Privacy Policy

1. SCOPE

This Privacy Policy describes how the Government Contracting Authority (GCA) collects, uses, protects, and manages personal information when you use our website at gcagov.com, mobile applications, and related services (the "Services").

We are committed to complying with all applicable privacy laws and regulations in all jurisdictions where we operate, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), state breach notification laws, and other relevant data protection legislation.

This policy was last modified in March 2026.

2. WHO WE ARE

Government Contracting Authority (GCA) is the data controller responsible for your personal information.

Principal Contact Address:

1309 Coffeen Ave, Suite 11198, Sheridan, WY 82801, USA

Contact Information:

• Email: privacy@gcagov.com
• Phone: +1 202 990 6030

3. INFORMATION WE COLLECT

Personal Information:

When you interact with our Services, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Company or organization name
• Job title or position
• Other contact details you provide

Transaction Information:

Information related to transactions you conduct through our Services, including registration details, course enrollments, purchase history, and payment information.

Usage and Technical Data:

Information about your interactions with our Services, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system
• Device identifiers
• Pages visited and time spent
• Referral sources
• Click patterns and user behavior

Location Data:

Geographic information derived from IP addresses or location services you enable.

Cookies and Tracking Technologies:

We use cookies, web beacons, pixels, and similar technologies to track your activity and improve your experience. This includes both session-based and persistent cookies.

Information from Third Parties:

We may receive information about you from third-party platforms, service providers, or public sources to enhance our Services and verify information you provide.

4. HOW WE COLLECT INFORMATION

We collect information through the following methods:

• Direct provision: Information you voluntarily provide when registering, completing forms, or contacting us
• Website and applications: Automatic data collection when you use our Services
• Cookies and tracking technologies: Persistent and session-based tracking across your browser sessions
• Third-party platforms: Integration with social media, analytics, and marketing platforms
• Public sources: Information from publicly available databases and sources
• Automated tools: Server logs, analytics, and technical monitoring

5. USE OF INFORMATION

We use the information we collect for the following purposes:

• Providing and improving our Services
• Managing customer relationships and accounts
• Processing transactions and sending related communications
• Personalizing and optimizing your experience
• Conducting analytics and research to improve our Services
• Sending marketing communications and newsletters (with your consent)
• Complying with legal obligations and regulations
• Protecting our Services from fraud, security threats, and unauthorized access
• Fulfilling your requests and responding to inquiries
• Conducting surveys and gathering feedback

6. SHARING OF INFORMATION

Service Providers:

We share personal information with third-party service providers who perform services on our behalf, including hosting providers, payment processors, analytics platforms, and customer support vendors. All service providers are contractually obligated to protect your information and use it only as necessary to provide services to us.

Legal Requirements:

We may disclose your information when required by law, regulation, court order, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or public safety.

Business Transfers:

If GCA is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

With Your Consent:

We will share your information with third parties only with your explicit consent, which we will request before any such sharing occurs.

Data Sales:

SMS and Mobile Marketing Critical Clause:

7. YOUR RIGHTS AND CHOICES

Right to Access:

You have the right to request and receive a copy of the personal information we hold about you.

Right to Correction:

You may request that we correct, update, or amend inaccurate or incomplete information.

Right to Deletion:

You may request deletion of your personal information, subject to certain legal obligations and business necessities.

Right to Data Portability:

You may request your information in a portable format that can be transferred to another service provider.

Right to Opt-Out of Marketing:

You can opt out of receiving promotional emails and marketing communications by clicking the unsubscribe link in any message or contacting us directly at privacy@gcagov.com.

Cookie Preferences:

You may control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of our Services.

Do Not Track:

Some browsers include a "Do Not Track" feature. While we honor user privacy preferences, we do not currently respond to Do Not Track signals due to lack of standardized implementation across the industry.

To exercise any of these rights, please contact us at privacy@gcagov.com or +1 202 990 6030.

8. DATA SECURITY

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All sensitive data in transit and at rest is encrypted using industry-standard encryption protocols
• Access Controls: Strict controls limit employee access to personal information to those who need it for legitimate business purposes
• Regular Security Assessments: We conduct regular security audits, penetration testing, and vulnerability assessments
• Employee Training: All employees handling personal information receive mandatory privacy and security training
• Incident Response: We maintain detailed incident response and breach notification procedures

Infrastructure:

GCA Services are hosted on secure, government-approved cloud infrastructure including Microsoft Azure Government Cloud (Azure GCC High) and Microsoft 365 GCC High, which meet or exceed federal security standards.

While we implement strong security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

9. DATA RETENTION

We retain personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention decisions are based on:

• Legal obligations and regulatory requirements
• Business necessity and contractual requirements
• The nature and sensitivity of the information
• The purposes for which we collected it

When information is no longer needed, we securely destroy or permanently delete it in accordance with our data destruction protocols.

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without parental consent, we will immediately delete such information and take appropriate steps to comply with the Children's Online Privacy Protection Act (COPPA).

If you believe we have collected information from a child under 13, please contact us immediately at privacy@gcagov.com.

11. INTERNATIONAL DATA TRANSFERS

GCA is located in the United States. Your personal information is collected, processed, and stored in the United States in accordance with U.S. law.

EU and International Transfers:

For users in the European Union, European Economic Area, or other jurisdictions with data protection requirements, we rely on Standard Contractual Clauses approved by the European Commission to provide adequate safeguards for the transfer of your information to the United States.

We have implemented appropriate administrative, technical, and physical safeguards to protect your information during international transfers.

12. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know:

You have the right to know what personal information we collect, use, and share about you.

Right to Delete:

You have the right to request deletion of the personal information we have collected from you, subject to certain exceptions.

Right to Opt-Out:

You have the right to opt out of the sale or sharing of your personal information. GCA does not sell personal information.

Right to Non-Discrimination:

We will not discriminate against you for exercising any of your rights. We will not deny services, charge different prices, or provide different quality of service based on your exercise of privacy rights.

Categories of Personal Information:

We collect the following categories of personal information as defined by the CCPA:

• Identifiers (name, email, phone, IP address)
• Commercial information (transaction history, purchase records)
• Internet or network activity (browsing history, interaction data)
• Geolocation data
• Professional information (job title, company)
• Inferences (preferences, interests derived from usage patterns)

Submitting California Privacy Requests:

To exercise any California privacy rights, please contact us at:

• Email: privacy@gcagov.com
• Phone: +1 202 990 6030

We will respond to verified requests within 45 days. You may designate an authorized agent to submit requests on your behalf.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Sending you an email notification
• Posting the updated policy on our website
• Updating the "Last Modified" date at the top of this policy

Your continued use of our Services after notification of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email:

privacy@gcagov.com

Phone:

+1 202 990 6030

Mailing Address:

Government Contracting Authority

1309 Coffeen Ave, Suite 11198

Sheridan, WY 82801

USA

Thank you for trusting Government Contracting Authority with your information.

---