Privacy Policy

Last Updated: 21 July 2026

1. Who We Are

Our website address is: https://www.gorillatortilla.co.uk. The data controller responsible for your personal information is GorillaTortilla.co.uk LTD (“we”, “us”, “our”).

You can contact us regarding any data protection or privacy matters at: help@gorillatortilla.co.uk.

2. Data We Collect and Our Legal Basis for Processing

We are committed to protecting your privacy. We collect and process personal data in the following ways:

  • When you leave comments: We collect the data shown in the comments form, your IP address, and browser user agent string.
    • Legal Basis: Our legitimate interest to help with spam detection and prevention.
  • When you use our Contact Form: We collect your name, email address, and any information you provide in your message.
    • Legal Basis: Your explicit consent, so that we can respond to your enquiry.
  • When you browse our site (Analytics): We collect anonymised data about your browsing activity using third-party services like Google Analytics.
    • Legal Basis: Your consent, as provided via our cookie consent banner.
  • When you click an affiliate link: When you click a link to a third-party merchant, data may be collected by that third party (using cookies) to track that you came from our site.
    • Legal Basis: Your consent for the use of advertising/affiliate cookies, as provided via our cookie banner.

3. Cookies

This website uses cookies to enhance user experience, for analytics, and for advertising/affiliate tracking. For full details, please see our Cookie Policy.

4. Who We Share Your Data With

We do not sell your personal data. We only share it with third parties who help us operate our website and business:

  • Analytics Providers: We share data with Google Analytics to understand how our website is being used.
  • Advertising Partners: We may share data with advertising partners such as Microsoft Advertising and Google to deliver relevant ads.
  • Affiliate Networks: When you click affiliate links, our partners (such as Amazon Associates, Awin, Rakuten Advertising, and eBay Partner Network) process data to track resulting sales.
  • Spam Detection Services: Visitor comments may be checked through an automated spam detection service (such as Akismet).

5. How Long We Retain Your Data

  • If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically.
  • Data from contact forms is retained for as long as necessary to resolve your query, typically up to 6 months.
  • Analytics data is retained according to the settings of the service provider (e.g. Google Analytics).

6. Your Data Rights (GDPR)

Under UK and EU law (GDPR), you have the following rights over your personal data:

  • The right to access – Request a copy of the personal data we hold about you.
  • The right to rectification – Request correction of inaccurate or incomplete data.
  • The right to erasure – Request deletion of your personal data (“right to be forgotten”).
  • The right to restrict processing – Request that we limit how we use your data.
  • The right to object to processing – Object to us processing your data (e.g. for direct marketing).
  • The right to data portability – Request your data in a machine-readable format.

If you wish to exercise any of these rights, please contact us at help@gorillatortilla.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK: https://ico.org.uk/.

7. Where Your Data Is Sent (Data Transfers)

Some of our third-party partners (such as Google and Microsoft) are based outside the UK and EEA, primarily in the United States.

When your data is transferred outside the UK/EEA, we ensure it is protected by appropriate legal safeguards, such as Standard Contractual Clauses (SCCs) or an Adequacy Decision.