Privacy & cookie policy.

Last updated: 3 November 2026

This policy explains how Goram & Vincent Ltd (“G&V”, “we”, “us”) collects and uses personal data when you visit goramandvincent.com or get in touch with us. It also explains the cookies and similar technologies we use, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Goram & Vincent Ltd (trading as G&V) is the data controller for the personal data described in this policy.

• Company registered in England & Wales, no. 07047217
• Registered office: Cigar Factory, 127–131 Raleigh Road, Southville, Bristol BS3 1QU
• VAT no. GB979872532
• Email: [email protected]

If you have any question about this policy or about how we use your data, email us at the address above and we will help.

The personal data we collect

When you contact us

If you fill in the enquiry form on our Connect page, or email us, we collect the details you give us: your name, email address, phone number (if you choose to add it) and the content of your message. We use this to respond to your enquiry and, if we go on to work together, to manage that relationship.

Our enquiry form sends these details to Klaviyo, the platform we use to manage contacts and communications, where a contact record is created or updated for you.

Lawful basis: taking steps at your request before entering into a contract, and our legitimate interests in responding to and keeping a record of enquiries about our services.

When you browse the site (analytics)

With your consent, we use Google Analytics 4 to understand how visitors use the site — pages viewed, how people arrive, approximate location (derived from your IP address, which Google does not log in GA4 by default), and general device and browser information. This data is pseudonymous: we do not use it to identify you by name.

Lawful basis: consent. Analytics does not run until you accept it, and you can withdraw consent at any time (see Cookies below).

Advertising measurement

With your consent, we use Google Ads tags to measure the performance of our advertising (for example, whether a visit followed an ad) and, where relevant, for remarketing. This also does not run until you accept it.

Lawful basis: consent.

Technical and security data

Our site is hosted on Cloudflare. Like any web host, Cloudflare processes technical information such as your IP address, browser type and the requests your browser makes, in order to serve the site and keep it secure. We also load fonts from Google Fonts, which means your browser requests those files from Google and Google receives your IP address as part of that request.

Lawful basis: our legitimate interests in delivering, securing and presenting the website.

Cookies and similar technologies

Cookies are small files stored on your device. We also use your browser’s local storage to remember your cookie choice. We group what we use into two kinds:

• Strictly necessary — needed for the site to work and to remember your privacy choice. These are always on and do not need consent.
• Analytics and advertising — set only after you accept them in the cookie banner. They stay off until then.

We use Google Consent Mode, which means Google’s analytics and advertising storage is set to denied by default and only switches on if you accept.

Changing your mind: you can withdraw or change your consent at any time by selecting “COOKIE SETTINGS” at the foot of any page, which reopens the banner. You can also block or delete cookies in your browser settings, though some parts of sites you visit may not work as intended if you do.

Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run the site and respond to you, acting on our instructions:

• Klaviyo, Inc. — contact management and communications (your enquiry details).
• Google LLC — analytics, advertising measurement and fonts.
• Cloudflare, Inc. — website hosting, delivery and security.

We may also disclose personal data if the law requires it, or to establish, exercise or defend legal claims.

International transfers

Some of these providers are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on appropriate safeguards — such as UK adequacy regulations (including the UK extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Agreement / Addendum to the European Commission’s standard contractual clauses — so that your data remains protected.

How long we keep it

• Enquiry data: for as long as we are in contact about your enquiry and for a reasonable period afterwards (normally up to 24 months), unless we go on to work together, in which case we keep it for the life of that relationship and as our records require. We will delete it sooner if you ask and we have no need to keep it.
• Analytics data: held by Google for the retention period set on our account (GA4’s standard retention is up to 14 months).

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you (access);
• have inaccurate data corrected (rectification);
• ask us to delete your data (erasure), where we have no overriding reason to keep it;
• restrict or object to our processing, including processing based on legitimate interests;
• ask us to transfer your data to you or another provider (portability); and
• withdraw consent at any time, where we rely on consent — this does not affect processing already carried out.

To exercise any of these, email [email protected]. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner’s Office:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Security

We take reasonable technical and organisational measures to protect your data, including serving the site over HTTPS and working with reputable providers. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Links to other sites

Our site links to other websites, including our clients’ sites, our own ventures and our social profiles. This policy does not cover those sites; please read their own privacy policies.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date at the top. Please check back occasionally.

Contact us

For anything to do with this policy or your personal data, email [email protected] or write to us at the registered office above.