Privacy & Data Protection
Marketing And Advertising Compliance
Business And Legal
Contact And Support
Your Rights
December 2025
December 2025
(Version 1.1)
Your rights
Client Data Rights and Control Framework
GoGorilla Media and Technologies Group Ltd provides a comprehensive framework for clients to exercise full control over their personal data. This commitment to transparency and client empowerment is a core component of the value delivered through the world’s first performance marketing platform built on a FinTech platform. The rights afforded under the UK General Data Protection Regulation (UK GDPR) are not merely a matter of legal compliance but a fundamental part of our client-centric model.
This document outlines the specific rights available to all clients and the clear, structured procedures for exercising them.
Data Subject Rights Overview
The UK GDPR establishes a suite of rights designed to provide individuals with robust oversight and control of their personal data. GoGorilla has implemented a clear and accessible process for exercising each of these rights.
Right
Description
How to Exercise
Timeframe
Right of Access (Article 15)
The right to obtain copies of personal data and receive information on how it is processed.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Right to Rectification (Article 16)
The right to correct inaccurate or incomplete personal data.
Update via your account dashboard or email privacy@gogorilla.com
Without undue delay
Right to Erasure (Article 17)
The right to request the deletion of personal data under specific circumstances.
Submit a written request with justification to privacy@gogorilla.com
1 month from receipt
Right to Restrict Processing (Article 18)
The right to limit the processing of personal data in specific situations.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Right to Data Portability (Article 20)
The right to receive personal data in a machine-readable format or have it transferred to another controller.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Right to Object (Article 21)
The right to object to processing based on legitimate interests or for direct marketing.
Submit a written request to privacy@gogorilla.com
Immediate for marketing, 1 month for other objections
Rights Related to Automated Decision-Making (Article 22)
The right not to be subject to decisions based solely on automated processing.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Detailed Explanation of Data Rights
A detailed explanation of each right is provided below to ensure full transparency.
2.1. Right of Access (Article 15) This right enables clients to request confirmation of whether their personal data is being processed and to receive copies of that data, alongside supplementary information regarding its use.
2.2. Right to Rectification (Article 16) Clients have the right to request the correction of any inaccurate or incomplete personal data held by the Company.
2.3. Right to Erasure (Article 17) Also known as the ‘right to be forgotten’, this allows clients to request the deletion of their personal data where it is no longer necessary for its original purpose, where consent is withdrawn, or where there is no overriding legitimate interest to continue processing.
2.4. Right to Restrict Processing (Article 18) This right permits clients to request a limitation on the processing of their data, for example, whilst the accuracy of the data is being contested or if the processing is unlawful.
2.5. Right to Data Portability (Article 20) Clients may request their personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) for transfer to another service provider, where processing is based on consent or contract and is automated.
2.6. Right to Object (Article 21) Clients have the right to object to the processing of their personal data based on legitimate interests or for direct marketing purposes. All direct marketing will cease immediately upon objection.
This provides the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. Clients may request human intervention in such cases.
3. PROCEDURE FOR EXERCISING RIGHTS
A formal and secure process is in place for handling all data rights requests.
Submission of Request: All requests should be submitted in writing to privacy@gogorilla.com with the subject line “Data Rights Request” to ensure efficient processing.
Identity Verification: To protect client data, identity verification will be required before processing a request. This may involve confirming account details or providing a copy of an identification document.
Response: A response will be provided within one month of receipt. This may be extended to three months for complex requests, in which case the client will be informed of the extension.
Cost: All data rights requests are processed free of charge. A reasonable fee may be applied only for requests that are manifestly unfounded or excessive.
Right of Access (Article 15)
What it means: You can ask us to confirm whether we're processing your personal data and get copies of that data, plus information about how we're using it.
When to use it: When you want to see what data we have about you or understand how we're using it.
What you'll get:
Confirmation of whether we're processing your data
Copies of your personal data
Information about why we're processing it
Details about who we share it with
How long we'll keep it
Information about your other rights
Right to Rectification (Article 16)
What it means: You can ask us to correct any inaccurate or incomplete personal data.
When to use it: When you notice your information is wrong or incomplete.
How it works:
Contact us with the correct information
We'll investigate and make corrections promptly
If we've shared the incorrect data with others, we'll tell them about the correction too
Right to Erasure or Right to be Forgotten (Article 17)
What it means: You can ask us to delete your personal data in certain circumstances.
When you can use it:
The data is no longer needed for the original purpose
You withdraw consent and there's no other legal reason for us to keep it
You object to processing and we don't have overriding legitimate grounds
The data has been processed unlawfully
Deletion is required for legal compliance
Important note: This right isn't absolute! We might need to keep some data for legal
reasons or legitimate business purposes.
