Privacy

This policy explains what personal information we collect, why we collect it, and what we do with it. We keep it short and readable on purpose. If anything is unclear, email us and ask.

1. Who we are

This website is operated by The Procurement Lab, referred to here as we, us and our. We are the data controller for the information described in this policy.

Contact us about anything in this policy at info@theprocurementlab.com.

2. What we collect

When you fill in a form. Your name, email address, and anything else you choose to type, such as your organisation, phone number, which templates or workshops you are interested in, and the message itself.

When you subscribe to insights. Your first name and email address.

When you buy a digital product. The purchase is handled entirely by Gumroad. We receive your name and email address and details of what you bought. We never see or hold your card details.

When you visit the site. Basic technical information such as pages visited and rough location by country, in aggregate. See the cookies section below.

3. Why we collect it, and our lawful basis

To reply to your enquiry. Lawful basis: legitimate interests, namely responding to someone who has contacted us asking for a reply.

To send you insights and product updates. Lawful basis: your consent, given when you tick the box and submit the form. You can withdraw it at any time using the unsubscribe link in any email.

To deliver and support a product you have bought. Lawful basis: performance of a contract with you.

To understand how the website is used. Lawful basis: legitimate interests, namely improving the site.

We do not sell your data. We do not share it for anyone else's marketing. We do not use automated decision-making or profiling.

4. Who else sees it

We use a small number of service providers who process data on our behalf:

• Formspree , which receives website form submissions and emails them to us.
• Gumroad , which sells and delivers our digital products and handles all payment.
• Cal.com , which runs the booking calendar and stores the details you enter when booking a call.
• Netlify , which serves the website.
• Microsoft 365 , where our email is held.
• an email marketing provider, named here before the first newsletter is sent, which sends the insights emails.

Some of these are based outside the UK. Where data is transferred internationally, we rely on the safeguards those providers have in place, such as standard contractual clauses or an adequacy decision.

We may also disclose information where we are legally required to.

5. How long we keep it

Enquiries: up to 24 months after our last contact, then deleted.

Subscribers: until you unsubscribe, or after 24 months of no engagement, whichever comes first.

Purchase records: for as long as required for tax and accounting purposes, normally six years.

6. Your rights

Under UK data protection law you have the right to ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to us using it. You can also ask us to transfer it elsewhere, and you can withdraw consent at any time.

To exercise any of these, email info@theprocurementlab.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or call their helpline. We would rather you came to us first so we can put it right.

7. Cookies

This website uses very few cookies. We do not use advertising cookies, and we do not track you across other websites.

Essential. Some cookies are needed for the site to function and to remember, for example, that you have dismissed the announcement bar. These do not identify you.

Analytics. We use privacy-friendly analytics that count visits without cookies and without identifying individuals. If we ever add anything that tracks you, we will ask first.

Third parties. When you click through to Gumroad or a booking tool, those sites set their own cookies and have their own policies.

You can block or delete cookies in your browser settings. The site will still work.

8. Security

The website is served over an encrypted connection. Our service providers hold your data on their own secured systems. No system is perfectly secure, but we take reasonable steps to protect information and limit who can access it, which in practice is the founder alone.

9. Changes and contact

We may update this policy. The current version always appears on this page, with the date at the top.

Questions, requests or complaints: info@theprocurementlab.com

The Procurement Lab
theprocurementlab.com