Beta notice — confidential client documents are not accepted until the applicable service order, processor terms and approved secure route are in place.
Privacy notice
Last updated: 31 July 2026
Who we are
LIGHT AND DARK ENERGY LTD (company number 15095270) is the controller for website enquiries and sales communications under the UK GDPR and Data Protection Act 2018. For client tender work, our role may be controller or processor depending on the signed service order.
Information we use
For an initial tender-fit request, we collect the company number and public Companies House information, the work email supplied, service description, delivery geography, preferred contract size, relevant evidence and, where provided, public tender details. We also record the requester's confirmation that they act for an eligible UK business. We do not invite confidential documents, special-category data or sensitive procurement information through this form.
Purposes and lawful bases
- Reviewing the request and taking steps at the enquirer's request before a possible contract (contract steps and legitimate interests).
- Checking scope, conflicts, safety exclusions and relevant public opportunities.
- Delivering contracted services and maintaining appropriate audit records.
- Relevant business-to-business outreach where our legitimate-interests assessment supports it.
- Verifying UK launch eligibility and preventing misuse using public Companies House data (legitimate interests).
- Meeting legal, tax, security and fraud-prevention obligations (legal obligation and legitimate interests, as applicable).
Optional website analytics
We use a self-hosted Matomo installation only after you select “Allow aggregate analytics”. It records page visits, the referring domain and an approximate city and country. The city is derived from the connection IP; Matomo then masks two bytes of the IP address. Individual visit logs and visitor profiles are disabled for this website.
We do not use analytics cookies, advertising identifiers, cross-site tracking, session recordings, heatmaps, user IDs or form-field contents. Referral links are reduced to their origin and selected query parameters that could contain contact information are excluded. You may refuse analytics or change your choice at any time using “Privacy choices” at the bottom of the page.
The lawful basis for any resulting personal-data processing is your consent. The local preference used to remember your choice is necessary to apply that choice.
Storage, service providers and transfers
Initial form submissions are stored in access-controlled platform infrastructure. Relevant categories of recipients may include our hosting, business-email, secure-storage and approved AI service providers, and professional advisers or authorities where required. We use providers only under appropriate written terms, isolate client work by organisation and do not use client documents to train public models. We will identify the actual provider route before confidential documents are accepted. Where a restricted transfer occurs, we will use an applicable UK adequacy regulation or appropriate safeguards and transfer assessment; details may be requested from the contact below.
Retention and rights
Unconverted fit-check records are deleted or anonymised 14 days after the enquiry is closed, unless a minimal record is reasonably required for conflicts, suppression, security or a legal claim. Paid-engagement working files are kept for 90 days after delivery by default, subject to the signed service order and any legal hold. Contract, accounting, tax, security and dispute records are held separately for the period required by law or reasonably needed to establish, exercise or defend legal claims. Backups expire through their documented ageing cycle.
Individuals may ask for access, correction, deletion, restriction or objection where applicable. Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing. The right to object to direct marketing may be exercised at any time by contacting us, and we will retain only the minimal suppression record needed to honour it. Individuals may complain to the UK Information Commissioner's Office.
Data protection complaints
You may complain directly to us. We will acknowledge it within 30 days, investigate appropriately, keep you informed and communicate the outcome without undue delay. See our complaints procedure.
Contact
Email: privacy@tenderoperations.co.uk
71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