Website Privacy Policy

Last updated: 31 Aug 2026

This Website Privacy Policy explains how Gorilla Tech Capital Limited (“we”, “us” or “our”) collects, uses, discloses, stores and protects personal data when you visit or interact with our website, including when you contact us through the website or use features made available on it.

It also explains the rights available to you under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, in each case as amended from time to time.

This Website Privacy Policy applies only to personal data processed in connection with this website. Other Privacy Policies may apply to activities conducted outside the website, including regulated services, investor onboarding, fund administration, recruitment and other business activities.

1. Who we are and our regulatory status

Gorilla Tech Capital Limited is a company incorporated in England and Wales (company number 03564275) with its registered office at 64 North Row, London W1K 7DA, United Kingdom.

We are authorised and regulated by the Financial Conduct Authority (Firm Reference Number 189221).

We operate as the regulated investment and capital platform of Gorilla Technology Group and may carry on alternative investment fund management and related activities within the scope of our Financial Conduct Authority permissions.

Our funds and restricted investment communications are intended only for professional clients, eligible counterparties and other people to whom they may lawfully be made.

Our regulatory status does not mean that every activity or item of information described on this website is regulated by the Financial Conduct Authority.

For the purposes of applicable data protection law, Gorilla Tech Capital Limited is the controller of the personal data described in this Website Privacy Policy. In limited circumstances, another Gorilla Technology Group entity or a service provider may act as a separate or joint controller in relation to particular website-related processing, where applicable.

2. How to contact us

If you have any questions about this Website Privacy Policy, wish to exercise your data protection rights or have a concern about how we handle your personal data, please contact us at:

Email: privacy@gorillatech.capital

You may also write to us at our registered office address set out in Section 1. If you are dissatisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk/.

3. Scope of this Website Privacy Policy

This Website Privacy Policy applies to personal data relating to:

• visitors to our website;
• individuals who contact us through the “Send us a message” function or other website-based communication channels;
• individuals whose personal data is processed through cookies, analytics tools or similar website technologies, where applicable; and
• individuals who receive website-related or business communications from us as a result of their interaction with the website, where applicable.

This Website Privacy Policy does not apply to any third-party websites that may be linked to or accessible from our website. We are not responsible for the privacy practices of such third parties, and we encourage you to review the applicable privacy policies of those websites before providing any personal data.

4. Personal data we collect

Depending on how you use or interact with our website, we may collect and process the following categories of personal data.

4.1 Contact and enquiry information

If you contact us through the website, we may collect:

• your name;
• your email address;
• your telephone number or other contact details, if provided;
• your employer, organisation or professional role, if provided; and
• the content of your message or enquiry and any other information you choose to provide.

4.2 Website, device and technical information

When you use our website, we may process limited technical information, including:

• IP address;
• browser type and version;
• device information and identifiers;
• operating system;
• time zone;
• pages viewed and navigation information;
• referral source;
• log information;
• security events; and
• cookie or similar-technology identifiers.

Some of this information may be processed automatically as part of the technical operation and security of the website.

4.3 Cookies and analytics information

Where permitted by law, and subject to your consent where required, we may collect information about how you use our website through analytics cookies and similar technologies.

This may include information about pages visited, the duration and frequency of visits, referral information and interactions with website features.

Further information is provided in our Cookie Policy.

4.4 Special-category personal data

We do not ask you to provide special-category personal data through our website. Please avoid including sensitive personal data in any free-text message unless it is necessary for your enquiry.

If you voluntarily provide special-category personal data, we will process it only where permitted by applicable data protection law, including where an appropriate lawful basis under Article 6 and a relevant condition under Article 9 of the UK GDPR apply.

5. How we obtain personal data

We may obtain personal data:

• directly from you when you submit an enquiry, use the “Send us a message” function or otherwise interact with our website;
• automatically through our website, web servers, security tools, cookies and similar technologies;
• from service providers that support the hosting, operation, security, maintenance or analytics of our website; and
• from another Gorilla Technology Group entity where reasonably necessary to respond to a website enquiry or manage website-related communications.

6. Purposes and lawful bases for processing

Purpose	Lawful basis
Responding to enquiries and managing correspondence	Legitimate interests — Art. 6(1)(f)
Operating, maintaining and securing the website	Legitimate interests — Art. 6(1)(f)
Analytics cookies and non-essential technologies	Consent — Art. 6(1)(a), where required
Compliance with applicable legal or regulatory obligations	Legal obligation — Art. 6(1)(c)

---

Where we rely on legitimate interests, those interests include responding to business enquiries, managing our communications and maintaining the security and effective operation of our website. We rely on those interests only where permitted by applicable data protection law and where they are not overridden by your rights and interests.

7. Cookies and similar technologies

We use cookies and similar technologies where necessary for the operation and security of the website and, where applicable, for analytics. Non-essential cookies are used only where permitted by law and, where required, with your consent. Further information is available in our Cookie Policy.

8. Sharing personal data

We may share personal data collected through the website with other Gorilla Technology Group entities where necessary to respond to an enquiry, and with service providers that support the hosting, security and operation of the website. We may also disclose personal data where required by law or by a competent authority.

Where a service provider processes personal data on our behalf, appropriate contractual and organisational safeguards will be used as required by applicable data protection law.

9. International transfers

Some of our service providers or other Gorilla Technology Group entities may process or access personal data outside the United Kingdom. Where this involves restricted transfer under applicable data protection law, we will ensure that an appropriate lawful transfer mechanism or safeguard is in place. You may contact us for further information about the safeguards applicable to international transfers of your personal data.

10. Data security

We take appropriate technical and organisational measures to protect personal data collected through the website against unauthorised access, loss, misuse, alteration or disclosure.

11. Data retention

We retain personal data collected through the website only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, maintaining website security and complying with applicable legal or regulatory requirements.

Retention periods vary depending on the nature of the information and the purpose for which it is processed. Information about the retention periods applicable to cookies and similar technologies is provided in our Cookie Policy.

Where a website enquiry develops into an investment, contractual or other business relationship, relevant personal data may be retained in accordance with the retention requirements applicable to that relationship.

12. Your data protection rights

Depending on the circumstances and the applicable lawful basis, you may have rights to request access to, correction or erasure of your personal data, restriction of processing, data portability, or to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us using the details in Section 2. These rights are subject to applicable legal conditions and exemptions.

13. Children

Our website is intended for professional and business users and is not directed at children.

14. Changes to this Website Privacy Policy

We may update this Website Privacy Policy from time to time to reflect changes in our website, our processing activities or applicable law. The revised policy will be posted on this website and will apply to your use of the website from the date indicated as the “Last updated” date, unless otherwise stated. We encourage you to review this page periodically to stay informed of any updates or changes.