Privacy policy
Last updated: 30 September 2026
This policy explains what personal data The Guerrilla Crew Ltd (“The Guerrilla Crew”, “we”, “us”) collects through this website, why, and what your rights are.
Who we are
We are The Guerrilla Crew Ltd, a private limited company registered in England and Wales under company number 17487507. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the data controller for the data described here.
Privacy questions and requests: contact@theguerrillacrew.com.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, work email, company and message you send through the contact form | To reply to your enquiry and, if you go ahead, set up a discovery call | Legitimate interests (answering the enquiry you made) |
| Site usage data: pages viewed, clicks, scrolling, device and browser type, approximate location | To understand and improve the site | Consent (only if you accept analytics cookies) |
| Anonymised session recordings and heatmaps | To see where visitors get stuck | Consent (only if you accept recordings) |
We do not use your details for automated decisions, and we do not sell your data.
Who we share it with
We use these providers to run the site. Each processes data on our behalf:
- Cloudflare, which hosts and delivers the website and provides network security
- Attio (our CRM), which stores the details you send through the contact form so we can reply and keep track of the conversation
- Resend (EU servers), which delivers a copy of your enquiry to our team inbox so we see it straight away
- Cloudflare Turnstile, which checks that a person, not a bot, is sending the contact form. This is needed to keep the form secure, so it runs without asking for consent and does not track you across sites
- Google Analytics (Google), only with your consent
- PostHog (EU cloud), only with your consent
- Microsoft Clarity (Microsoft), only with your consent
Some of these providers process data in the United States (Google Analytics and Microsoft Clarity), and others may do so for support or infrastructure. Where personal data leaves the UK or EU, we rely on the provider being certified under the EU–US Data Privacy Framework and its UK Extension, or on standard contractual clauses (with the UK Addendum) in their data processing terms. PostHog and Resend process our data in the EU.
How long we keep it
Enquiries and the related contact details in our CRM: up to 5 years after our last contact with you, unless you ask us to delete them sooner. Google Analytics data: 14 months, after which it is deleted automatically. PostHog analytics data: 1 year. Microsoft Clarity session recordings: 30 days (9 months for any recording we save or label); Clarity heatmap and click data: 9 months.
Your rights
You can ask us to access, correct or delete your personal data, restrict or object to how we use it, and receive a copy of it. Where we rely on consent you can withdraw it at any time using “Cookie settings” in the footer. To use any of these rights, email contact@theguerrillacrew.com.
You can also complain to your data protection authority. In the UK that is the Information Commissioner’s Office (ico.org.uk).
Cookies
See our cookie policy for the cookies and similar technologies we use.
Changes
We will update this page if our practices change and show the date at the top.