Privacy Policy

This Privacy Policy explains how Globapay Holdings Ltd. ("we", "us", or "our") collects, uses, shares, and protects personal data in accordance with GDPR and Irish data protection law.

Globapay Holdings Ltd.
20 Harcourt St
Dublin D02 H364
Ireland
Registered Company No: 781644

Email: [email protected]

This policy applies to personal data processed through:

• The Globapay website and platform
• B2B fintech services
• Customer support interactions
• Marketing communications
• Business partnership activities

We may collect:

• Business contact information
• Account and authentication data
• Transaction data
• Technical data (including IP address, browser/device details, logs, and cookies)
• Communications data from support and business interactions

We rely on lawful bases under GDPR Articles 6 and 9:

• Contractual necessity (Article 6(1)(b))
• Legal obligation (Article 6(1)(c))
• Legitimate interests (Article 6(1)(f))
• Consent (Article 6(1)(a))

We use personal data to provide services, process transactions, support users, protect security, improve products, meet legal requirements, and send marketing communications where consented.

We retain data only as long as needed and as required by law:

• Transaction records: 7 years
• Account data: account term plus 1 year
• Marketing data: until consent withdrawal or 2 years inactivity
• Technical/API logs: 12 months
• Support communications: 3 years

We may share data with service providers, integration partners, and legal/regulatory authorities when required. Processors are bound by GDPR-compliant DPAs.

Where data is transferred outside the EEA, we apply safeguards such as Standard Contractual Clauses, adequacy decisions, and supplementary measures.

We use essential cookies for security and site operation, and optional analytics/marketing cookies only where required consent has been given.

You can manage choices via Cookie Preferences at any time.

You may exercise rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact [email protected].

We maintain technical and organizational controls including encryption in transit, access controls, monitoring, secure architecture, staff training, and incident response procedures.

Where required, we notify the Irish Data Protection Commission within 72 hours and affected individuals without undue delay for high-risk breaches.

Our services are designed for business use and are not directed to individuals under 16.

We do not use automated decision-making or profiling that produces legal or similarly significant effects within the meaning of GDPR Article 22.

We conduct Data Protection Impact Assessments for high-risk processing activities under GDPR Article 35.

For privacy inquiries or rights requests:

Email: [email protected]
Address: Globapay Holdings Ltd., 20 Harcourt St, Dublin D02 H364, Ireland

We respond without undue delay and within one month, subject to lawful extensions for complex requests.

You can lodge a complaint with:

Data Protection Commission (Ireland)
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Phone: +353 578 684 800
Email: [email protected]
Website: www.dataprotection.ie

We may update this policy to reflect legal, regulatory, or operational changes. Material updates may be communicated by email, website notice, or platform notification.