collect

Account and User Information

  • Name
  • Email address
  • Telephone number
  • User login details
  • User role and permissions

Company Profile Information

  • Company name and trading name
  • Business address
  • Company registration number
  • VAT number (if applicable)
  • Sector / trade categories
  • Certifications and accreditations (e.g. CHAS, ISO)
  • Company size, turnover bands, tier level
  • Insurance and policy documents
  • Website and social links

Opportunities and Applications

  • Opportunities (tenders) posted on the Platform
  • Applications submitted to opportunities
  • Application timestamps and status
  • Internal notes or status indicators (where used)

Technical and Usage Data

  • IP address
  • Browser and device information
  • Login activity
  • Pages visited and actions taken within the Platform

3. How We Use Your Data

We use your data to:

  • Provide access to the Platform and its features
  • Create and manage user accounts and company profiles
  • Enable posting and applying for opportunities
  • Display matching results between companies and opportunities
  • Facilitate communication between users
  • Maintain records for audit, reporting, and compliance
  • Improve the Platform’s performance and user experience
  • Provide support and respond to enquiries

4. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Performance of a contract – where processing is necessary to provide the Platform and its services
  • Legitimate interests – to operate, secure, and improve the Platform
  • Legal obligation – where required by law or regulation
  • Consent – where explicitly requested (for example, optional communications)

5. Data Sharing

Data shared on the Platform may be visible to other registered users, for example:

  • Company profiles visible to opportunity owners
  • Applications visible to opportunity owners
  • Opportunity details visible to registered companies

We do not sell personal data. Data may be shared with trusted service providers (e.g. hosting, security, analytics) only where necessary to operate the Platform and subject to appropriate safeguards.

6. Automated Matching and Recommendations

The Platform uses automated logic to generate match results between companies and opportunities based on structured criteria (such as sector, certifications, and company attributes).

  • These matches are advisory only
  • No automated decision-making produces legal or significant effects
  • Users remain responsible for due diligence and procurement decisions

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, audit, or reporting requirements.

Some data may be retained after account closure where required for compliance or record keeping.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure hosting environments
  • Access controls and authentication
  • Encryption where appropriate
  • Regular monitoring and security updates

9. Your Data Protection Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data (subject to legal limitations)
  • Restrict or object to certain processing
  • Request data portability
  • Withdraw consent where processing is based on consent

Requests can be made via the Platform’s support or contact channels.

10. Cookies and Analytics

The Platform uses cookies and similar technologies to ensure functionality, security, and performance.
Where analytics tools are used, they are configured to comply with applicable data protection requirements.

You can manage cookie preferences through your browser settings or any cookie controls provided on the Platform.

11. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices and encourage you to review their policies separately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated where appropriate. Continued use of the Platform indicates acceptance of the updated policy.

13. Contact and Complaints

If you have questions about this Privacy Policy or how your data is handled, please contact us via the Platform’s Help or Support section.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

Secret Link