Privacy & Data Protection
Marketing And Advertising Compliance
Business And Legal
Contact And Support
Privacy Policy
January 2023
April 2022
February 2021
June 2020
August, 2026
August, 2026
(Version 1.2)
Privacy Policy
About This Policy
This Privacy Policy outlines how GoGorilla Media and Technologies Group Ltd and its affiliates (“GoGorilla”, “we”, “our”, or “us”) collect, use, and protect personal data. We are committed to upholding the highest standards of data protection and transparency in all our operations.
Introduction
GoGorilla.com provides performance marketing services built upon a proprietary financial technology architecture. This policy applies to all individuals whose personal data we process in the course of providing our services and operating our business.
Our Role as a Data Controller and Processor
Our role under data protection law depends on the context of our relationship with you. We act as a data controller when we determine the purposes and means of processing personal data, such as when we process data for our direct clients or manage our investor relations. We act as a data processor when we process personal data on behalf of another entity, for example, when our agency partners use our platform to service their own clients.
Applicability of This Policy
This policy applies to the following categories of individuals:
Direct Clients: Businesses, including founders and their employees, who use our performance marketing and strategic advisory services directly.
Investors: Individuals and entities, such as venture capital and private equity firms, who use our investor portals or engage with our fundraising support services.
Partners: Businesses and individuals who work with us as delivery partners, as
resellers under a white-label arrangement, or as referrers. This includes independent
specialists and small agencies. Not every partner resells.
Website Visitors: Individuals who browse our website (gogorilla.com) or otherwise interact with us online.
Applicants and Prospective Partners: People and businesses who apply to work with
us, and those we contact about becoming a partner. This includes anyone who starts
an application and does not finish it.
Personal Data We Collect
We collect personal data necessary to provide our services and operate our business. The table below lists the data categories we collect for each user group.
User Group
Data Category
Examples of Data Collected
Direct Clients
Account & Profile Data
Name, business email, phone number, job title, company details, login credentials.
Financial & Transaction Data
Payment card details, bank account information, transaction history.
Marketing & Communications Data
Marketing preferences, communication records, campaign performance data.
Investors
Investor Portal Data
Name, email address, investment entity details, accreditation status, deal flow data.
Fundraising Support Data
Pitch decks, financial statements, and other business information shared for fundraising purposes.
Agency Partners
Reseller Account Data
Agency name, contact person details, client list (as processed on their behalf).
White-Label Branding Data
Logos and branding assets for customising the platform.
All Users
Technical & Usage Data
IP address, browser type, device information, platform usage analytics, log files.
Legal & Compliance Data
Data required for regulatory reporting, audit records, and data subject rights requests.
Applicants and Prospective Partners
Application Data
Name, email address, mobile or WhatsApp number, preferred contact
channel, specialism and services offered, sectors served, approximate day rate, number of active retainer clients, current business situation, and anything else you choose to tell us in your application.
Sourced Contact Data
Business contact details and public professional profile information obtained from publicly accessible sources and from professional or
freelance platforms.
Communications Data
Records of our correspondence with you, including messages we send, your replies, and notes from calls.
Incomplete applications
If you begin an application and do not finish it, we may still keep the answers you gave up to the point you stopped, including your contact details, where you have already agreed to us contacting you about it. We use this only to follow up on that application, and you can ask us to delete it at any time.
How and Why We Use Personal Data
We process personal data for specific, explicit, and legitimate purposes. Every use of data is designed to deliver our services effectively and enhance your experience.
Purpose of Processing
Description
Data Categories Used
Service Delivery
To provide and manage access to our marketing platform, dashboards, and related services.
Account & Profile, Financial & Transaction, Technical & Usage
Financial Service Facilitation
To connect clients with regulated financial services through our authorised third-party partners.
Financial & Transaction, Account & Profile
Performance Analytics
To generate insights that optimise marketing campaign performance and service delivery.
Marketing & Communications, Technical & Usage
Investor Relations
To manage our investor portals, facilitate deal flow, and support fundraising activities.
Investor Portal, Fundraising Support
Customer Support
To provide responsive and helpful support for any service-related inquiries.
Account & Profile, Technical & Usage
Security & Fraud Prevention
To protect accounts and data from unauthorised access and fraudulent activities.
All categories
Legal & Regulatory Compliance
To meet our legal obligations, including regulatory reporting and responding to legal requests.
Legal & Compliance
Partner Recruitment and Onboarding
To assess whether we can offer you paid work or a partnership, to verify and vet applicants, to communicate with you about your application, and to onboard partners who join us.
Application, Sourced
Contact, Communications.
