Privacy Policy

Digital Gorilla Limited ("Digital Gorilla Limited" or "We"), is a marketing company in Guernsey. Compliance with the Data Protection (Bailiwick of Guernsey) Law, 2017 ("the Law") requires us to provide certain information to you. Please read this Privacy Policy together with the Cookie Policy below.

This Privacy Policy sets out our data policy surrounding compliance with how data is processed. Data processing includes the collection, use and storage of personal information.

We respect and value the privacy of everyone who visits this website and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the Law. This Privacy Policy sets out the types of information that is collected and recorded by Digital Gorilla Limited.

We do collect personally identifiable data and other data. Please see our Cookie Policy below, which provides more details on the data collected.

Digital Gorilla Limited is a marketer and a data controller. Should you require further information or wish to make a complaint in relation to your personal data, our contact details are:

What data we collect

We may collect the following types of personal data from you for the purpose of conducting our business:

• Identity Data: first name and last name.
• Contact Data: email address, business name and phone number.
• Technical Data: internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Other information: any other information provided by you to us on a voluntary basis.

How we collect your data

Personal information may also be collected when Digital Gorilla Limited is contacted by phone, email, or in person. As it is not possible to get explicit consent via a checkbox in those cases, we will only use that data for "legitimate interests" until further consent is given.

Personal identifiable information (identity data and contact data) submitted through the contact form on this site is collected only when consent is given by the user, in the form of ticking a mandatory checkbox before submitting their details. The checkbox clearly links to this Privacy Policy. By ticking the checkbox the user gives us consent and a lawful basis to use their data. The exact wording of the consent given is stored alongside the submission.

Personal information may also be collected when Digital Gorilla limited is contacted by phone, email, or in person. As it is not possible to get explicit consent via a checkbox in those cases, we will only use that data for "legitimate interests" until further consent is given.

We may collect data from you by referral. If this is the case, we will ask the referring business to get consent prior to us receiving the information.

We may collect personal data via a Meta lead form (Leads Campaign). We will only collect name, email and phone number.

How we process the data, our lawful basis

• We may contact you individually using Hostinger email to inform you of any current or new services we have available. Our lawful basis is legitimate interests.
• When submitting the form on our contact page we may use that data to feed into GA4 for more accurate reporting. This data will be hashed, and we have a lawful basis of consent through the mandatory checkbox.
• To deliver our marketing services.
• When submitting a Meta lead form, we may use that data to feed into GA4. Facebook may also process this data. Our lawful basis is consent. Only you can choose to submit the lead form, and we provide a link to this Privacy Policy so you can learn how your data is being collected, processed, stored and shared before submission. This personal data will be used to contact you, provide services if you decide to work with us, and to trigger follow-up communication.

We will not use your personal data to spam or for unlawful marketing purposes. We will only use your personal data for the reasons originally stated. In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection (Bailiwick of Guernsey) Law, 2017.

Our legitimate interests

As previously mentioned, we may process your personal data (such as name, email address) where it is necessary for our legitimate interests. Our legitimate interest is to inform your business about the social media marketing services we offer, including current and new services, and to carry out our services.

Data sharing

Digital Gorilla Limited takes data sharing very seriously. However, we may need to share your personal data with:

• Third-party service providers assisting us in delivering our services.
• Legal authorities when required by law or to protect our rights.

Please contact us if you wish to know if, and to which third-party service provider, we have shared your data.

Data storage

Digital Gorilla Limited takes the storage of your data very seriously. To mitigate any risks we have taken into account the below:

• Email communication is performed within servers located within the United Kingdom. We use a well-known hosting service, Hostinger, which is GDPR compliant.
• We may store your data using Office 365. Office 365 is a well-known GDPR compliant software and has servers located in the United Kingdom. Office 365 also has malware and other protections in place to prevent hackers and loss of data.
• Data will be stored within Google Analytics 4 to measure the performance of our business and where we can improve. GA4 servers are based in the United States, however we take serious measures to ensure GDPR compliance (including but not limited to consent mode v2). In order to process data and store it on GA4 we must receive consent via the GDPR compliant cookie banner.
• Payment information may be stored by HSBC Channel Islands in order to carry out invoicing. For our accounting records (including invoices, billing details and related correspondence) we use Xero, a well-known cloud accounting platform provided by Xero (UK) Limited. The personal data processed in Xero is limited to what is necessary to issue invoices, process payments and meet our legal and tax obligations (lawful bases: performance of a contract and compliance with a legal obligation under UK GDPR). Xero acts as a data processor on our behalf under a data processing agreement, is GDPR and UK GDPR compliant, and applies appropriate technical and organisational security measures. Where Xero transfers data outside the UK/EEA, it relies on approved safeguards such as the UK International Data Transfer Addendum and EU Standard Contractual Clauses. We retain accounting records for as long as required by applicable tax and company law (typically six years), after which they are securely deleted. You can review Xero's privacy practices at xero.com/uk/legal/privacy.
• If you submit details through the Meta lead form your information will be stored within Meta. It will then be exported and transferred to Office 365. We will not hold data for longer than necessary.
• Submissions made through the contact form on this site are stored in a secure database hosted on our application platform (Lovable Cloud, powered by Supabase, with servers in the EU). Data is encrypted in transit and at rest. Only Digital Gorilla Limited can access these submissions.

For all of our data storage methods we ensure strong security by incorporating multiple authorisations to log in to accounts.

International data transfers

Our website domain and office network are all within the European Economic Area (EEA). Should any exceptional occasion require your data to be transferred to and stored in countries outside the EEA, we take appropriate measures to ensure your data is protected when transferred.

