Privacy Notice — GOVROAD ACADEMY™

This Privacy Notice explains how Intelica Analytics, doing business as GOVROAD ACADEMY™ ("Intelica Analytics," "we," "us," "our"), collects, uses, shares, and protects personal data in connection with the GOVROAD ACADEMY™ website at govroadacademy.com and the courses and services offered through it (the "Service").

1. Controller

Intelica Analytics is the data controller for personal data processed through the Service, except for payment data collected directly by our Merchant of Record (see Section 5).

2. Personal data we collect

Account data: name, email address, password (hashed), and any profile information you provide when creating an account.
Inquiry and form data: name, email, organization, phone (when provided), and the content of messages submitted through inquiry, syllabus, and organizational training forms.
Enrollment and learning data: courses you enroll in, enrollment status, and (where applicable) progress information returned from the learning platform.
Support data: messages, attachments, and metadata you send when contacting us.
Usage and device data: IP address, browser and device type, approximate location derived from IP, pages viewed, and referring URL, collected through our servers and privacy-respecting analytics.

3. Purposes and legal bases

Providing the Service (account creation, course enrollment, delivering course access) — performance of a contract with you.
Responding to inquiries — our legitimate interest in answering you, or steps taken at your request prior to entering a contract.
Security, fraud prevention, and abuse detection — legitimate interests and legal obligations.
Product improvement and analytics — legitimate interest in understanding aggregate usage; performed with privacy-respecting analytics.
Legal compliance — compliance with applicable laws, including accounting and tax obligations (via our Merchant of Record).
Marketing communications, where applicable — consent, which you may withdraw at any time.

4. Cookies and analytics

We use essential cookies and similar technologies needed to operate the Service (for example, to keep you signed in). We use Plausible Analytics, a privacy-respecting analytics service that does not use cookies and does not collect personal data for tracking across sites. Where we introduce additional analytics or marketing cookies, we will present a cookie notice and, where required, ask for your consent.

5. How we share personal data

Merchant of Record — Paddle.com Market Limited ("Paddle"): Paddle is our reseller and Merchant of Record for all paid orders. When you make a purchase, Paddle collects and processes your billing details, payment method, billing address, and tax information as an independent controller for the sale, subscription management, payment processing, tax compliance, invoicing, and fraud prevention. Paddle's handling of that data is governed by Paddle's own privacy notice at paddle.com/legal/privacy.
Learning platform: to deliver course access we share your name, email, and enrollment status with our third-party learning platform provider.
Infrastructure and tooling subprocessors: cloud hosting, database, email delivery, error monitoring, and analytics providers, each engaged under appropriate contractual safeguards and permitted to use data only to provide services to us.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law, legal process, or to protect rights, safety, or property.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to customary confidentiality protections.

We do not sell personal data.

6. International transfers

Personal data may be transferred to and processed in countries other than the one in which you reside, including the United States and countries where our subprocessors operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms.

7. Data retention

We retain personal data only for as long as needed for the purposes described above:

Account and enrollment data: for the life of your account and up to 24 months after account closure, unless a longer period is required by law.
Inquiry and support messages: up to 24 months from the last interaction.
Order and tax records: retained by Paddle for the period required by applicable financial and tax law (typically 7–10 years).
Server logs and security data: typically up to 12 months.

When personal data is no longer needed, we delete or anonymize it.

8. Your rights

Depending on your location, you may have the right to: access the personal data we hold about you; request correction or deletion; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent. To exercise these rights, contact us through the form on the About page. You also have the right to lodge a complaint with the data-protection authority in your country. We will respond within the timeframe required by applicable law (typically within one month under UK/EEA law).

9. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege administration, and monitoring. No system is completely secure; we work to reduce risk continuously.

10. Children

The Service is intended for adults and professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. The updated version will be posted at this URL with a new effective date.

12. Contact

To exercise your rights or ask privacy questions, contact Intelica Analytics through the form on the About page. Questions about payment data handled by Paddle can be directed to paddle.net.