Partner Communications and Community
To contact partners and applicants on the channel they have chosen, including email, telephone and WhatsApp, and to run our partner community groups.
Data used: Application, Communications.
Where We Obtain Your Data
Most of the information we hold about partners and applicants comes directly from them. Where we contact you before you have given us your details, we will have obtained your business contact information from publicly accessible sources and professional platforms. These may include your own website, Companies House, professional networking sites, and freelance or agency marketplaces. We will tell you where we obtained your details when we first contact you, and you can object to our use of them at any time by replying to us or writing to privacy@gogorilla.com.
Our Legal Bases for Processing
We rely on the following legal bases under the UK General Data Protection Regulation (UK GDPR) to process personal data:
Legal Basis
When It Applies
Contract Performance
When processing is necessary to fulfil our contractual obligations to you.
Legitimate Interests
When we have a legitimate business reason to process your data, which does not override your rights and interests.
Legal Obligation
When we are required by law to process your data.
Consent
When you have given us specific, informed, and unambiguous consent to process your data.
How these apply to partners and applicants. Where you give us your details through an application form and agree to us contacting you, we rely on your consent, and you can withdraw it at any time. Where we contact a business about becoming a partner before it has given us its details, we rely on our legitimate interests in building the delivery
network our clients depend on, balanced against the recipient's own rights and interests. We keep a written assessment of that balance and will provide a summary on request.
Data Sharing And Disclosures
We do not sell personal data. We only share data when necessary to provide our services or when required by law.
Strategic Service Partners: We share data with regulated partners, such as Stripe, to provide secure and compliant payment processing.
Technology Service Providers: We engage providers for services like cloud hosting, data analytics, and security monitoring. All are bound by strict data processing agreements.
Legal and Regulatory Authorities: We may disclose data to law enforcement, regulators, or legal advisors to comply with legal obligations or protect our legitimate interests.
Operational Service Providers: We use third-party tools to run our application, communication and scheduling processes. These include form and survey platforms, database and workflow tools, messaging and telephony providers, and calendar and scheduling services. All are bound by data processing agreements.
International Data Transfers
To deliver our services, we may transfer your personal data outside the United Kingdom (UK). When we do, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements. This may include adequacy decisions or Standard Contractual Clauses.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.
Applicants and prospective partners. Where an application does not lead to a partnership, we keep your application and our correspondence for 12 months from our last contact with you, so that we can consider you for suitable opportunities during that time. After that we delete or anonymise it. You can ask us to delete it sooner at any time.
Your Data Protection Rights
Under UK data protection law, you have several rights concerning your personal data. These include:
The right to be informed: You have the right to be informed about the collection and use of your personal data.
The right of access: You have the right to access your personal data.
The right to rectification: You have the right to have inaccurate personal data rectified or completed if it is incomplete.
The right to erasure: You have the right to have your personal data erased.
The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
The right to object: You have the right to object to the processing of your personal data in certain circumstances.
Rights in relation to automated decision making and profiling: You have rights regarding automated individual decision-making and profiling.
To exercise any of these rights, please contact our Data Protection Officer at privacy@gogorilla.com.
Automated Decision-Making and Profiling
We use our proprietary GorillaMatrix® platform to analyse marketing performance and provide strategic recommendations. This involves automated processing and profiling to generate insights. However, these processes do not result in legal or similarly significant effects on individuals. You have the right to obtain human intervention, express your point of view, and contest decisions based on automated processing.
Data Security
We have implemented robust technical and organisational measures to protect your personal data from unauthorised access, use, or disclosure. These measures include data encryption, access controls, secure transmission protocols, and regular security assessments.
Cookie Policy
We use cookies and similar technologies to operate and improve our website. For more detailed information, please see our separate Cookie Policy.
Our Position on Financial Regulation
GoGorilla Media and Technologies Group Ltd is not a bank or a financial institution and is not regulated by the Financial Conduct Authority (FCA). Any financial services or products mentioned, such as those related to GorillaCapital, are provided by appropriately regulated third-party partners. We act solely as a facilitator in these arrangements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date.
How to Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us:
Data Protection Officer: privacy@gogorilla.com
General Inquiries: info@gogorilla.com
How to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues. You can find their contact details at www.ico.org.uk.
This Privacy Policy forms part of GoGorilla's commitment to transparency and data protection.
