GLOBAL SECURE
Privacy Policy
Last updated: 30 October 2026
In short: Global Secure Technologies Limited ("Global Secure Business", "we", "us") runs the Global Secure Business website and apps. We collect only what we need to give you the service, keep you and your money safe, and meet our legal duties. We never sell your personal data. Regulated services (such as accounts, cards and investing) are provided by licensed partners, who also handle your data under their own privacy notices. You can contact us about your data at any time at [email protected].
- Who we are
- What we collect
- How and why we use it
- Self-custody wallet
- Who we share it with
- International transfers
- How long we keep it
- Your rights
- Automated checks
- Security
- Cookies and analytics
- Children
- Changes
- Contact and complaints
1. Who we are
The data controller for the Global Secure Business website and apps is Global Secure Technologies Limited, a company registered in Ireland (company number 820752), Spring House, Kilshane, Co. Tipperary, E34 TW44, Ireland.
Some services in the app are provided by licensed partners (for example, payment accounts and cards, identity verification and investing). Where a partner provides a regulated service to you directly, that partner is also a controller of your data for that service, and its own privacy notice applies alongside this one. We tell you who the partner is in the app before you use the service.
2. What we collect
Information you give us
- Account details: name, email address, mobile number, date of birth, country and home address.
- Identity verification: photo ID, a selfie or short video for liveness checks, and related information, when you use a service that requires it (such as an account, card or investing). This is collected by our verification partner.
- Financial and tax information: where required for regulated services, such as source of funds, employment, tax residency and tax identification number.
- Preferences: for example, your Everyday Savings choices (where savings go), currency, language and notification settings.
- Communications: messages you send to support, and your feedback.
Information created when you use the app
- Transactions: payments, transfers, card spending, purchases of gift cards and eSIMs, investments, and the rewards and savings linked to them.
- Wallet addresses and blockchain activity: public wallet addresses linked to your account and the transactions on them (blockchains are public by design).
- Device and security information: device type, operating system, app version, IP address, approximate location derived from IP, sign-in and authorisation events, and fraud signals.
- Usage and diagnostics: which screens and features you use, and error reports, so we can fix problems and improve the app.
Information from others
- Results of identity, sanctions, politically exposed person (PEP) and fraud checks from our partners.
- Blockchain analytics (for example, risk scores on wallet addresses) for anti-money-laundering purposes.
- Information from partners you choose to connect (for example, a mortgage or bank you link for Everyday Savings).
We do not ask for special category data (such as health or religion). Facial images used for liveness checks are processed by our verification partner only to confirm your identity, with your consent where the law requires it.
3. How and why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account; provide wallets, payments, cards, rewards, eSIMs and investing | Performance of our contract with you |
| Verify your identity; anti-money-laundering, sanctions and fraud checks; record keeping | Legal obligation; legitimate interests in preventing fraud |
| Security: sign-in codes, step-up authorisation, suspicious-activity alerts | Performance of contract; legitimate interests in keeping accounts secure |
| Customer support and service messages | Performance of contract |
| Fix errors and improve the app (diagnostics and usage analytics) | Legitimate interests; consent where required for non-essential analytics |
| Marketing emails or notifications about new features and offers | Consent (you can withdraw it at any time) |
| Comply with requests from regulators, courts and law enforcement | Legal obligation |
4. Self-custody wallet
If you use the self-custody wallet, your private keys are generated and kept on your device using our wallet technology partner's secure key infrastructure. We do not hold your keys and cannot move your crypto without you. We do see public information about your wallet (addresses, balances and transactions) to show it in the app and to meet our anti-money-laundering duties.
