Privacy.

Who is responsible for your data

BNF Trading Ltd, trading as NEON GORILLA, is the controller of the personal data described here. We are registered in England and Wales, number 14471629, with our registered office at 15 Sandford Crescent, Wychwood Park, Crewe, Cheshire, CW2 5GJ, United Kingdom.

For anything about your data, email hello@neongorilla.co.uk. Ben Fildes, our founder, handles every request himself.

What we collect when you use this site

• What you type into a form: your name, work email, company, job title, website and, if you give it, a phone number and your message.
• Booking details when you book a 1-to-1: your name, email, the time you chose and any notes you add.
• Webinar registrations: your name, email and the session you picked.
• How you found us: the campaign tags in the link you arrived on, the page you came from, and the country your connection is in. We do not store your full IP address with your enquiry.
• Payment details when you become a client. Card details go straight to Stripe and never reach us.
• Emails and messages you send us, and our notes from calls with you.

Why we use it, and the legal basis

• To reply to you, run the webinar you signed up for and hold the meeting you booked. Basis: taking steps at your request before a contract, or our legitimate interest in answering enquiries.
• To deliver the work you pay for, invoice you and keep accounts. Basis: our contract with you, and our legal duty to keep financial records.
• To send occasional notes by email, only where you ticked the box. Basis: your consent, which you can withdraw at any time.
• To understand which pages and campaigns bring enquiries, so we spend less on the ones that do not. Basis: our legitimate interest, and your consent for any cookies involved.
• To keep the site safe and stop spam. Basis: our legitimate interest.

People we contact for our clients

When we run a campaign for a client, we contact business people on that client's behalf: by LinkedIn message, email, text follow-up or phone call. We use work details only, such as name, job title, company and business contact details, taken from public professional profiles, company websites and business data suppliers.

For that work our client decides who to contact and why, and we act on their instructions. Our client is the controller and we are their processor. The legal basis is the client's legitimate interest in reaching businesses that may need what they sell, and every message is to a work address or professional profile.

If we contacted you and you would rather we did not, reply to say so, or email us. We stop straight away, add you to a do-not-contact list so it does not happen again for any client, and tell the client you asked us to stop.

Cookies and similar storage

Before you choose, the only measurement on the site is Vercel Analytics, which counts page views without cookies and without identifying you.

If you accept cookies, we also load Google Tag Manager and Google Analytics, which measure how people use the site, and Fastlane, which tells us which social posts brought a visit. If you decline, none of them load. Your choice is stored on your device so we do not ask again; clear your browser storage to be asked again.

We keep the campaign tags from the link you arrived on in your browser for that visit only, so an enquiry can be matched to the campaign that brought it. No cookie is set for this.

Clients who sign in to their dashboard get a sign-in cookie that lasts 90 days. It is needed for the dashboard to work and is not used for anything else.

Who we share it with

We do not sell personal data. We share it only with the companies that help us run the business, under contracts that bind them to protect it:

• Vercel, which hosts this site.
• Neon, which hosts our database.
• Twenty, which runs our CRM.
• Google, for email, calendar, video calls and, with your consent, analytics.
• Resend, which sends our emails.
• Cal.com, which runs our booking calendar.
• Stripe, which takes payments.
• Cloudflare, whose Turnstile check stops spam on our forms.
• Fastlane, for social attribution, only with your consent.
• LinkedIn, where we send messages for a campaign.

Data outside the UK

Some of these companies store or process data in the United States or the European Union. Where data leaves the UK, it is protected by UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK's International Data Transfer Agreement or Addendum.

How long we keep it

• Enquiries and webinar registrations that do not lead to work: two years from our last contact, then deleted.
• Client records, contracts and invoices: six years after the work ends, because tax law needs it.
• Prospect data from a client campaign: for the length of the campaign, then returned to the client or deleted within 30 days.
• Do-not-contact requests: kept for as long as we run outreach, so we can keep honouring them.

Your rights

Under UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong.
• Delete your data, where we have no legal reason to keep it.
• Stop or limit how we use it, including for any marketing.
• Send your data to you or another company in a common format.

Exercising your rights

Email hello@neongorilla.co.uk. We reply within one month, and there is no charge. We may ask you to confirm who you are before we hand over any data.

Where we rely on your consent, you can withdraw it at any time. It does not affect anything we did before you withdrew it.

No decision with a legal or similarly significant effect on you is made by computer alone.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Keeping it safe

Data travels encrypted, our systems sit behind individual sign-ins, and only the people who need it to do the work can see it.

Changes to this notice

If we change how we use personal data, we update this page and the date at the top of it.