Govar's Privacy Policy


Updated: February 15th, 2026

This Privacy Policy explains how Govar Inc (“Govar”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you use govar.com and related services (the “Services”).

If you have questions, contact support (@)govar.com.


1. Who is responsible for your data

Data controller: Govar Inc
Registered address: 131 Continental Dr Suite 305 Newark, DE, 19713 US
Email: support (@)govar.com.

Where we act as a “processor” on behalf of a business customer (for example, an employer using Govar for employees), that business is the controller and we process data under its instructions.


2. What data we collect

We collect personal data you provide, data generated through your use of the Services, and data from third parties where permitted.


2.1 Data you provide

This may include:

  • Account data: name, email, phone number, password, organisation, role.
  • Profile and immigration data: nationality, residency, travel history, immigration history, education, employment history, qualifications, family details (where relevant), and other information you submit in forms.
  • Documents and uploads: passports, visas, BRPs, bank statements, employment letters, certificates, reference letters, application drafts, supporting evidence, and related files.
  • Communications: messages you send to support, your case manager, or Professionals through the platform, including attachments.
  • Payment data: billing address, purchase history, and partial payment details. Card details are handled by our payment processor and are not stored by Govar.


2.2 Data we collect automatically

This may include:

  • Device and usage data: IP address, browser type, device identifiers, pages viewed, actions taken, timestamps, referral URLs, crash logs, and performance metrics.
  • Log and security data: authentication logs, fraud signals, and audit events.


2.3 Data from third parties

Where you choose to connect or where permitted by law, we may receive:

  • Professional data: notes, status updates, or documents from independent lawyers and advisers you engage.
  • Employer or sponsor data: where a business customer provides your information to manage a case.
  • Service providers: identity verification, analytics, and communication providers.
  • Public sources: information you ask us to use, such as public professional profiles or publications.


3. How we use your data

We use personal data to provide, operate, and improve the Services, including to:

  • Create and manage accounts.
  • Run eligibility checks and guided intake flows.
  • Organise documents and generate drafts or checklists you request.
  • Match you with independent lawyers and advisers, and enable collaboration.
  • Provide customer support and operational communications.
  • Process payments and maintain billing records.
  • Prevent fraud, abuse, and security incidents.
  • Monitor and improve product performance and user experience.
  • Comply with legal obligations and enforce our terms.


4. Legal bases for processing (UK GDPR and EU GDPR)

Where applicable, we process personal data under these legal bases:

  • Contract: to provide the Services you request.
  • Legitimate interests: to secure, improve, and operate the Services, and prevent fraud. We balance these interests against your rights.
  • Consent: where required (for example, certain marketing or cookies). You can withdraw consent at any time.
  • Legal obligation: to comply with laws and regulations (for example, tax and accounting).
  • Vital interests: in rare cases, to protect someone’s life.


5. Sensitive data and immigration documents

Immigration matters often involve special category data and highly sensitive documents.

We process such data only when:

  • You provide it for a specific purpose (for example, eligibility or case preparation), and
  • A lawful basis applies (for example, explicit consent where required, or where processing is necessary for legal claims or advice via a Professional, depending on jurisdiction).

You should avoid uploading sensitive data that is not necessary for your case.


6. How we share your data

We do not sell your personal data. We share it only as described below.


6.1 With independent lawyers and advisers (Professionals)

If you choose to engage a Professional, we share relevant information and documents with them to support your case. The Professional may be an independent data controller for their own legal and compliance purposes.


6.2 With service providers (subprocessors)

We use trusted vendors to operate the Services, such as:

  • Cloud hosting and storage
  • Analytics and performance monitoring
  • Customer support tools
  • Communications providers (email, SMS)
  • Payment processors
  • Security and fraud prevention services

They may process personal data only under our instructions and appropriate contractual safeguards.


6.3 With business customers (employers)

If an employer uses Govar for your case, we may share case status, documents, and communications consistent with the employer’s configuration and your relationship with them.


6.4 For legal and compliance reasons

We may disclose personal data if we believe it is necessary to:

  • Comply with a legal obligation or lawful request.
  • Protect rights, safety, and security of Govar, users, Professionals, or the public.
  • Investigate fraud, abuse, or security incidents.
  • Enforce our Terms.


6.5 Business transfers

If Govar is involved in a merger, acquisition, financing, reorganisation, or sale of assets, your data may be transferred as part of that transaction, subject to appropriate safeguards.


7. International data transfers

Your data may be processed in countries outside the UK or EEA.

Where this occurs, we use appropriate safeguards such as:

  • UK International Data Transfer Agreement or Addendum
  • EU Standard Contractual Clauses
  • Other legally recognised transfer mechanisms

8. Data retention

We keep personal data only as long as necessary for the purposes described, including:

  • Providing the Services and maintaining your account
  • Compliance with legal, accounting, and tax requirements
  • Security, dispute resolution, and enforcement

Retention periods vary by data type. You can request deletion, subject to legal and operational requirements.


9. Your rights

Depending on your location, you may have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Restrict or object to certain processing
  • Port your data
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a regulator

UK users can contact the Information Commissioner’s Office (ICO). EU users can contact their local supervisory authority.

To exercise rights, contact support@govar.com .


10. Security

We use technical and organisational measures designed to protect your data, including access controls, encryption in transit, and monitoring.

No system is completely secure. You are responsible for keeping your account credentials confidential.


11. Cookies and tracking

We use cookies and similar technologies to:

  • Keep you signed in and secure
  • Remember preferences
  • Understand usage and improve performance
  • Measure marketing effectiveness (where enabled)

Details are provided in our Cookie Policy and cookie preferences tool.


12. Marketing communications

If you opt in, we may send product updates and marketing messages. You can unsubscribe at any time using the link in the email or by contacting us.

We may still send non marketing operational messages (for example, receipts, security alerts, and case updates).


13. Children

The Services are not intended for children under 18. If you believe a child has provided personal data, contact us to remove it.


14. Automated processing and AI features

Some features may use automation or AI to summarise information, draft content, or recommend next steps.

You acknowledge:

  • Automated outputs may be inaccurate or incomplete.
  • You should review outputs before relying on them.
  • Govar does not provide legal advice and automated outputs are not a substitute for advice from an independent Professional.

Where required by law, you may have rights related to automated decision-making.


15. Third-party links

The Services may link to third-party sites (for example, government portals). Their privacy practices are governed by their own policies. We are not responsible for third-party sites.


16. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, where appropriate, provide additional notice.


17. Contact

For privacy questions or requests, contact:
support@govar.com
131 Continental Dr Suite 305 Newark, DE, 19713 US