Privacy Policy — Governance Docs LLC

Last updated: 11 September 2026

This Privacy Policy explains how Governance Docs LLC (“Governance Docs”, “we”, “us”, or “our”) collects, uses, and protects your personal information when you visit governancedocs.com (the “Website”) or purchase our digital products. Governance Docs LLC is a limited liability company registered in the State of New Mexico, United States, with its registered office at 1209 Mountain Road PL NE Ste R, Albuquerque, New Mexico 87110, USA. By using the Website you agree to the practices described in this policy.

Information We Collect

  • Account and order information you provide when you register or make a purchase: name, email address, billing address, and the contents of your order.
  • Payment information: payments are processed by our payment provider, Stripe. We do not receive or store your full payment card number.
  • Communications: information you provide when you contact us or subscribe to our emails.
  • Usage and device data collected automatically through cookies and similar technologies, such as IP address, browser type, pages viewed, and referring links.

How We Use Your Information

  • To process and deliver your orders and provide access to your digital downloads.
  • To provide customer support and respond to your enquiries.
  • To operate, maintain, secure, and improve the Website.
  • To send you marketing communications where you have consented, and to allow you to opt out at any time.
  • To comply with our legal obligations and enforce our terms.

Legal Bases (EEA/UK Visitors)

Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (to fulfil your orders), your consent (for marketing and non-essential cookies), our legitimate interests (to operate and improve the Website and prevent fraud), and compliance with legal obligations.

Cookies and Tracking

We use cookies and similar technologies for essential Website functionality, to remember your preferences, and — with your consent — for analytics and advertising. A full list of the cookies we set, who sets them, their purpose and how long they last is on our Cookie Policy page.

Your consent choice. When you first visit, a banner asks which non-essential cookies you allow. Outside the United States, nothing non-essential is set until you choose. In the United States you may opt out at any time, and we treat the Global Privacy Control browser signal as an opt-out from advertising cookies. You can change or withdraw your choice at any time using the “Manage cookies” link in the footer of every page; withdrawal takes effect immediately and does not affect processing carried out before it.

How we record it. So that we can demonstrate consent as data-protection law requires, we keep a record of each choice: a random consent ID (also stored in a cookie on your device), the date and time, your choice for each category, the exact version of the notice you were shown, your browser type, and a truncated form of your IP address. We do not store your full IP address. These records are kept for three years after your last choice and then deleted. If you contact us about your cookie preferences, quoting the consent ID shown in the preference centre lets us find your record.

Sharing and Third-Party Service Providers

We do not sell your personal information. We share it only with service providers that help us operate the Website and fulfil your orders, and only as necessary for those purposes. These include:

  • Stripe – payment processing;
  • Hostinger – website hosting;
  • Microsoft 365 – business email and order communications;
  • Google – website analytics and, where consented, advertising;
  • Meta (Facebook) and Pinterest – where consented, advertising and conversion measurement;
  • Our email marketing tools – to send newsletters and updates where you have subscribed.

We may also disclose information where required by law or to protect our legal rights.

Data Retention

We keep personal information only as long as needed for the purposes in this policy, then delete or anonymise it. In practice:

  • Orders, invoices and payment records — for the period tax and accounting law requires (generally seven years).
  • Account details — while your account is active, and deleted on request.
  • Support correspondence — up to three years after the enquiry is closed.
  • Marketing subscriptions — until you unsubscribe, after which we keep only what is needed to honour your opt-out.
  • Cookie consent records — three years after your last choice.
  • Website analytics — retained by Google Analytics in identifiable form for no longer than 14 months.

Data Security

The Website uses HTTPS encryption, and we apply reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Transfers

Governance Docs LLC is based in the United States. If you access the Website from outside the United States, your information may be transferred to and processed in the United States and other countries where our service providers operate, using appropriate safeguards where required by law — the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant) in our agreements with service providers, and the EU–US Data Privacy Framework where a provider is certified under it.

Your Rights

EEA/UK (GDPR): you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

California (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. We will not discriminate against you for exercising these rights.

Saudi Arabia, Bahrain and the UAE (PDPL): if you are in the Kingdom of Saudi Arabia, the Kingdom of Bahrain or the United Arab Emirates, the personal data protection law of your country gives you rights that broadly correspond to those above — to be informed, to access and obtain a copy of your data, to request correction or deletion, to object to processing for direct marketing, and to withdraw consent at any time — and the right to complain to your national authority (SDAIA in Saudi Arabia, the Personal Data Protection Authority in Bahrain, the UAE Data Office).

Other US states: residents of states with comprehensive privacy laws (for example Virginia, Colorado, Connecticut, Utah, Texas and Oregon) have similar rights of access, correction, deletion and opt-out of targeted advertising. We treat a Global Privacy Control signal as a valid opt-out request.

How we respond: we answer within the time the applicable law allows (one month under the GDPR, 45 days under US state laws) and may ask you to confirm your identity, for example by writing from the email address on your order. Where the law allows, you may use an authorised agent.

To exercise any of these rights, contact us at info@governancedocs.com.

Children’s Privacy

The Website is intended for business users and is not directed to children. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.

How to Contact Us

Governance Docs LLC is the data controller for the personal data described in this policy. We have not appointed a Data Protection Officer, as the law does not require one for our activities; privacy enquiries are handled by the company’s management at the address below. Please use the subject line “Privacy request” so we can prioritise it.

Governance Docs LLC
1209 Mountain Road PL NE Ste R, Albuquerque, New Mexico 87110, USA
Email: info@governancedocs.com
Phone: +1 (812) 227-5662