Right to Restrict Processing (Article 18)
What it means: You can ask us to limit how we use your data in certain situations.
When you can use it:
You're challenging the accuracy of the data
The processing is unlawful but you don't want the data deleted
We no longer need the data but you need it for legal claims
You've objected to processing and we're checking if our legitimate grounds override yours
Right to Data Portability (Article 20)
What it means: You can get your personal data in a structured, machine-readable format and transfer it to another service.
When you can use it:
The processing is based on your consent or a contract
The processing is automated
What you'll get:
Your data in a commonly used electronic format (like CSV or JSON)
Direct transfer to another controller if technically possible
Right to Object (Article 21)
What it means: You can object to processing based on legitimate interests or for direct marketing.
Two types of objection:
General Objection:
You can object to processing based on legitimate interests
We'll stop unless we have compelling legitimate grounds that override your interests
Marketing Objection:
You can object to direct marketing at any time
We'll stop immediately - no questions asked
This includes profiling for marketing purposes
Rights Related to Automated Decision-Making (Article 22)
What it means: You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
When it applies:
Decisions made entirely by computer algorithms
Decisions that have legal effects or significantly affect you
Your rights:
Request human intervention in the decision-making process
Express your point of view
Contest the decision
How To Exercise Your Rights
Here are the steps and requirements when exercising your rights:
1. Contact Us
Contact Methods
Email: privacy@gogorilla.com
Subject Line: Include "Data Rights Request" for faster processing
Account Dashboard: Some rights can be exercised directly through your account
2. Provide Information
What to Include in Your Request
• Your full name and contact details
• Clear description of which right you want to exercise
• Specific details about your request
• Any supporting information that might help us process your request
3. Identity Verification
To protect your privacy, we may ask you to verify your identity before processing your request. This might include:
• Confirming details from your account
• Providing a copy of ID (we'll only use this for verification)
• Answering security questions
4. Response Time
Standard Response: We’ll respond within 1 month from receiving your request
Complex Requests: We may take up to 3 months to respond (we'll let you know if this applies)
Marketing Objections: Immediate. We'll stop right away
5. Cost
Free: All rights requests are processed free of charge
Exceptions: We may charge a reasonable fee for manifestly unfounded or excessive requests
Important Limitations
Here are the steps and requirements when exercising your rights:
When Rights Maybe Limited
While these rights are powerful, they're not absolute. We might not be able to fulfill your request if:
• Legal Obligations: We're required by law to keep processing your data
• Legal Claims: The processing is necessary for legal claims
• Public Interest: The processing is necessary for public interest reasons
• Others' Rights: Fulfilling your request would adversely affect other people's rights
Balancing Rights and Interests
When we receive a request, we carefully balance:
• Your fundamental rights and freedoms
• Our legitimate business interests
• Legal and regulatory obligations
• Rights and interests of other individuals
• Public interest considerations
We'll always explain our decision and provide information about your right to complain to the ICO.
Important Limitations
If you're not satisfied with how we've handled your request, you can:
Contact us first: Let us try to resolve the issue
Contact the ICO: You have the right to expedite and complain to the Information Commissioner's Office when we can’t resolve the issue within the given time.
Privacy Questions
Email:
privacy@gogorilla.com
Response Time:
Within 48 hours
For:
General questions about your rights or our privacy practices
Data Protection Officer
Email:
privacy@gogorilla.com
For:
Formal rights requests, privacy concerns, complaints
UK Supervisory Authority
ICO (Information Commissioner's Office)
Email:
support@gogorilla.com
Phone:
0303 123 1113
Address:
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Quick Examples
Here are some quick examples on how you can exercise your rights:
Want to see your data?
"Hi, I'd like to exercise my right of access. Please send me copies of all personal data you hold about me."
Need to correct something?
"Hi, my email address in your system is wrong. It should be newemail@example.com instead of oldemail@example.com."
Don't want marketing emails?
"Hi, I object to receiving marketing emails. Please remove me from all marketing communications."
Want to delete your account?
"Hi, I'd like to exercise my right to erasure. Please delete all my personal data as I no longer use your services."
Your rights are important to us. We're committed to making it easy for you to exercise them and maintain control over your personal data. After all, your success is our success, and that includes respecting your privacy choices.
Last Updated: December 2025
Version: 1.1
Growth Services
Creative Services
Solutions
Company
Phone
info@gogorilla.com
United Kingdom
!
