Privacy Policy

Last updated: 29 April 2026

This Privacy Policy explains how GoGoChimp collects, uses, and protects your personal data when you visit gogochimp.com, subscribe to our newsletter, book an audit, use our free tools, or otherwise interact with us.

GoGoChimp is the controller of personal data collected through this website. We are based in Scotland and operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Email:chris@gogochimp.com
Phone: 0141 463 6875
Founder: Chris McCarron

You can contact us at any time using the details above for any question relating to this policy or your personal data.

2. What personal data we collect, why, and on what lawful basis

We collect different categories of personal data depending on how you interact with us. Each collection point, the purpose, and the lawful basis under UK GDPR Article 6 are set out below.

2.1 Newsletter subscribers

Data collected: email address; subscription date; engagement metadata (opens, clicks); UTM source, medium, campaign of the page that referred you.
Why: To deliver the newsletter you have subscribed to and measure how it is performing in aggregate.
Lawful basis: Consent (Article 6(1)(a)) — given when you complete the subscribe form and tick the consent box.
Retention: Until you unsubscribe (one-click unsubscribe link in every email) or 24 months of inactivity, whichever comes first.
Third-party processor: beehiiv, Inc. (United States). beehiiv privacy policy.

2.2 Audit booking

Data collected: name; email address; company name (optional); calendar availability; any answers you provide on the booking form; timezone.
Why: To schedule and deliver the free 15-minute AI audit you have requested.
Lawful basis: Performance of pre-contractual steps at your request (Article 6(1)(b)) and our legitimate interest in operating our business (Article 6(1)(f)).
Retention: Booking metadata for 24 months; correspondence retained as long as commercially reasonable to deliver the engagement and respond to follow-up questions.
Third-party processor: Calendly, LLC (United States). Calendly privacy policy.

2.3 Free Page Speed Audit Tool

Data collected: the URL you submit for analysis; if you progress past the gate, your email address; UTM parameters of the originating page; technical metadata about the scan (load time, Core Web Vitals values, etc.).
Why: To run the page speed scan you have requested and (if you opt in) to send you the £-impact report by email.
Lawful basis: Performance of the service you have requested (Article 6(1)(b)). Marketing follow-up requires separate consent.
Retention: Scan inputs and aggregated results for 24 months; email addresses managed in line with section 2.1 if you opt in.

2.4 Contact

Data collected: any information you choose to include in an email or phone call — typically your name, email address, company, and the substance of your enquiry.
Why: To respond to your enquiry.
Lawful basis: Performance of pre-contractual steps at your request (Article 6(1)(b)) or our legitimate interest in responding to enquiries (Article 6(1)(f)).
Retention: As long as commercially reasonable to maintain the relationship, and for a further 6 years after the last contact for tax and accounting record-keeping (UK statutory requirement).

2.5 Website analytics and experimentation

Data collected: anonymised usage data — pages viewed, time on site, referrer, device type, browser, approximate location (country / city), IP address (anonymised by Google Analytics), and randomised experiment variant assignments.
Why: To understand how visitors use the site so we can improve it; to run A/B tests on our own pages so we can ship better experiences.
Lawful basis: Consent (Article 6(1)(a)) where consent is required for non-essential cookies. We use TrustArc's cookie consent banner to capture and respect your preferences.
Retention: Per the analytics provider's defaults — Google Analytics 4 retains user-level data for 14 months by default.
Third-party processors: Google LLC / Google Ireland Ltd (Google Analytics 4 and Google Tag Manager); GrowthBook, Inc. (United States) for experiment variant assignment.

2.6 Embedded video

Data collected: standard playback metadata (e.g. play / pause / completion events) when you watch an embedded Wistia video.
Why: Wistia provides the video player infrastructure and uses these events for video analytics so we can see which case-study videos are watched.
Lawful basis: Consent (Article 6(1)(a)).
Third-party processor: Wistia, Inc. (United States). Wistia privacy policy.

2.7 Popup interaction state

Data collected: small browser cookies that record whether you have dismissed or converted on our site popups, so we don't show them again immediately.
Why: To avoid showing you the same popup repeatedly within a 14-day window.
Lawful basis: Strictly necessary for the function you have triggered — these cookies do not require consent under PECR.
Retention: 14 days for dismissed popups; 365 days after a successful subscribe / conversion.
Cookie names: gg_popup_tool_v1, gg_popup_newsletter_v1, gg_tool_converted_v1.