Last Updated: December 2025
Version: 1.1
Growth Services
Creative Services
Solutions
Company
Phone
info@gogorilla.com
United Kingdom
Copyright 2026 © GoGorilla Media and Technologies Group Ltd | Reg. UK Co. 15885866 | VAT No. GB 474 2616 82 | Reg. Office: Office 3, Fairbank Studios, 75-81 Burnaby Street, Chelsea, London, SW10 0NS
Website designed with ♡ by our in-house design and engineering team
Pricing
Growth Services
Creative Services
Talent & Agency Solutions
FinTech Platform
Solutions
Capital
Company
United Kingdom
Copyright 2026 © GoGorilla Media and Technologies Group Ltd | Reg. UK Co. 15885866 | VAT No. GB 474 2616 82 | Reg. Office: Office 3, Fairbank Studios, 75-81 Burnaby Street, Chelsea, London, SW10 0NS
Website designed with ♡ by our in-house design and engineering team
Phone
info@gogorilla.com
Growth Services
Creative Services
Solutions
Company
Phone
info@gogorilla.com
United Kingdom
Copyright 2026 © GoGorilla Media and Technologies Group Ltd | Reg. UK Co. 15885866 | VAT No. GB 474 2616 82 | Reg. Office: Office 3, Fairbank Studios, 75-81 Burnaby Street, Chelsea, London, SW10 0NS
Website designed with ♡ by our in-house design and engineering team
Growth Services
Creative Services
Company
Phone
info@gogorilla.com
United Kingdom
Copyright 2026 © GoGorilla Media and Technologies Group Ltd | Reg. UK Co. 15885866 | VAT No. GB 474 2616 82 | Reg. Office: Office 3, Fairbank Studios, 75-81 Burnaby Street, Chelsea, London, SW10 0NS
Website designed with ♡ by our in-house design and engineering team
Pricing
Growth Services
Creative Services
Talent & Agency Solutions
FinTech Platform
Solutions
Capital
Company
Phone
info@gogorilla.com
United Kingdom
Copyright 2026 © GoGorilla Media and Technologies Group Ltd | Reg. UK Co. 15885866 | VAT No. GB 474 2616 82 | Reg. Office: Office 3, Fairbank Studios, 75-81 Burnaby Street, Chelsea, London, SW10 0NS
Website designed with ♡ by our in-house design and engineering team
Privacy & Data Protection
Marketing And Advertising Compliance
Business And Legal
Contact And Support
Privacy Policy
January 2023
April 2022
February 2021
June 2020
January 2026
January 2026
(Version 1.1)
About This Policy
This Privacy Policy outlines how GoGorilla Media and Technologies Group Ltd and its affiliates (“GoGorilla”, “we”, “our”, or “us”) collect, use, and protect personal data. We are committed to upholding the highest standards of data protection and transparency in all our operations.
Introduction
GoGorilla.com provides performance marketing services built upon a proprietary financial technology architecture. This policy applies to all individuals whose personal data we process in the course of providing our services and operating our business.
Our Role as a Data Controller and Processor
Our role under data protection law depends on the context of our relationship with you. We act as a data controller when we determine the purposes and means of processing personal data, such as when we process data for our direct clients or manage our investor relations. We act as a data processor when we process personal data on behalf of another entity, for example, when our agency partners use our platform to service their own clients.
Applicability of This Policy
This policy applies to the following categories of individuals:
Direct Clients: Businesses, including founders and their employees, who use our performance marketing and strategic advisory services directly.
Investors: Individuals and entities, such as venture capital and private equity firms, who use our investor portals or engage with our fundraising support services.
Agency Partners: Agencies and freelancers who resell our services to their own clients under a white-label arrangement.
Website Visitors: Individuals who browse our website (gogorilla.com) or otherwise interact with us online.
Personal Data We Collect
We collect personal data necessary to provide our services and operate our business. The table below lists the data categories we collect for each user group.
User Group
Data Category
Examples of Data Collected
Direct Clients
Account & Profile Data
Name, business email, phone number, job title, company details, login credentials.
Financial & Transaction Data
Payment card details, bank account information, transaction history.
Marketing & Communications Data
Marketing preferences, communication records, campaign performance data.
Investors
Investor Portal Data
Name, email address, investment entity details, accreditation status, deal flow data.
Fundraising Support Data
Pitch decks, financial statements, and other business information shared for fundraising purposes.
Agency Partners
Reseller Account Data
Agency name, contact person details, client list (as processed on their behalf).
White-Label Branding Data
Logos and branding assets for customising the platform.
All Users
Technical & Usage Data
IP address, browser type, device information, platform usage analytics, log files.
Legal & Compliance Data
Data required for regulatory reporting, audit records, and data subject rights requests.
Applicants and Prospective Partners
Application Data
Name, email address, mobile or WhatsApp number, preferred contact
channel, specialism and services offered, sectors served, approximate day rate, number of active retainer clients, current business situation, and anything else you choose to tell us in your application.
