Privacy Policy
Last updated: May 20, 2026
Gorilla Karts ("we," "us," or "our") operates the website
www.gorillakarts.com and our physical store at 26 Lisnanane Ln, Cookstown, BT80 9BJ, Northern Ireland, including all related information, content, features, tools, products and services (the "Services"). Our online store is powered by Shopify.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through our Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.
Data Controller
For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
Personal Information We Collect
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. We may collect the following categories of personal information depending on how you interact with our Services:
- Contact details including your name, address, billing address, shipping address, phone number, and email address.
- Financial information including payment card details, transaction details, and payment confirmation. We do not store your full card details — these are processed securely by our payment providers.
- Account information including your username, password, preferences, and settings.
- Transaction information including items you view, add to your cart, purchase, return, or exchange.
- Communications including information you provide when contacting our customer support team.
- Device information including your IP address, browser type, operating system, and unique device identifiers.
- Usage information including how you navigate and interact with our website, pages viewed, and time spent on pages.
How We Collect Your Information
We collect personal information from the following sources:
- Directly from you when you create an account, make a purchase, contact us, or provide information in-store.
- Automatically through cookies and similar technologies when you use our website.
- From our service providers including Shopify, payment processors, and delivery partners.
- From third parties including marketing partners and social media platforms.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your experience. These include:
- Essential cookies required for the website to function (cart, checkout, session management).
- Analytics cookies (Google Analytics) to understand how visitors use our website.
- Marketing cookies (Klaviyo, Meta Pixel) to deliver relevant advertisements and measure campaign effectiveness.
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.
How We Use Your Personal Information
We use your personal information for the following purposes:
- To provide our Services including processing orders, fulfilling deliveries, managing your account, processing returns and exchanges, and providing customer support.
- To improve our Services including analysing how customers use our website, personalising your shopping experience, and recommending relevant products.
- Marketing and advertising including sending promotional emails, text messages, and showing you relevant advertisements online. You can opt out of marketing communications at any time.
- Security and fraud prevention including detecting and preventing fraudulent activity, securing transactions, and protecting our customers and business.
- Legal compliance including complying with applicable laws, responding to legal requests, and enforcing our terms and policies.
Legal Basis for Processing (UK GDPR)
We process your personal information on the following legal bases:
- Contract — to fulfil orders and provide Services you have requested.
- Legitimate interests — to improve our Services, prevent fraud, and market our products.
- Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal obligation — to comply with applicable laws and regulations.
How We Share Your Personal Information
We may share your personal information with:
- Shopify as our e-commerce platform provider.
- Payment processors to process your transactions securely.
- Delivery partners to fulfil and ship your orders.
- Marketing partners including Klaviyo and Meta to deliver relevant marketing communications and advertisements.
- Analytics providers including Google to help us understand website usage.
- Professional advisors including lawyers and accountants where necessary.
- Law enforcement where required by law or to protect our legal rights.
We do not sell your personal information to third parties.
Data Retention
We retain your personal information for as long as necessary to provide our Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will securely delete or anonymise it.
International Transfers
Your personal information may be transferred to and processed in countries outside the United Kingdom. Where we transfer your information outside the UK, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the UK Information Commissioner's Office.
Your Rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the personal information we hold about you.
- Right to rectification — request correction of inaccurate personal information.
- Right to erasure — request deletion of your personal information in certain circumstances.
- Right to restrict processing — request that we limit how we use your information.
- Right to data portability — request a copy of your information in a machine-readable format.
- Right to object — object to our processing of your information for marketing or legitimate interests.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at
gorilla@gorillakarts.co.uk. We will respond within one month as required by law.
Managing Communication Preferences
You may opt out of marketing emails at any time by clicking the unsubscribe link in any email we send you. If you opt out, we may still send you non-promotional communications such as order confirmations and delivery updates.
Children's Data
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. We encourage you to review this policy periodically.
Complaints
If you are unhappy with how we handle your personal information, please contact us first at
gorilla@gorillakarts.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: