Privacy Notice
Last updated: 29 October 2026
This notice explains how personal data is handled when you visit govaitum.com, use its restricted areas or send us an enquiry.
Who we are
Govaitum is the controller of the personal data described in this notice. You can contact us about privacy, or about any request or complaint, through the contact form on this website.
What we collect
- Enquiries. When you use the contact form, we collect your name, your firm, your email address and your message, together with the date and time of submission.
- Restricted areas. When you enter a password for a restricted area, we set a session cookie so that you are not asked for the password on every page. The password itself is never stored in the cookie. Some restricted pages also keep your selections or notes in your own browser so that the page works as you use it; this information stays on your device.
- Technical and security data. Like any website, our hosting and infrastructure providers process technical information needed to deliver pages and keep the service secure, such as your IP address, browser type, the pages requested and the time of the request.
- Fonts. The typefaces on this website are served from this website. Your browser does not contact a third-party font service to load them.
We do not ask for special category data. Please do not include it, or confidential information about your firm, in an enquiry.
Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Reading and replying to your enquiry, and keeping a record of the correspondence | Legitimate interests: responding to people and firms who contact us about our services |
| Giving authorised visitors access to restricted areas | Legitimate interests: providing secure access to material that is not public |
| Keeping the website and its systems secure, and preventing misuse and spam | Legitimate interests: ensuring the security of our network and information systems |
| Meeting legal or regulatory obligations | Legal obligation, where it applies |
You do not have to contact us, but we need the details requested in the form in order to reply. We do not use your data for marketing, and we do not sell it.
Automated decision-making
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. Simple automated checks, such as filtering obvious spam, do not produce such effects.
Who we share it with
- Service providers who host and run the website and our communications, acting on our instructions as processors under written contracts.
- Professional advisers, such as lawyers and accountants, where reasonably necessary.
- Regulators, law enforcement or other authorities, where the law requires it.
International transfers
Our service providers may process personal data outside the United Kingdom. Where they do, we make sure the transfer is protected as UK data protection law requires: either the destination is covered by UK adequacy regulations, or the transfer is made under appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information.
How long we keep it
- Enquiries: 12 months after our last contact with you. If the enquiry leads to an engagement, the relevant correspondence is kept for as long as needed for that engagement and our legal obligations.
- Session cookies: expire 12 hours after they are set.
- Technical and security logs: kept by our hosting and infrastructure providers for limited periods under their standard settings.
Security
We use appropriate technical and organisational measures to protect personal data. These include encrypted connections, signed session cookies that cannot be read by scripts on the page, and access to stored enquiries limited to the people who need it. No method of transmission over the internet is completely secure.
Your rights
Under UK data protection law you have the right to:
- access your personal data;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- object to our use of it, where we rely on legitimate interests; and
- receive your data in a portable format, where that right applies.
To exercise any of these rights, use the contact form on this website. We will respond within one month, which may be extended where the law allows. These rights are subject to some legal conditions and exceptions.
Cookies and similar technologies
This website does not use analytics, advertising or marketing cookies, and we do not track you across other websites.
| Name | Purpose | Duration |
|---|---|---|
Cookies starting with gv_ |
Keep you signed in to a restricted area after you enter its password | 12 hours |
These cookies are strictly necessary to provide the restricted areas you ask to use, so they do not require your consent under the Privacy and Electronic Communications Regulations. They are set only when you enter a password.
The website also stores your choice of light or dark display in your browser's local storage, so that the site appears the way you prefer. It contains no personal details and is not sent to us. You can remove it, and any cookies, at any time by clearing this website's data in your browser settings; the site will still work, using the default display.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first through the contact form on this website. We will acknowledge your complaint within 30 days, look into it, keep you informed and tell you the outcome.
You also have the right to complain to the UK data protection regulator, the Information Commission (known as the ICO): ico.org.uk/make-a-complaint
Changes to this notice
We may update this notice from time to time. The current version will always be on this page, with the date it was last updated.