This notice explains what I do with personal data when you contact me or instruct me. It is written to be read, not to be survived.
Standstill is a trading name of Procurement, Commissioning and Commercial Services Ltd, a company registered in England and Wales, company number 7443110, registered office Imperial House, Bentlawnt, Minsterley, Shropshire, SY5 0ES. The company is the data controller.
Contact: Alex Hackett, alex@standstillreview.co.uk, 07946 361275.
ICO registration number [number].
When you make an enquiry: your name, organisation, contact details, and whatever you tell me about your situation.
When you instruct me: the procurement documents you send. These routinely contain personal data belonging to other people — the names, roles, CVs and qualifications of staff named in your bid, and the names of officers who evaluated it. In social care and healthcare procurements they may also contain information about service users.
Please send only what the review needs. If your tender contains service user data or other special category information that isn't relevant to the assessment, redact it before sending or tell me it's there so we can agree how to handle it.
Where documents contain personal data about your staff or third parties, you remain responsible for having a lawful basis to share it with me. If a data processing agreement is needed, I'm happy to put one in place.
I use AI-assisted document analysis for parts of the review, principally to cross-reference the authority's assessment of your bid against what you actually submitted. This is what lets the work be delivered inside a standstill period at a fixed fee.
Documents are processed using [tooling] under [data processing terms]. They are not used to train any model. Every finding produced this way is verified by me against the source documents before it enters a report, and the professional judgement in the report is mine.
If you would prefer AI tooling not to be used on your documents, tell me before you send them. I can work manually, but the timescale and fee will both change.
I do not sell data, share it for marketing, or pass it to a contracting authority, a commissioner or any other bidder.
Enquiries that don't become instructions: deleted within [6] months.
Instructed reviews: retained for [6] years from the end of the engagement, which reflects the limitation period for claims against me and my insurer's requirements. Retained securely and not used for anything else.
Accounting records: as required by law.
You can ask me to delete your documents sooner. I'll normally agree, but I'll keep a minimal record of who instructed me, on what, and what I advised.
Before accepting any instruction I check it against my current and recent clients through Procurement, Commissioning and Commercial Services Ltd. That means recording the name of the contracting authority, the successful bidder and any named subcontractors. I keep those records so the check can be evidenced later.
You can ask for a copy of the personal data I hold about you, ask me to correct it, ask me to delete it, object to my processing it, or ask me to restrict what I do with it. Email me and I'll respond within a month.
If you're unhappy with how I've handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I'd rather you told me first so I can put it right.
This site sets no cookies, uses no analytics, and loads nothing from third-party servers. Nothing is tracked.
Data is held in the UK and the European Economic Area, other than where the AI tooling named above processes it elsewhere under appropriate safeguards. [Confirm and describe once tooling is chosen.]