Privacy Policy

Last updated: March 2026

Who we are

Govena is an Australian business that provides AI governance documentation services for small and medium-sized enterprises. We operate at govena.com.au. For privacy-related enquiries, contact us at Email us →.

This Privacy Policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What information we collect

We collect the following types of information:

Information you provide

• Business information — your business name, industry, team size, and a description of the AI tools your business uses. This is collected through our intake assessment questionnaire.
• Contact information — your name and email address, collected when you purchase a pack, submit an enquiry, or sign up for updates.
• Payment information — payment details are collected and processed by Stripe. Govena does not store your credit card information.

Information collected automatically

• Standard web server logs including IP addresses, browser type, and pages visited
• Analytics data via tools such as Google Analytics (where enabled)

We do not collect personal information about your clients, employees, or customers through our assessment questionnaire. The questionnaire asks only about your business context, not about individuals.

How we use your information

• To generate your tailored AI governance documentation pack
• To process your payment and deliver your documents
• To respond to enquiries and provide customer support
• To send you updates about regulatory changes relevant to your pack (where you have opted in)
• To improve our service and website

We will not use your information for any purpose that is incompatible with the reason it was collected without your consent.

Disclosure of your information

We do not sell, rent, or trade your personal information. We may share your information with:

• Stripe — for payment processing
• Email service providers — to deliver your documents and correspondence
• Analytics providers — in aggregated, anonymised form

Some of these providers may be located overseas. Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure it is handled in accordance with the APPs.

Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. Your documents are transmitted over encrypted connections (HTTPS). Payment processing is handled by Stripe, which is PCI DSS compliant.

Your rights

Under the Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Make a complaint about how your information has been handled

To exercise these rights, contact us at Email us →. We will respond within 30 days.

Complaints

If you believe we have mishandled your personal information, please contact us first at Email us →. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The current version will always be published at this URL with the date of last update noted above.

Contact

For any privacy-related questions: