Effective date: July 27, 2026. Last updated: July 27, 2026
Global Pay LTD (“Global Pay,” “we,” “us,” or “our“) provides global payment processing and credit card processing services to e-commerce merchants. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have regarding it.
This Policy applies to personal data collected through our website, our payment platform, our customer support channels, and in the course of providing our services
1. Who We Are
Global Pay LTD is a Belize IBC, with a registered address at #1 Mapp Street, Belize City, Belize, Central America, providing payment processing services to merchants worldwide through our proprietary payment platform.
For questions about this Policy or how we handle your personal data, contact us at:
Email: https://www.globalpayltd.com/contact/ Address: #1 Mapp Street, Belize City, Belize, Central America
If we act as a data processor on behalf of a merchant (for example, when processing a cardholder’s payment for a transaction with one of our merchant clients), the merchant is the data controller for that transaction, and you should also refer to their privacy policy.
2. What Personal Data We Collect
Depending on how you interact with us — as a website visitor, prospective merchant, existing merchant, or cardholder — we may collect:
- Identity and contact data: name, email address, phone number, job title, employer, mailing address.
- Account and business data: company registration details, business type, website URL, beneficial ownership information collected for onboarding and compliance purposes.
- Financial and transaction data: bank account details, billing address, transaction history, settlement information.
- Cardholder data: primary account number (PAN), cardholder name, expiration date, and service code, collected and processed strictly in accordance with PCI DSS requirements.
- Verification data: documents and information collected for identity verification, Know Your Customer (KYC), and Anti-Money Laundering (AML) checks.
- Technical data: IP address, browser type, device identifiers, and information collected via cookies (see Section 7).
- Communications: records of correspondence, support tickets, and survey or feedback responses.
We do not knowingly collect special category data (e.g., health, religious, or biometric data) except where a government-issued ID incidentally contains such information for identity verification purposes.
3. How We Collect Personal Data
- Directly from you — when you register for our services, complete onboarding/KYC forms, contact support, subscribe to updates, or use our website.
- From merchants — when a merchant processes a payment on their platform using our services, we receive cardholder and transaction data necessary to complete that transaction.
- From third parties, including:
- identity verification and fraud-screening providers (e.g., anti-fraud scoring services);
- credit reference and sanctions-screening agencies;
- banking and card network partners;
- publicly available sources (e.g., corporate registries), for business verification.
- Automatically, through cookies and similar technologies when you visit our website (see Section 7).
4. How We Use Your Personal Data
We use personal data for the following purposes, and only where we have a valid legal basis to do so:
| Purpose | Example | Legal basis |
| Providing our services | Processing payments, settlements, chargebacks | Performance of a contract |
| Onboarding and compliance | KYC/AML checks, sanctions screening | Legal obligation |
| Fraud prevention and security | Screening transactions for suspicious activity | Legitimate interest |
| Customer support | Responding to enquiries | Performance of a contract / legitimate interest |
| Marketing communications | Sending newsletters or offers | Consent |
| Website analytics | Understanding site usage | Consent (via cookie banner) / legitimate interest |
| Legal and regulatory reporting | Responding to regulator or law enforcement requests | Legal obligation |
Where we rely on legitimate interest, we balance our interests against your rights and freedoms, and will not process your data where your rights override that interest.
5. How We Share Personal Data
We do not sell your personal data. We may share it with:
- Payment networks, acquiring banks, and issuing banks — as necessary to process transactions.
- Service providers acting on our behalf, such as identity verification, fraud-screening, hosting, and IT support providers, under contractual confidentiality and data protection obligations.
- Professional advisors, including lawyers, auditors, and accountants, where necessary.
- Regulators and law enforcement, where required by law or to prevent fraud, money laundering, or other financial crime.
- Merchants, where relevant to a specific transaction you have made with them.
- A buyer or successor, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.
International transfers
As a global payment processor, your data may be transferred to and processed in countries outside your own, including countries that may not have data protection laws equivalent to your home jurisdiction. Where we transfer personal data internationally, we rely on one or more of the following safeguards:
- an adequacy decision by a relevant authority (e.g., the European Commission or UK authorities);
- Standard Contractual Clauses or an equivalent mechanism approved by the relevant regulator; or
- your explicit consent, where required.
6. Cardholder Data and PCI DSS
Where we process cardholder data (PAN, cardholder name, expiration date, service code), it is stored, processed, and transmitted in accordance with the Payment Card Industry Data Security Standard (PCI DSS). Access to cardholder data is restricted to personnel and systems that require it to perform their function, and is encrypted both in transit and at rest.
7. Cookies
Our website uses cookies and similar technologies to:
- ensure core site functionality;
- remember your preferences;
- analyze site traffic and usage (e.g., via Google Analytics); and
- measure the performance of marketing communications.
You can control or disable cookies through your browser settings, though this may affect site functionality. Non-essential cookies (analytics and marketing) are only set with your consent, obtained via our cookie banner.
8. Data Retention
We retain personal data only for as long as necessary to:
- provide our services and fulfill the purpose for which it was collected;
- comply with legal, regulatory, tax, or accounting obligations (payment and financial transaction records are typically retained for a minimum of 5–7 years under applicable financial regulations and card network rules); and
- establish, exercise, or defend legal claims.
9. Your Rights
Depending on your location, you may have the right to:
- Access a copy of the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data, subject to our legal retention obligations;
- Restrict or object to certain processing;
- Data portability for data you provided to us, processed by automated means;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at https://www.globalpayltd.com/contact/. We may need to verify your identity before responding, and will respond within the timeframe required by applicable law (e.g., one month under GDPR).
10. Marketing Communications
We will only send you marketing communications where you have opted in. You can withdraw consent and unsubscribe at any time using the link in any marketing email, or by contacting us directly.
11. Third-Party Links and Services
Our website and platform may contain links to third-party sites or services, including merchant websites. We are not responsible for the privacy practices of third parties. Please review their privacy policies separately.
12. Children’s Privacy
Our services are intended for businesses and individuals over the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post the updated version on this page with a revised “Last updated” date, and where changes are material, we will provide additional notice (e.g., by email or website banner).
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Global Pay LTD Email: https://www.globalpayltd.com/contact/ Address: #1 Mapp Street, Belize City, Belize, Central America