Privacy Policy

1. Who we are

Zorilla Labs LLC ("Zorilla", "we") runs zorillamarketing.com and the Zorilla Marketing services. For anything about your data, email info@zorillamarketing.com.

2. What we collect

When you request the free Creator Proof Audit: brand name, work email, TikTok Shop name or link, product category, monthly GMV band, market (US, UK or both), whether we may look at your shop's public data, and whether you want occasional emails from us.

When you request the case study: your work email.

When you reply to our email with your affiliate export: the file you send and what is in it.

When you book a call: the details you enter on the booking page, which HubSpot runs for us.

Automatically: the page you landed on, the page that referred you, campaign tags in the link you clicked (UTM parameters and click identifiers), your browser type, and a one-way hash of your IP address that we keep only to stop abuse of the forms. We do not store your IP address itself.

Cookies and similar tools: see section 6.

3. Why we use it, and the legal basis

For visitors in the United Kingdom, the legal bases under UK GDPR are given in brackets.

To answer your request and prepare the audit or send the case study (steps you asked for before a possible contract, and our legitimate interest in responding to business enquiries).

To contact you about working together after you ask for an audit or a case study (our legitimate interest in following up a business enquiry; you can tell us to stop at any time).

To send occasional emails about TikTok Shop growth (your consent, given by ticking the box on the form; you can withdraw it from any email or by writing to us).

To keep the site and its forms safe, and to measure how the site is used (our legitimate interest, and for analytics cookies in the UK, your consent).

4. The audit file

Your audit file is seen by the people who score it, never used to seed another brand's creators, and deleted when you ask. We keep it only as long as the audit, and any work that follows, needs it.

5. Who we share it with

We use service providers that process data on our behalf and under contract: HubSpot (CRM and call booking), Resend (sending email), Google (Tag Manager, Analytics and Ads measurement), Cloudflare (network security), Lovable and Supabase (hosting and storage), and Google Workspace (our email). We do not sell your data, and we do not share it with other brands.

6. Cookies and analytics

The site uses Google Tag Manager to load Google Analytics 4 and Google Ads measurement. In the United Kingdom these tags set cookies only after you accept them in the banner; if you decline, they run without cookies and without identifying you. The site also keeps a small record of the link you arrived through in your browser's local storage, so we know which campaign your request came from. The HubSpot booking page sets its own functional cookies when you use it. You can clear cookies and local storage in your browser at any time.

7. Where data is kept

Our systems and providers are in the United States. If you are in the UK, your data is transferred to the US under the safeguards UK law allows: the UK Extension to the EU-US Data Privacy Framework where a provider is certified under it, or standard contractual terms approved for UK transfers.

8. How long we keep it

Enquiry details stay in our CRM while we are in contact and for up to two years after the last contact. If a contract follows, they stay for the life of the contract and for the period the law requires after it. Form submissions stored for safety and abuse prevention are kept for 12 months. You can ask us to delete your data sooner; see section 9.

9. Your rights

You can ask us for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, or move it to another provider, and you can withdraw consent where we rely on it. Email info@zorillamarketing.com and we will answer within one month. If you are in the UK and are not satisfied with our answer, you can complain to the Information Commissioner's Office at ico.org.uk. If you are in a US state whose privacy law gives you rights over your personal information, the same email address is where to exercise them.

10. Children

The site is for businesses. We do not knowingly collect data from anyone under 18.

11. Changes

If this policy changes, the new version goes on this page with a new date.