Contracts Finder technical research privacy information

UNICORN TECHNICAL SOLUTIONS UK LIMITED (company 16426877), trading as Yarlemill, is responsible for this activity. Contact hello@yarlemill.co.uk for privacy questions, rights requests or complaints. Our accountable director handles them.

We plan one small supervised test of our private research software using the UK government's publicly accessible Contracts Finder OCDS API. Our legitimate interest is verifying safe access, data handling and accountability. We rely on UK GDPR Article 6(1)(f) for incidental ordinary personal information and necessary internal control records. We do not use this test to assess people or commercial prospects, contact buyers or suppliers, or make significant automated decisions about anyone.

The response may include names, business contacts, sole-trader information and free text. We process mixed data briefly to validate the response, then discard source names and contacts, procurement identifiers, award values, source fingerprints and uncontrolled text before saving technical evidence. We do not collect attachments or seek sensitive information. Saved evidence consists of approved source/query and time, small counts, bounded protocol facts, and integrity, resource and authority records. Some control records can be linked to people in context; hashes are not automatically anonymous. Discarded source content cannot be reconstructed from our technical proof.

Access is limited to authorised local company operators and the independent technical verification process. No sale, marketing, publication of source records, external AI processing or overseas source-data transfer is authorised. Necessary private backups use existing local external storage. You do not need to supply information for this test.

Source content is not stored. We review retained technical and internal control evidence after verification and no later than 90 days after acquisition, or earlier for a rights request, incident or change of necessity. Any continued retention needs a specific purpose, documented necessity and a finite next review or disposal date. We keep necessary security and consumed-authority history to prevent unauthorised reuse. Reviews cover copies and backups. We do not promise automatic deletion on day 90 or instant erasure from immutable records; we assess any legal need to retain particular information when handling rights requests.

You may object to processing based on legitimate interests. You may also request access, correction, restriction or erasure where applicable. We assess requests under the applicable deadlines, without waiting for the routine review. We do not obtain extra information solely to identify people, but consider relevant information you provide. Portability and withdrawal of consent do not apply to processing based solely on legitimate interests.

You may complain to us at hello@yarlemill.co.uk and to the Information Commissioner's Office.