Privacy policy

Last updated: 8 November 2026

This policy explains what personal data GovernAInce collects, why, and what rights you have. It applies to this website, to messages you send me, to forms you fill in on LinkedIn, and to client work.

1. Who is responsible for your data

The controller is Dmytro Sirosh, trading as GovernAInce.

For any privacy question or request, email privacy@governaince.io.

2. What data I collect and why

When	Data	Purpose	Legal basis	Kept for
You visit this website	IP address, browser type, pages requested, time of request	Delivering and protecting the website. The site is hosted on Cloudflare, which processes this data to serve pages and block attacks.	Legitimate interests (Art. 6(1)(f))	I keep no website logs myself. Cloudflare keeps technical logs under its own retention rules.
You contact me by email or LinkedIn message	Name, contact details, company, your message	Answering you and discussing a possible engagement	Steps before a contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f))	24 months after our last contact
You fill in a LinkedIn lead form, for example to get a template	Name, email, company, job title, country and your answers to the form’s questions	Sending what you asked for; follow-up emails only if you ticked the consent box	Steps you requested (Art. 6(1)(b)); consent for follow-up emails (Art. 6(1)(a))	Until you withdraw consent, or 24 months after our last contact
You book a call	Name, email, chosen time, anything you add to the booking	Arranging and holding the call	Steps before a contract (Art. 6(1)(b))	24 months after our last contact
You become a client	Contact details of your staff, contract and billing data, project information	Delivering the engagement, invoicing, keeping project records	Contract (Art. 6(1)(b)); legal obligations for accounting records (Art. 6(1)(c))	For the contract term, then as long as accounting and tax law requires

I don’t sell personal data, and I don’t use it for automated decisions or profiling that affect you.

3. Cookies and tracking

This website sets no cookies and uses no analytics, advertising or social media trackers. It loads no fonts or scripts from third parties.

LinkedIn uses its own cookies on its platform, including when you open a lead form there. See the LinkedIn Cookie Policy.

4. Who receives your data

I use these service providers:

Website hosting and email forwarding: Cloudflare, Inc., which processes data on my behalf under its data processing addendum (privacy policy)
Email mailbox: Gmail, provided by Google LLC under Google’s own terms (privacy policy)
Call scheduling: Calendly, LLC, which processes data on my behalf under its data processing addendum (privacy policy)

LinkedIn acts as a separate controller for data on its platform. When you submit a LinkedIn lead form, LinkedIn shares your answers with me. LinkedIn’s own use of your data is covered by the LinkedIn Privacy Policy.

I disclose data to authorities only when the law requires it.

5. Transfers outside the EU

I work from Thailand, so I access your data from outside the European Economic Area. Some of the providers above also process data outside the EEA, for example in the United States.

Where data is transferred, I rely on an EU adequacy decision where one exists (such as the EU–US Data Privacy Framework for certified US providers) or on the European Commission’s Standard Contractual Clauses. You can ask me for a copy of the safeguards used.

I also follow Thailand’s Personal Data Protection Act where it applies.

6. Your rights

Under the GDPR you can ask me to:

give you a copy of your data
correct data that is wrong
delete your data
restrict how I use it
send your data to you or another organisation in a portable format

You can object at any time to processing based on legitimate interests, and to any direct marketing. Where you gave consent, you can withdraw it at any time, for example with the unsubscribe link in each email. Withdrawal doesn’t affect processing that happened before it.

To use any of these rights, email privacy@governaince.io. I reply within one month.

You also have the right to complain to a data protection authority, in particular in the EU country where you live or work. A list is on the European Data Protection Board website.

7. How I protect your data

I limit access to the data I need, protect accounts with multi-factor authentication, use encrypted connections, and keep client files in access-controlled storage. Client project data is never used to train AI models.

8. Changes to this policy

If this policy changes, the new version will be posted here with a new date. Significant changes will be announced to people I’m in contact with.