Privacy &  Cookie Policy

M6 Giraffe Privacy & Cookie Policy
Last updated: March 20, 2026
‍
About Us
"M6 Giraffe" ("we", "us", "our") is a trading name of Apprian Limited, a company registered in England and Wales under company number 16700639 with registered office at South Planks Farm, Garstang Road, Barton, Preston, PR3 5AB. Contact: info@m6giraffe.com.We operate m6giraffe.com as a UK business directory where companies pay subscriptions to list offers/deals and users browse by location/category. We're the data controller under UK GDPR/Data Protection Act 2018.

‍2. Information We Collect
From Users/Advertisers (Signups): Name, email address, business details, payment info (via Stripe), listing content (logos, descriptions, website URLs, offers), support queries, feedback.Newsletter Subscriptions: Email, name (optional) via explicit opt-in forms.Tracking (All Visitors): Google Analytics 4 via Google Tag Manager collects anonymized IP, device/browser info, pages/clicks (listing→offer tracking), time spent, referrals, and listing performance metrics (impressions, click-through rates for Advertisers).

‍3. Geolocation Data (Optional Feature)
If you allow location access via browser permissions, we use your approximate location (city/postcode level from IP address or browser geolocation API) to prioritize nearby business listings and offers as the default view. This improves relevance by showing deals closest to you first.Location data collection requires your explicit consent via browser permission prompt. You can deny access or disable anytime via browser settings. Legal basis: Consent (Art 6(1)(a)) for precise location; legitimate interests (Art 6(1)(f)) for IP-based approximation. Location data is not stored permanently or shared with third parties beyond aggregate analytics.

‍4. How We Use Data & Legal Bases
Account/subscriptions (name, email, payments): Contract necessity (Art 6(1)(b)). Display listings (business content): Contract/legitimate interests. Performance reports (aggregate clicks/impressions): Legitimate interests (Art 6(1)(f)). Newsletter emails (email/name): Explicit consent (Art 6(1)(a)). Transactional emails (account email): Contract. Site analytics (tracking data): Legitimate interests. Security/fraud: Legitimate interests/legal obligation. Location personalization: Consent/legitimate interests.

‍5. Who We Share With
Processors only: Stripe (payments), Memberstack (accounts), Mailchimp/SendGrid (newsletters), Google (GA4 analytics). Aggregate stats to Advertisers (no personal data). Legal authorities if required. No sales/sharing for marketing.Transfers: Google (USA—EU-US Data Privacy Framework); others EEA-based with safeguards.

‍6. Data Retention
Accounts/Listings: Duration of subscription + 6 years. Newsletters: Until unsubscribe + 12 months (proof of consent). GA4 Analytics: 14 months. Location data: Session only (not stored). Marketing suppression lists: Permanent.

‍7. Your Rights (UK GDPR)
You have rights of access, rectification, erasure ("right to be forgotten"), restriction, portability, and objection to marketing/location processing. You can withdraw consent at any time (easy unsubscribe links, browser location settings). Email info@m6giraffe.com for requests - response within 1 month.

‍8. Children's Privacy
Site intended for users aged 18+. We do not knowingly collect data from children.

‍9. Security
All data transmitted via HTTPS encryption. We use secure processors with regular security audits.

‍10. Cookies & Tracking Technologies
Strictly Necessary cookies enable site login, forms, and session management (always allowed). Analytics/Performance cookies (Google GA4) track clicks to offers, page views, and usage patterns with IP anonymization enabled. Marketing cookies manage newsletter preferences (requires consent).Cookies used include: _ga/_gid (Google Analytics, 2 years/24 hours), _gat (performance, 1 minute), session IDs (Memberstack), m6_consent (banner preferences, 12 months).Your controls: Cookie banner on first visit (choose Analytics/Marketing or reject), browser settings, GA4 opt-out at tools.google.com/dlpage/gaoptout, unsubscribe emails anytime. PECR compliance: Explicit consent required for non-essential cookies/marketing—no pre-ticked boxes.

‍11. Third Party Tracking
Google Analytics 4: IP anonymization (last octet masked), no personal data combined with identifiers. Data processed in EEA/USA under EU-US Data Privacy Framework. GTM manages GA4 tags only—no ad targeting.

‍12. Changes to Policy
Updates posted on this page. Material changes emailed to registered users/subscribers.

‍13. Contact
Apprian Limited
South Planks Farm, Garstang Road, Barton, Preston, PR3 5AB
info@m6giraffe.com