5. Who we share it with
We share personal data only with organisations that help us provide the service, under contracts that require them to protect it, or where the law requires. We never sell your data.
| Type of partner | What they do |
|---|---|
| Banking, payment account and card partners | Provide regulated accounts, IBANs, currency exchange and cards; carry out their own identity and AML checks |
| Digital asset custody and wallet infrastructure (e.g. Fireblocks) | Secure wallet technology, transaction processing and blockchain AML screening |
| Identity verification (e.g. Veriff) | Check your ID document and confirm it is really you |
| Investing partner (e.g. Alpaca) | Provide brokerage accounts and carry out trades |
| Crypto purchase and sale providers | Let you buy and sell crypto with cards or bank transfers (each runs its own checks) |
| Rewards and gift card partner (e.g. Tillo) | Issue gift cards and vouchers you buy |
| eSIM partner (e.g. 1GLOBAL) | Provide mobile data and phone plans |
| Travel benefit partners (e.g. lounge access, travel insurance) | Provide membership benefits you choose to use |
| Cloud hosting (Amazon Web Services, Ireland region) | Host our systems and store data securely |
| Communications (e.g. Twilio) | Send sign-in codes, text messages and emails |
| Push notifications (Google Firebase, Apple) | Deliver app notifications |
| Error monitoring (Sentry, EU data region) and analytics (PostHog, EU data region) | Help us find bugs and understand how the app is used |
| Blockchain data providers (e.g. Alchemy) | Read public blockchain data such as balances and transactions |
| Professional advisers, auditors, regulators, courts and law enforcement | Where required by law or to protect our legal rights |
| A buyer or successor of our business | If our business is sold or merged, under equivalent protections |
When you send crypto, the transaction is recorded on a public blockchain. This is outside our control and cannot be deleted.
6. International transfers
We store data in the European Economic Area wherever possible. Some partners process data outside the EEA (for example, in the United States or the United Kingdom). When that happens we use legal safeguards approved under GDPR, such as an adequacy decision (including the EU-US Data Privacy Framework where the partner is certified) or the European Commission's Standard Contractual Clauses, with extra security measures where needed. You can ask us for a copy of the relevant safeguards.
7. How long we keep it
- Account, identity and transaction records: for as long as you have an account, then generally for 5 years after it closes, as anti-money-laundering law requires (longer if a regulator or legal case requires it).
- Support messages: up to 3 years after your last contact.
- Diagnostics and analytics: usually up to 12 months, in a form that does not directly identify you where possible.
- Marketing preferences: until you withdraw consent or close your account.
After these periods we delete or anonymise the data.
8. Your rights
Under GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- ask us to delete your data (subject to what we must keep by law);
- restrict or object to certain uses, including use based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting what was done before;
- ask for a human review of decisions made only by automated means.
To use any of these rights, email [email protected] or use the options in the app. We will reply within one month, and we may need to confirm your identity first. It is free in most cases.
9. Automated checks
To protect you and meet our legal duties, some checks run automatically, such as identity matching, sanctions screening, wallet risk scoring and fraud detection. These can lead to a transaction being held or an application being declined. If this happens you can contact us, give your point of view and ask for a person to review the decision.
10. Security
We protect your data with encryption in transit and at rest, strict access controls, secure key management, step-up authorisation (Face ID, PIN or password) for sensitive actions, and continuous monitoring. Secrets and keys are kept in dedicated secure storage, never in the app itself. No system is perfectly secure, so please keep your device and sign-in details safe and tell us straight away if you suspect anything.
11. Cookies and analytics
Our website and web app use essential cookies and local storage to keep you signed in and remember your settings. We use analytics and error reporting to improve the service. Where the law requires consent for non-essential cookies or analytics, we ask for it first, and you can change your choice at any time.
12. Children
Global Secure Business is for people aged 18 or over. We do not knowingly collect data from children. If you think a child has given us their data, please contact us and we will delete it.
13. Changes to this policy
We may update this policy as our services change. We will show the date of the latest version at the top, and tell you in the app or by email about significant changes.
14. Contact and complaints
For any question about your data, contact us at [email protected], or write to Global Secure Technologies Limited, Spring House, Kilshane, Co. Tipperary, E34 TW44, Ireland.
You also have the right to complain to the Irish Data Protection Commission (www.dataprotection.ie), or to the data protection authority in the country where you live or work. We'd appreciate the chance to sort out your concern first.