Website designed with ♡ by our in-house design and engineering team
Growth Services
Creative Services
Company
Phone
info@gogorilla.com
United Kingdom
Website designed with ♡ by our in-house design and engineering team
Growth Services
Creative Services
Solutions
Company
Phone
info@gogorilla.com
United Kingdom
Website designed with ♡ by our in-house design and engineering team
Pricing
Growth Services
Creative Services
Talent & Agency Solutions
FinTech Platform
Solutions
Capital
Company
Phone
info@gogorilla.com
United Kingdom
Website designed with ♡ by our in-house design and engineering team
Pricing
Growth Services
Creative Services
Talent & Agency Solutions
FinTech Platform
Solutions
Capital
Company
Website designed with ♡ by our in-house design and engineering team
[1] ‘World’s First’
Claim
has been
independently
verified by a
third-party
legal representative.
Learn
more
Phone
info@gogorilla.com
Privacy & Data Protection
Marketing And Advertising Compliance
Business And Legal
Contact And Support
Your Rights
December 2025
December 2025
(Version 1.1)
Client Data Rights and Control Framework
GoGorilla Media and Technologies Group Ltd provides a comprehensive framework for clients to exercise full control over their personal data. This commitment to transparency and client empowerment is a core component of the value delivered through the world’s first performance marketing platform built on a FinTech platform. The rights afforded under the UK General Data Protection Regulation (UK GDPR) are not merely a matter of legal compliance but a fundamental part of our client-centric model.
This document outlines the specific rights available to all clients and the clear, structured procedures for exercising them.
Data Subject Rights Overview
The UK GDPR establishes a suite of rights designed to provide individuals with robust oversight and control of their personal data. GoGorilla has implemented a clear and accessible process for exercising each of these rights.
Right
Description
How to Exercise
Timeframe
Right of Access (Article 15)
The right to obtain copies of personal data and receive information on how it is processed.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Right to Rectification (Article 16)
The right to correct inaccurate or incomplete personal data.
Update via your account dashboard or email privacy@gogorilla.com
Without undue delay
Right to Erasure (Article 17)
The right to request the deletion of personal data under specific circumstances.
Submit a written request with justification to privacy@gogorilla.com
1 month from receipt
Right to Restrict Processing (Article 18)
The right to limit the processing of personal data in specific situations.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Right to Data Portability (Article 20)
The right to receive personal data in a machine-readable format or have it transferred to another controller.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Right to Object (Article 21)
The right to object to processing based on legitimate interests or for direct marketing.
Submit a written request to privacy@gogorilla.com
Immediate for marketing, 1 month for other objections
Rights Related to Automated Decision-Making (Article 22)
The right not to be subject to decisions based solely on automated processing.
Submit a written request to privacy@gogorilla.com
1 month from receipt
Detailed Explanation of Data Rights
A detailed explanation of each right is provided below to ensure full transparency.
2.1. Right of Access (Article 15) This right enables clients to request confirmation of whether their personal data is being processed and to receive copies of that data, alongside supplementary information regarding its use.
2.2. Right to Rectification (Article 16) Clients have the right to request the correction of any inaccurate or incomplete personal data held by the Company.
2.3. Right to Erasure (Article 17) Also known as the ‘right to be forgotten’, this allows clients to request the deletion of their personal data where it is no longer necessary for its original purpose, where consent is withdrawn, or where there is no overriding legitimate interest to continue processing.
2.4. Right to Restrict Processing (Article 18) This right permits clients to request a limitation on the processing of their data, for example, whilst the accuracy of the data is being contested or if the processing is unlawful.
2.5. Right to Data Portability (Article 20) Clients may request their personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) for transfer to another service provider, where processing is based on consent or contract and is automated.
2.6. Right to Object (Article 21) Clients have the right to object to the processing of their personal data based on legitimate interests or for direct marketing purposes. All direct marketing will cease immediately upon objection.
This provides the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. Clients may request human intervention in such cases.
3. PROCEDURE FOR EXERCISING RIGHTS
A formal and secure process is in place for handling all data rights requests.
Submission of Request: All requests should be submitted in writing to privacy@gogorilla.com with the subject line “Data Rights Request” to ensure efficient processing.
Identity Verification: To protect client data, identity verification will be required before processing a request. This may involve confirming account details or providing a copy of an identification document.
Response: A response will be provided within one month of receipt. This may be extended to three months for complex requests, in which case the client will be informed of the extension.
Cost: All data rights requests are processed free of charge. A reasonable fee may be applied only for requests that are manifestly unfounded or excessive.
Right of Access (Article 15)
What it means: You can ask us to confirm whether we're processing your personal data and get copies of that data, plus information about how we're using it.
When to use it: When you want to see what data we have about you or understand how we're using it.
What you'll get:
Confirmation of whether we're processing your data
Copies of your personal data
Information about why we're processing it
Details about who we share it with
How long we'll keep it
Information about your other rights
Right to Rectification (Article 16)
What it means: You can ask us to correct any inaccurate or incomplete personal data.
When to use it: When you notice your information is wrong or incomplete.