Sourced Contact Data
Business contact details and public professional profile information obtained from publicly accessible sources and from professional or
freelance platforms.
Communications Data
Records of our correspondence with you, including messages we send, your replies, and notes from calls.
Incomplete applications
If you begin an application and do not finish it, we may still keep the answers you gave up to the point you stopped, including your contact details, where you have already agreed to us contacting you about it. We use this only to follow up on that application, and you can ask us to delete it at any time.
How and Why We Use Personal Data
We process personal data for specific, explicit, and legitimate purposes. Every use of data is designed to deliver our services effectively and enhance your experience.
Purpose of Processing
Description
Data Categories Used
Service Delivery
To provide and manage access to our marketing platform, dashboards, and related services.
Account & Profile, Financial & Transaction, Technical & Usage
Financial Service Facilitation
To connect clients with regulated financial services through our authorised third-party partners.
Financial & Transaction, Account & Profile
Performance Analytics
To generate insights that optimise marketing campaign performance and service delivery.
Marketing & Communications, Technical & Usage
Investor Relations
To manage our investor portals, facilitate deal flow, and support fundraising activities.
Investor Portal, Fundraising Support
Customer Support
To provide responsive and helpful support for any service-related inquiries.
Account & Profile, Technical & Usage
Security & Fraud Prevention
To protect accounts and data from unauthorised access and fraudulent activities.
All categories
Legal & Regulatory Compliance
To meet our legal obligations, including regulatory reporting and responding to legal requests.
Legal & Compliance
Our Legal Bases for Processing
We rely on the following legal bases under the UK General Data Protection Regulation (UK GDPR) to process personal data:
Legal Basis
When It Applies
Contract Performance
When processing is necessary to fulfil our contractual obligations to you.
Legitimate Interests
When we have a legitimate business reason to process your data, which does not override your rights and interests.
Legal Obligation
When we are required by law to process your data.
Consent
When you have given us specific, informed, and unambiguous consent to process your data.
Data Sharing And Disclosures
We do not sell personal data. We only share data when necessary to provide our services or when required by law.
Strategic Service Partners: We share data with regulated partners, such as Stripe, to provide secure and compliant payment processing.
Technology Service Providers: We engage providers for services like cloud hosting, data analytics, and security monitoring. All are bound by strict data processing agreements.
Legal and Regulatory Authorities: We may disclose data to law enforcement, regulators, or legal advisors to comply with legal obligations or protect our legitimate interests.
International Data Transfers
To deliver our services, we may transfer your personal data outside the United Kingdom (UK). When we do, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements. This may include adequacy decisions or Standard Contractual Clauses.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.
Your Data Protection Rights
Under UK data protection law, you have several rights concerning your personal data. These include:
The right to be informed: You have the right to be informed about the collection and use of your personal data.
The right of access: You have the right to access your personal data.
The right to rectification: You have the right to have inaccurate personal data rectified or completed if it is incomplete.
The right to erasure: You have the right to have your personal data erased.
The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
The right to object: You have the right to object to the processing of your personal data in certain circumstances.
Rights in relation to automated decision making and profiling: You have rights regarding automated individual decision-making and profiling.
To exercise any of these rights, please contact our Data Protection Officer at privacy@gogorilla.com.
Automated Decision-Making and Profiling
We use our proprietary GorillaMatrix® platform to analyse marketing performance and provide strategic recommendations. This involves automated processing and profiling to generate insights. However, these processes do not result in legal or similarly significant effects on individuals. You have the right to obtain human intervention, express your point of view, and contest decisions based on automated processing.
Data Security
We have implemented robust technical and organisational measures to protect your personal data from unauthorised access, use, or disclosure. These measures include data encryption, access controls, secure transmission protocols, and regular security assessments.
Cookie Policy
We use cookies and similar technologies to operate and improve our website. For more detailed information, please see our separate Cookie Policy.
Our Position on Financial Regulation
GoGorilla Media and Technologies Group Ltd is not a bank or a financial institution and is not regulated by the Financial Conduct Authority (FCA). Any financial services or products mentioned, such as those related to GorillaCapital, are provided by appropriately regulated third-party partners. We act solely as a facilitator in these arrangements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date.
How to Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us:
Data Protection Officer: privacy@gogorilla.com
General Inquiries: info@gogorilla.com
How to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues. You can find their contact details at www.ico.org.uk.
This Privacy Policy forms part of GoGorilla's commitment to transparency and data protection.
Last Updated: December 2025
Version: 1.1