Privacy Policy

1 Who We Are

This website is owned and operated by Gookas, LLC, a computer systems design and integration firm registered in the United States. The website and associated digital services were developed by Transport Route. Throughout this policy, the terms we, us, and our refer to Gookas, LLC.

2 Information We Collect

We collect information that you voluntarily provide when interacting with our website, submitting forms, or communicating with us directly. The categories of personal information we may collect include:

• Contact Information — Your name, email address, phone number, job title, and company name when you fill out our contact form or request information about our services.
• Communication Records — The content of messages, emails, and other correspondence you send to us, including attachments and metadata such as timestamps and sender details.
• Technical Data — Internet Protocol (IP) addresses, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and other diagnostic data automatically collected via standard web server logging.
• Service Inquiry Data — Details about your project requirements, infrastructure needs, timelines, and any technical specifications you share during consultations or discovery calls.
• Cookie Data — Small text files placed on your device to support website functionality. We use only strictly necessary cookies for session management. We do not deploy advertising, tracking, or third-party analytics cookies.

3 How We Use Your Information

Gookas, LLC uses the information we collect for legitimate business purposes directly related to providing and improving our computer systems design and integration services. These purposes include:

• Responding to your inquiries, service requests, and support tickets in a timely and professional manner.
• Delivering the services you have requested, including producing system architecture proposals, integration plans, and technical assessments tailored to your requirements.
• Communicating important updates about our services, scheduled maintenance, billing matters, or changes to policies and terms.
• Improving our website and service offerings based on aggregated usage patterns and user feedback.
• Maintaining the security and integrity of our systems by detecting, preventing, and responding to fraudulent, unauthorized, or malicious activity.
• Complying with applicable legal obligations, court orders, regulatory requirements, and law enforcement requests where required by law.
• Protecting the rights, property, and safety of Gookas, LLC, our clients, our employees, and the public.

We do not use your personal information for automated decision-making or profiling that produces legal effects or similarly significant consequences.

4 Legal Basis for Processing

For individuals located in the European Economic Area (EEA), the United Kingdom, Switzerland, or other jurisdictions requiring a lawful basis for processing, we rely on the following legal grounds:

• Contractual Necessity — Processing is required to enter into or perform a contract with you, such as delivering services you have requested or providing a proposal at your direction.
• Legitimate Interests — Processing is necessary for our legitimate business interests, including responding to inquiries, improving our services, ensuring network and information security, and preventing fraud — provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation — Processing is required to comply with applicable laws, regulations, court orders, or other legal processes to which Gookas, LLC is subject.
• Consent — In specific circumstances where neither contractual necessity nor legitimate interest applies, we will obtain your explicit, informed consent before processing your personal data. You may withdraw consent at any time by contacting us.

5 Data Sharing and Disclosure

Gookas, LLC does not sell, rent, lease, or trade your personal information to third parties for their own marketing or commercial purposes. We may share your information only in the following limited circumstances:

• Service Providers — We engage trusted third-party vendors to perform functions on our behalf, such as hosting our website, processing email communications, and managing our IT infrastructure. These providers are contractually bound to process data only per our documented instructions and to maintain confidentiality and security equivalent to our own standards.
• Legal Compliance — We may disclose information when required by law, regulation, subpoena, court order, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers — In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be among the transferred assets. You will be notified via prominent notice on our website of any change in ownership or control of your personal data.
• With Your Consent — We may share your information for any other purpose with your explicit, documented authorization.

6 Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required to satisfy legal, accounting, contractual, or reporting obligations. Retention periods are determined by the following criteria:

• Active Engagement — Information related to active client relationships, ongoing projects, or open inquiries is retained for the duration of the engagement plus an additional three years after conclusion for follow-up and warranty purposes.
• Inquiries Without Engagement — Contact form submissions and email inquiries that do not lead to a business relationship are retained for a maximum of twenty-four months before being anonymized or deleted.
• Server Logs — Technical data such as IP addresses and access logs are retained for a rolling ninety-day period for security monitoring and then permanently purged.
• Legal Holds — Where litigation, regulatory investigation, or audit requirements apply, relevant records will be preserved beyond standard retention periods until the matter is definitively resolved.

