Legal

Privacy Policy

Effective January 1, 2026 · Zoomshop is a product of Gorilla Public

This Privacy Policy describes how Zoomshop and Gorilla Public ("we," "us," "our") collect, use, and share information when you visit zoomshop.com, request a demo or free audit, or use the Zoomshop platform.

1. Information we collect

We collect three categories of information:

  • Information you give us directly — your name, dealership, email, phone, current website vendor, and any notes you send us via the demo request, free audit, or contact forms.
  • Information about your visit — browser type, device, referring URL, pages viewed, and the approximate location derived from your IP address. Collected via first-party analytics.
  • Information from our services — if you are a Zoomshop customer, we process the shopper data flowing through your dealer site as a data processor on your behalf. Your customers' data belongs to you.

2. How we use it

  • Respond to demo and audit requests.
  • Deliver the Zoomshop platform to customers.
  • Improve our marketing site, product, and documentation.
  • Send occasional operational or product update emails you can unsubscribe from at any time.
  • Comply with legal obligations.

3. What we don't do

  • We don't sell your personal information.
  • We don't share your customer data with other Zoomshop customers.
  • We don't run third-party advertising on the Zoomshop platform pointed at your shoppers.

4. Cookies and tracking

We use first-party cookies for essential site function (session, consent state) and first-party analytics to understand how zoomshop.com is used. We honor the Global Privacy Control (GPC) header. See our Cookie Policy for details.

5. Sharing with service providers

We share information with vetted service providers who help us deliver the platform — cloud hosting (AWS, Cloudflare), transactional email (Postmark), payment processing (Stripe for customer billing), and CRM (HubSpot). Each is bound by contract to protect the information they receive.

6. Your rights

Depending on where you live, you may have the right to:

  • Access the information we hold about you.
  • Correct inaccurate information.
  • Delete your information (subject to our legal retention obligations).
  • Opt out of the sale or sharing of your personal information (California's CCPA/CPRA "Do Not Sell or Share").
  • Portability of your information.

To exercise any of these rights, email privacy@gorillapublic.com.

7. California residents

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have specific rights described in Section 6. We do not sell personal information as defined by CCPA. We honor Global Privacy Control (GPC) signals as an opt-out request.

8. Data retention

We retain form submission data for as long as you have an active relationship with us plus seven years for tax and legal purposes. Analytics data is retained for 26 months. Customer platform data is retained per your contract and returned or deleted upon termination.

9. Security

We use industry-standard controls — TLS in transit, encryption at rest, least-privilege access, MFA, audit logging — to protect your information. No system is perfectly secure, but we work hard to minimize risk.

10. Children

Zoomshop is not directed at children under 13, and we don't knowingly collect information from them.

11. Changes to this policy

We'll post any changes here and update the effective date. Material changes will be announced by email to customers.

12. Contact

Questions about this policy or your data: privacy@gorillapublic.com.