Privacy Notice for Business Contacts

This notice is for people whose business contact details Government Contracting Authority LLC ("GCA", "we") collected from public sources, and not from you. It explains what we hold, where it came from, why we use it, and how you can stop it. It adds to our main GDPR Privacy Notice.

1. Who We Are

Government Contracting Authority LLC
1309 Coffeen Avenue, Suite 18254
Sheridan, WY 82801, USA

Privacy contact: privacypolicy@gcagov.com

2. What We Hold About You

Only business details:

• your name and job title
• the company you work for
• your business email address and business phone number
• the address of your public professional profile (for example LinkedIn)
• notes of our calls and emails with you

We do not collect your home address, private phone number, private email, personal social media, or any sensitive data.

3. Where It Came From

• your company's own website
• public business registers
• public contract award notices
• business data providers, such as Apollo.io
• public map and business listings, such as Google
• public professional profiles, such as LinkedIn

4. Why We Use It

GCA helps companies outside the United States compete for US Government contracts. When a US Government contract comes up near your company and matches your company's work, we may contact you to ask whether your company wants to know more.

We use your details only to contact you about that business, and to keep a record of what was said.

5. Our Legal Basis

Our legitimate interest in offering our services to companies whose work fits a US Government contract (GDPR Article 6(1)(f)). We have weighed that interest against your rights. We limit what we collect, we contact you only about business, and you can stop it at any time.

6. Who Sees It

GCA staff, and the service providers that run our systems for us:

• Cloudflare (hosting and database)
• Microsoft (email and calendar)
• Anthropic (AI used to research public sources)
• Apollo.io (business contact data)
• Google (business listings and maps)

We do not sell your details. We do not share them with other companies for their marketing.

7. Transfers Outside the EU

GCA is in the United States, so your details are held there. Where the law requires it, we rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

8. How Long We Keep It

• If our contact does not lead to working together, we delete your personal details within 90 days of finding them.
• If your company becomes a GCA member or client, we keep them for as long as we work together, as our main GDPR Privacy Notice explains.
• If you ask us to stop contacting you, we keep only your name, company and email on a do-not-contact list, so that we never contact you again.

9. Your Rights

You can ask us to:

• tell you what we hold about you, and give you a copy
• correct it
• delete it
• stop using it
• stop contacting you. We will always do this, without exception.

Write to privacypolicy@gcagov.com. We answer within one month.

You can also complain to the data protection authority in your country. In Italy that is the Garante per la protezione dei dati personali. In Germany it is the authority for your state.

10. Changes

If we change this notice, we will publish the new version here with a new date.

---