How it works:
Contact us with the correct information
We'll investigate and make corrections promptly
If we've shared the incorrect data with others, we'll tell them about the correction too
Right to Erasure or Right to be Forgotten (Article 17)
What it means: You can ask us to delete your personal data in certain circumstances.
When you can use it:
The data is no longer needed for the original purpose
You withdraw consent and there's no other legal reason for us to keep it
You object to processing and we don't have overriding legitimate grounds
The data has been processed unlawfully
Deletion is required for legal compliance
Important note: This right isn't absolute! We might need to keep some data for legal
reasons or legitimate business purposes.
Right to Restrict Processing (Article 18)
What it means: You can ask us to limit how we use your data in certain situations.
When you can use it:
You're challenging the accuracy of the data
The processing is unlawful but you don't want the data deleted
We no longer need the data but you need it for legal claims
You've objected to processing and we're checking if our legitimate grounds override
Right to Data Portability (Article 20)
What it means: You can get your personal data in a structured, machine-readable format and transfer it to another service.
When you can use it:
The processing is based on your consent or a contract
The processing is automated
What you'll get:
Your data in a commonly used electronic format (like CSV or JSON)
Direct transfer to another controller if technically possible
Right to Object (Article 21)
What it means: You can object to processing based on legitimate interests or for direct marketing.
Two types of objection:
General Objection:
You can object to processing based on legitimate interests
We'll stop unless we have compelling legitimate grounds that override your interests
Marketing Objection:
You can object to direct marketing at any time
We'll stop immediately - no questions asked
This includes profiling for marketing purposes
Rights Related to Automated Decision-Making (Article 22)
What it means: You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
When it applies:
Decisions made entirely by computer algorithms
Decisions that have legal effects or significantly affect you
Your rights:
Request human intervention in the decision-making process
Express your point of view
Contest the decision
How To Exercise Your Rights
Here are the steps and requirements when exercising your rights:
1. Contact Us
Contact Methods
Email: privacy@gogorilla.com
Subject Line: Include "Data Rights Request" for faster processing
Account Dashboard: Some rights can be exercised directly through your account
2. Provide Information
What to Include in Your Request
• Your full name and contact details
• Clear description of which right you want to exercise
• Specific details about your request
• Any supporting information that might help us process your request
3. Identity Verification
To protect your privacy, we may ask you to verify your identity before processing your request. This might include:
• Confirming details from your account
• Providing a copy of ID (we'll only use this for verification)
• Answering security questions
4. Response Time
To protect your privacy, we may ask you to verify your identity before processing your request. This might include:
• Confirming details from your account
• Providing a copy of ID (we'll only use this for verification)
• Answering security questions
5. Cost
Free: All rights requests are processed free of charge
Exceptions: We may charge a reasonable fee for manifestly unfounded or excessive requests
Important Limitations
Here are the steps and requirements when exercising your rights:
When Rights Maybe Limited
While these rights are powerful, they're not absolute. We might not be able to fulfill your request if:
• Legal Obligations: We're required by law to keep processing your data
• Legal Claims: The processing is necessary for legal claims
• Public Interest: The processing is necessary for public interest reasons
• Others' Rights: Fulfilling your request would adversely affect other people's rights
Balancing Rights and Interests
When we receive a request, we carefully balance:
• Your fundamental rights and freedoms
• Our legitimate business interests
• Legal and regulatory obligations
• Rights and interests of other individuals
• Public interest considerations
We'll always explain our decision and provide information about your right to complain to the ICO.
Important Limitations
If you're not satisfied with how we've handled your request, you can:
Contact us first: Let us try to resolve the issue
Contact the ICO: You have the right to expedite and complain to the Information Commissioner's Office when we can’t resolve the issue within the given time.
Privacy Questions
Email:
privacy@gogorilla.com
Response Time:
Within 48 hours
For:
General questions about your rights or our privacy practices
Data Protection Officer
Email:
privacy@gogorilla.com
For:
Formal rights requests, privacy concerns, complaints
UK Supervisory Authority
ICO (Information Commissioner's Office)
Website:
ico.org.uk
Phone:
0303 123 1113
Address:
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Quick Examples
Here are some quick examples on how you can exercise your rights:
• Want to see your data?
"Hi, I'd like to exercise my right of access. Please send me copies of all personal data you hold about me."
• Need to correct something?
"Hi, my email address in your system is wrong. It should be newemail@example.com instead of oldemail@example.com."
• Don't want marketing emails?
"Hi, I object to receiving marketing emails. Please remove me from all marketing communications."
• Want to delete your account?
"Hi, I'd like to exercise my right to erasure. Please delete all my personal data as I no longer use your services."
Your rights are important to us. We're committed to making it easy for you to exercise them and maintain control over your personal data. After all, your success is our success, and that includes respecting your privacy choices.
Last Updated: December 2025
Version: 1.1