Data retention

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations. Contact form submissions made through this site are automatically deleted after 12 months by a scheduled cleanup job, unless there is a lawful reason to keep them longer (for example, if you have become a customer).

Any documentation provided to us during the course of the provision of our services will be returned (if in hard copy) or destroyed in line with our data retention policy, which, unless there is good reason not to do so, will be at the conclusion of the provision of our service to you.

Your rights

You have the following rights regarding your personal data:

• Right to information for personal data collected from the data subject
• Right of access
• Right to object to processing for direct marketing purposes
• Right to object to processing on grounds of public interest
• Right to object to processing for historical or scientific purposes
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right not to be subject to decisions based on automated processing
• Right to data portability

To exercise these rights or for any questions, please contact us using the details above. You can also see more information at odpa.gg/information-hub/information-rights.

Data security

We employ appropriate security measures to protect your personal data from unauthorised access, disclosure, or alteration. This includes utilising popular, well-known business IT platforms and software solutions.

Changes to this Privacy Policy

As part of its compliance, Digital Gorilla Limited keeps this Privacy Policy under review and we reserve the right to make changes, additions or removals from this Privacy Policy at our discretion. Clients or interested parties are therefore encouraged to review this Privacy Policy at appropriate intervals.

Consent

This policy does not constitute a contract or contractual obligation. You are freely able to withdraw your consent to Digital Gorilla Limited processing your data by contacting us using the details above, however this may severely hamper our ability to market or deliver our services to your business.

Media and testimonials

With client consent, we may display photos, videos, or testimonials on our website or social media platforms. Clients may withdraw their consent at any time by contacting us.

Additional points

Please note the use of your personal data may also be required by law (tax, etc.) and if you don't provide certain information we will not be able to carry out our services.

Cookie Policy

Effective date: 24 September 2025. Last updated: 24 September 2025.

This Cookie Policy explains what cookies are and how we use them on this website, the types of cookies we use, the information we collect using cookies and how that information is used, and how to manage the cookie settings. Please read this in conjunction with our Privacy Policy above.

Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide a better user experience, and understand how the website performs so we can analyse what works and where it needs improvement.

How do we use cookies?

As with most online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way.

The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and providing you with a better and improved user experience. We use Google Analytics 4 software on this website, however we've ensured to keep it privacy-safe and in line with the Law. If you don't want your data collected, processed and stored by Google Analytics 4, don't accept our cookie policy.

Types of cookies we use

• Essential (strictly necessary) cookies: necessary for the website to function properly. They enable basic features like page navigation, access to secure areas, and session management. Examples: wpEmojiSettingsSupports, cookieyes-consent.
• Performance and analytics cookies: collect information about how visitors interact with the site, such as which pages are visited most often, and whether users encounter errors. The data is used to improve the site's performance and user experience. Example: _ga.
• Functional cookies: allow the website to remember choices you have made in the past, such as your language preferences, region, or login state, to provide a more personalised experience.
• Targeting or advertising cookies: used to deliver ads that are more relevant to you and your interests. They may also be used to limit the number of times you see an ad and to help measure the effectiveness of advertising campaigns.

Some cookies may be set by third-party services that appear on our pages. These cookies are set by other websites and are not under our control.

Data sharing

We use Google Analytics 4 (GA4) to track data that helps us make decisions about our business. We may share data with GA4 for this purpose and for modelling contributions and business insights. We use Google Analytics 4 with Google Signals enabled. This means that Google may collect information about your visit, including cross-device behaviour and demographic / interest data, if you are signed into your Google account and have Ads Personalisation turned on. This data is used for analytics and advertising purposes. You can manage or deactivate this feature in your Google Ads settings, and you may refuse cookies via our consent banner.

When you accept our Cookie Policy and the checkbox on our contact form, you agree to us processing your first-party data and sending it to GA4 so we can better track our business performance.

Google Analytics 4, enhanced measurement and advertising features

We use Google Analytics 4 (GA4) to understand how visitors interact with our website and to improve our services. With your consent to cookies, we may collect additional user-provided data that enhances audience and conversion measurement, and enables advanced advertising features in Google Ads.

This includes:

• Improving audience segmentation for marketing purposes.
• Tracking conversions more accurately across our website.
• Enabling additional audience list capabilities in Google Ads to serve more relevant ads.

No personally identifiable information is collected by GA4 through these features. The data is aggregated and anonymised for analytics and advertising purposes. By accepting cookies, you agree to this enhanced data collection. You can manage or withdraw your consent at any time by adjusting your cookie settings.

First-party data from the contact form is also submitted to other Google services to help us provide relevant advertising to people that are most likely to want our services.

We also use the Facebook Pixel on our website, which helps feed data into Facebook so we can provide relevant ads to people that want to see them. By accepting the Cookie Policy you accept this term.

Automatic website matching

We may use Meta's Automatic Website Matching technology to improve advertising and measure its effectiveness. This service may collect information about your interaction with our website, including pages visited and actions taken. By accepting this cookie policy, you consent to the use of cookies and similar technologies for these purposes.

Manage cookie preferences

You can change your cookie preferences at any time by clicking the cookie button in the bottom-left corner of the website. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.

In addition to this, different browsers provide different methods to block and delete cookies. You can change the settings of your browser to block or delete cookies. Below are links to support documents on how to manage and delete cookies from the major web browsers:

• Chrome
• Safari
• Firefox
• Internet Explorer

If you are using any other web browser, please visit your browser's official support documents.