Privacy Policy
Global Gateway Services Limited ("we", "us", or "our") is committed to protecting your privacy and ensuring that your personal data is handled in a safe, secure, and transparent manner. This Privacy Policy outlines how we collect, use, store, and disclose your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and guidance provided by the Information Commissioner's Office (ICO). By engaging with us or using our services, you agree to the terms set out in this policy.
We are a company registered in Scotland under company number SC768549 and act as a data controller in respect of the personal data we process. Our services include providing currency exchange and payment solutions, often in partnership with regulated financial institutions. We are registered with the ICO and aim to uphold the highest standards of privacy and data governance. If you have any questions about this policy, or if you would like to exercise any of your rights as outlined below, you may contact us by email at [email protected].
-
We collect personal information that is necessary for us to carry out our services effectively and to meet our legal and regulatory obligations. This includes information that identifies you directly such as your full name, date of birth, contact details including email address, residential or business address, and telephone number. We may also collect information that is necessary to verify your identity and comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations. This may include copies of identification documents, proof of address, nationality, country of residence, and where applicable, your national insurance number or tax identification number.
In addition to identity and compliance-related information, we may process financial and transactional data including your bank account details, beneficiary information, transaction history, and currency exchange preferences. We may also collect technical data relating to your device and browsing behaviour, such as your IP address, browser type, referring site, and activity logs when you interact with our website or digital tools. Where you opt in to receive marketing communications, we may also maintain records of your preferences and engagement with our messages.
-
We collect information directly from you when you complete forms on our website, engage with us via email or telephone, or provide documents to us as part of the client onboarding process. We may also receive information through secure third-party providers who assist with identity verification, compliance screening, or transaction processing. In some cases, we may obtain information from publicly accessible sources, such as Companies House, or from external databases used to support due diligence and credit assessments.
-
We collect and use your personal data in order to provide our services to you efficiently and securely. This includes verifying your identity, processing currency exchanges and payments, fulfilling our contractual obligations, and managing your relationship with us as a client. We also use your information to comply with legal obligations under financial regulation, including AML, CTF, and taxation laws.
We may also use your information to communicate with you about your account, respond to your enquiries, and provide you with relevant updates and service notifications. Where you have given us your consent, we may contact you with marketing materials or insights relevant to the services you receive or have expressed interest in. You may withdraw your consent at any time by contacting us at [email protected].
We will not use your personal data for automated decision-making without human involvement, and we will not process your information in a way that is incompatible with the purposes outlined in this policy.
-
Under the UK GDPR, we must have a valid lawful basis to process your personal information. In most cases, the processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. In other circumstances, we may need to process your data in order to comply with a legal obligation, such as our responsibilities under AML regulations.
Where we process your data based on our legitimate interests, we ensure that our interests do not override your rights and freedoms. In some cases, we rely on your explicit consent, particularly in relation to marketing communications. If we require your consent, we will ensure it is informed, freely given, and capable of being withdrawn at any time.
-
We treat your information with the utmost confidentiality and only share it where necessary. Your data may be shared with regulated third-party partners, including payment service providers such as Sciopay Ltd, which is authorised and regulated by the Financial Conduct Authority under Firm Reference Number 927951, and registered with HMRC as a Money Service Business. We may also share data with professional service providers such as legal, compliance, and audit firms, or technology providers who assist in hosting and securing our systems.
We may be legally required to disclose your information to government authorities, regulators, or law enforcement bodies under specific circumstances. Any such disclosures will be made in accordance with UK law and our regulatory obligations. We do not sell, lease, or trade your personal data with any external parties for commercial gain.
-
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting, and reporting requirements. The retention period may vary depending on the nature of your relationship with us and the type of data held. In most cases, we will retain your data for up to six years after the end of our relationship, unless a longer period is required by law. Once the applicable retention period has passed, your personal data will be securely deleted or anonymised.
-
We take the security of your personal data seriously and implement robust technical and organisational measures to prevent unauthorised access, alteration, disclosure, or destruction. These include secure data storage, encryption, access controls, and staff training. We ensure that any third parties we engage also meet stringent data protection standards and are contractually bound to safeguard your information.
-
Under UK data protection law, you have specific rights in relation to your personal data. These include the right to request access to the data we hold about you, to request correction of inaccurate or incomplete information, and to request deletion or restriction of your data in certain circumstances. You also have the right to object to certain types of processing, including direct marketing, and the right to request the transfer of your data to another provider.
If we are processing your information based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.
If you would like to exercise any of your rights, please contact us by email at [email protected]. We may request proof of identity to verify your request and will respond within the timeframe required by law.
If you are not satisfied with our response or believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
-
Our website may use cookies or similar technologies to enhance your user experience, improve performance, and analyse site traffic. Cookies are small text files stored on your device that allow us to recognise your browser and capture usage data. You can control or disable cookies through your browser settings at any time. By continuing to use our website, you consent to our use of cookies in accordance with this policy. We do not use cookies to collect personally identifiable information unless you explicitly provide it through our website forms.
-
We reserve the right to update or amend this Privacy Policy at any time in response to changes in the law, our services, or data practices. Any changes will be published on our website, and where appropriate, we will notify you directly. We encourage you to review this policy periodically to stay informed about how we are protecting your information. If you require further information about how we process your personal data, or if you wish to exercise any of your rights, please contact us at: [email protected]