Privacy policyPrivacy policy

Who we are

Gorilla Developers (gorilladevelopers.com) designs and builds websites, mobile apps and cloud back ends. We are based in the Netherlands and are the controller of the personal data described in this policy. Questions about privacy go to privacy@gorilladevelopers.com.

Information we collect

We only collect what we need to talk to you and deliver your project:

• Contact information: your name, email address, phone number and company, when you fill in our contact form, email us, message us on WhatsApp or book a call.
• Project information: what you tell us about your business and project, and the files, logos, text and images you send us.
• Account information: when we give you access to our client portal or back office, your name, email address, role, and sign-in records such as the time, IP address and browser of each sign-in. Team accounts also store a protected password and two-factor settings.
• Billing information: registered company name, address and VAT number, when you become a client.
• Technical information: basic server logs such as IP address, browser type and the pages requested, kept by our hosting provider for security and troubleshooting.

How we use your information

We use your information to:

• Reply to your enquiry and prepare a quote (our legitimate interest, or steps before a contract).
• Deliver, host and support the work you hired us for (performance of a contract).
• Send invoices and keep financial records (legal obligation).
• Keep our website secure and working (legitimate interest).

We do not sell your data, and we do not use it for advertising profiles.

Cookies and tracking

This website does not use advertising or tracking cookies. It sets one functional cookie, gd_currency, to remember whether you see prices in rand, euro or dollar. It is chosen from your country on your first visit and kept for one year. It contains no personal data. When you sign in to the client portal or back office, we also set strictly necessary session cookies that keep you signed in. They expire after seven days, or sooner when you sign out.

Who we share it with

We share personal data only with service providers that help us run our business, and only as needed:

• Website hosting (Cloudflare) and our database host, which stores portal and back office accounts.
• Email delivery for the contact form (Resend) and our email provider.
• Google Calendar, when you book a call.
• WhatsApp (Meta), when you choose to message us there.
• Payment providers such as Stripe, when you pay an invoice.
• Authorities, when the law requires it.

Some of these providers process data outside the European Economic Area. Where they do, we rely on safeguards such as the European Commission's standard contractual clauses or an adequacy decision.

Data in the systems we build for you

When we build or host a website, app or back end that stores data about your own customers, you are the controller of that data and we act as your processor. We only handle it on your instructions, keep it confidential and secure, and can sign a data processing agreement on request.

Showing our work

We may show websites and apps we have built for you in our portfolio, for example as screenshots on our Work page. Where a person is identifiable, or where your project is confidential, we ask your permission first. You can ask us to remove your project at any time.

Your rights

Under the GDPR (Europe) and POPIA (South Africa) you can ask us to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, where we no longer need it.
• Restrict or object to how we process it.
• Receive a copy of your data in a common, machine-readable format.

Email privacy@gorilladevelopers.com and we will respond within one month. If you are not happy with our answer, you can complain to the Dutch Autoriteit Persoonsgegevens or, in South Africa, the Information Regulator.

Security

We protect your data with encryption in transit, access controls and two-factor sign-in on the tools we use. No method of transmission or storage is completely secure, but we work hard to keep your information safe.

How long we keep it

Enquiries that do not lead to a project are deleted within 12 months. Client and project records are kept for as long as we work together and afterwards as long as the law requires, for example seven years for financial records under Dutch tax law.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. See also our terms and conditions.