Privacy Policy

1. Who we are

Govora Digital ("Govora Digital", "we", "us") is a digital agency serving government contractors in the United States. For questions about this policy or to exercise a privacy right, contact info@govoradigital.com. We are the controller of personal information described here, except where we process information on behalf of a client, in which case that client is the controller and we act as processor.

2. Information we collect

• Information you give us. Name, company, work email, website URL, and the contents of the message you submit through our contact or audit request form, or send us by email.
• Business contact details. Phone number, role, and contract vehicle or NAICS information you choose to share during a strategy call or engagement.
• Technical information. IP address, browser type, device type, referring URL, and pages viewed, collected automatically by our hosting infrastructure in server logs for security and reliability.
• Optional analytics. Aggregate usage data collected only if you consent to analytics cookies. See our Cookie Policy.

We do not knowingly collect information from children under 16, and we do not ask you to submit classified, controlled unclassified information (CUI), export-controlled data, or other sensitive government material through this website. Please do not do so.

3. How we use information

• To respond to your inquiry, schedule a strategy call, and prepare a Federal Website Readiness Audit.
• To provide, deliver, and support services under a signed engagement.
• To send service communications, and — where you have opted in — occasional marketing emails.
• To secure our website, prevent abuse, and diagnose technical problems.
• To comply with legal, tax, and contractual obligations.

Legal bases under GDPR (where applicable): performance of a contract or steps taken at your request, our legitimate interests in operating and securing our business, your consent (for optional cookies and marketing email), and compliance with legal obligations.

4. How we share information

We do not sell or share personal information for cross-context behavioral advertising, and we do not rent or trade contact lists. We disclose information only to:

• Service providers who host our website, deliver email, and support project delivery, under contract and only for those purposes.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law, subpoena, or to protect rights and safety.
• A successor entity in connection with a merger, acquisition, or asset sale, subject to this policy.

5. Retention

Inquiry and audit-request records are kept for up to 24 months from your last contact with us unless you ask us to delete them sooner. Client project records and related correspondence are kept for the duration of the engagement and up to 7 years afterward to meet tax, contractual, and record-keeping obligations. Server logs are retained for a short operational period.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict processing; to withdraw consent at any time; and to opt out of marketing email. California residents (CCPA/CPRA) may request disclosure of the categories of personal information collected, request deletion or correction, and are entitled to non-discrimination for exercising these rights. Because we do not sell or share personal information as those terms are defined, no "Do Not Sell or Share My Personal Information" mechanism is required — but you may still submit an opt-out request and we will honor it.

To exercise a right, email info@govoradigital.com with the subject "Privacy Request". We will verify your request using the contact details we already hold and respond within the time required by applicable law (generally 30–45 days). You may use an authorized agent where the law allows. EU/UK residents may also complain to their supervisory authority.

7. Security

We use HTTPS across the site, least-privilege access to project systems, reputable hosting providers, and security-conscious development practices. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify affected individuals and regulators as required by law.

8. International transfers

We operate from the United States and our providers may process data in the U.S. Where personal information is transferred from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Changes

We may update this policy. The "last updated" date above reflects the current version, and material changes will be highlighted on this page.