Upon expiration of the applicable retention period, personal data is securely deleted, destroyed, or anonymized using industry-standard methods that prevent reconstruction.

7 Data Security

Protecting your personal information is fundamental to how we operate. We implement and maintain administrative, technical, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption — All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS) 1.3 with strong cipher suites. Data at rest is encrypted using AES-256 encryption.
• Access Controls — Personal data is accessible only to authorized personnel on a strict need-to-know basis. Access is governed by role-based permissions, multi-factor authentication, and regular access reviews.
• Network Security — Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), and continuous security monitoring with real-time alerting.
• Incident Response — We maintain a documented incident response plan that includes procedures for containment, investigation, notification, and remediation in the event of a data breach. Affected individuals and relevant authorities will be notified in accordance with applicable breach notification laws.
• Regular Audits — Our security controls undergo periodic independent assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses before they can be exploited.

8 Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information. Gookas, LLC will respond to verified requests within the timeframes required by applicable law:

• Right to Access — You may request a copy of the personal data we hold about you, along with information about how we process it.
• Right to Rectification — You may request correction of inaccurate or incomplete personal data we hold about you.
• Right to Erasure — You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing — You may request that we limit the processing of your personal data in specific situations, such as while we verify the accuracy of contested data.
• Right to Data Portability — You may request a copy of your personal data in a structured, commonly used, machine-readable format, and have it transmitted directly to another controller where technically feasible.
• Right to Object — You may object to processing based on legitimate interests or for direct marketing purposes. We do not engage in direct marketing, but you retain this right nonetheless.
• Right to Withdraw Consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Non-Discrimination — Exercising your privacy rights will not result in denial of services, different pricing, or degraded quality of service from Gookas, LLC.

To exercise any of these rights, please contact us using the details provided in Section 1 of this policy. We may request verification of your identity before processing your request to prevent unauthorized access to personal data.

9 International Data Transfers

Gookas, LLC is headquartered in the United States, and your personal data is processed and stored on servers located within the United States. If you access our website or services from outside the United States, your information may be transferred to, and processed in, a jurisdiction that may have data protection laws different from those in your country of residence.

When transferring personal data across international borders, we implement appropriate safeguards in accordance with applicable data protection laws. These safeguards may include Standard Contractual Clauses approved by the European Commission, binding corporate rules, or reliance on adequacy decisions where applicable. By using our website or services, you acknowledge that your information will be processed in the United States as described in this policy.

10 Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 18. If we become aware that we have collected personal data from a minor without verified parental consent, we will take immediate steps to delete that information from our records. If you believe that a minor has provided us with personal information, please contact us immediately.

11 Third-Party Links

Our website may contain links to external websites, services, or resources that are not owned, operated, or controlled by Gookas, LLC. This privacy policy applies solely to information collected through our website and our direct services. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of every website you visit before providing any personal information.

12 Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our data practices, legal obligations, or service offerings. When we make material changes, we will post a prominent notice on our website at least thirty calendar days before the changes take effect and update the effective date at the top of this page. For non-material changes, we will update the policy and revise the effective date without separate notification.

We encourage you to review this privacy policy regularly. Your continued use of our website and services after any modification constitutes your acknowledgment and acceptance of the updated policy. If you disagree with any changes, you should discontinue use of our website and services and, where applicable, request deletion of your personal data in accordance with Section 8 of this policy.

13 Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please reach out to us through any of the following channels. We take every privacy inquiry seriously and will respond thoroughly within thirty calendar days:

• Email: gookas.dev@gookas.mom (preferred — fastest response)
• Postal Mail: Gookas, LLC, 7760 S Plum Creek Ln, Cottonwood Heights, UT 84093-6268, United States
• Phone: +1 (769) 759-3163 (Monday through Friday, 9:00 AM to 6:00 PM Mountain Time)
• Website: www.gookas.mom (via the contact form on our Contact page)

If you are located in the EEA, UK, or Switzerland and believe that we have not adequately resolved your privacy concern, you have the right to lodge a complaint with the supervisory authority in your country of residence. We would, however, appreciate the opportunity to address your concern directly before you escalate to a regulatory body.