Privacy notice

Last updated: 26 October 2026

This notice explains how Jacob Ashby, trading as Oppt ("oppt", "we", "us"), uses personal data when you visit oppt.ascendlabs.uk, use the oppt platform, or appear in the public procurement data we publish.

1. Who we are

oppt is run by Jacob Ashby, a sole trader based in the UK, trading as Oppt. Our business address is 11 Chalcroft Road, Sandgate, CT20 3NG.

For anything about your personal data, email contact@oppt.ascendlabs.uk or write to us at the address above.

2. When we are the controller and when we are the processor

• We are the controller for your account, billing, email-alert, usage and security data, for the Partner Directory, and for the public procurement data we collect. This notice covers all of it.
• We are a processor for the content our business customers upload to oppt, such as bid library documents, case studies, CVs and bid answers. That content belongs to the customer, and our Data Processing Agreement governs how we handle it. If your details appear in a document a customer uploaded (for example your CV in a bid library), please contact that customer first. We will help them respond to you.

3. What we collect and why

We do not collect special category data (such as health data) on purpose. Please don't put it in your profile. If it appears in documents a customer uploads, the customer is responsible for it, as explained in section 2.

4. AI features and automated scoring

oppt uses AI to score how well each tender fits your business (match score, AI win estimate, bid/no-bid), to summarise documents, to draft bid answers, and to build a profile of your company from your documents or website.

• The scores are about businesses and opportunities, not people. They don't make any decision with legal or similarly significant effects on you as an individual, so they are not automated decision-making under Article 22 of the UK GDPR. You decide what to bid for.
• The output can be wrong. Always check AI drafts and scores before relying on them.
• To produce the output, we send the relevant text (your profile, the documents you upload, tender documents and your questions) to our AI providers (see section 5).
• Your data isn't used to train AI models. Google's terms for its paid AI services don't allow it to train on this data, and Lovable's terms exclude our customers' data from its own AI training.

5. Who we share data with

We don't sell personal data. We share it only with the following:

We also share data:

• With your teammates, where you use team features (for example, library passages you choose to share appear with your name and email).
• With another member, when you send or accept a Partner Directory request (your contact email is shared).
• With tools you connect, such as your own Slack, Microsoft Teams or CRM.
• With your calendar app, if you subscribe it to your pipeline's private calendar link. Anyone who has that link can see your bid deadlines, so keep it private. You can switch the link off or replace it at any time, and the old link then stops working.
• With professional advisers, regulators, law enforcement, or a buyer of our business, where the law requires it or the transaction needs it.

6. International transfers

Some of our providers process data outside the UK. Where a country doesn't have UK "adequacy" status, our providers' data processing terms include the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. For transfers to the US, we also rely on the UK–US data bridge where the provider is certified. The exception is Lovable, which hosts our website and database and offers these terms only on plans we don't currently use. Contact us for a copy of the relevant safeguards.

7. How long we keep data

8. Your rights

You have the right to:

• access a copy of your personal data;
• correct it if it's wrong;
• erase it;
• restrict or object to how we use it, including an absolute right to object to direct marketing;
• move it (data portability);
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email contact@oppt.ascendlabs.uk. We'll reply within one month. We may ask you to confirm your identity first.

9. Emails

We send tender alerts, digests and reports, and service messages such as invitations, password resets and billing notices.

• Alerts start automatically: when you set up your profile from your company website, we switch on tender alerts to your sign-in email address, so you don't miss matching tenders.
• To stop alerts: use the unsubscribe link in any alert email (one click), or change your alert settings.
• We don't send marketing emails. If we start, we'll only send them in line with the law, and every one will include an opt-out.

10. Cookies and browser storage

See our Cookie Notice.

11. Security

• Encryption: data is encrypted in transit (HTTPS) and at rest.
• Access controls: access to production systems is limited and every request is authenticated.
• Uploads: we keep only the text extracted from uploaded files, not the original files.
• Breaches: if a breach puts your rights at risk, we'll tell you and the ICO as the law requires.

12. Children

oppt is a business service for adults. We don't knowingly collect data about children.

13. Complaints

If you're unhappy with how we've handled your personal data, please complain to us first:

• Email: contact@oppt.ascendlabs.uk
• Post: 11 Chalcroft Road, Sandgate, CT20 3NG
• Other channels: any other way you contact us also counts; you don't need to use a particular form.

What happens next:

1. We'll acknowledge your complaint within 30 days (normally much sooner).
2. We'll investigate it and keep you updated.
3. We'll tell you the outcome without undue delay.

If you're still not satisfied, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.

14. Changes to this notice

If we make significant changes, we'll let account holders know by email or in-app notice before they take effect.