Privacy Policy
Global Plug Services Limited · Company No. 13758259
Overview
GLOBAL PLUG SERVICES(“we/us/our”) endeavour to maintain the highest standards of confidentiality and to respect the privacy of our customers (“you”) and associated persons who deal with us. Our commitment to privacy includes being transparent about the nature and extent of the personal data processing we undertake. This privacy notice aims to inform you about how we collect, store, use and disclose information about you when you:
interact or use our websites; or
if you use any of our products, services or applications (collectively the “services”) in any manner.
As a company with a global presence, we are subject to the varying requirements of data protection legislation in jurisdictions where we operate. Our aim is to be as consistent as possible and obey all applicable laws and apply the highest standard of privacy laws to our approach. For example, if you are a resident of the UK, we are bound by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are a resident of the EU, we are bound by EU local laws including the General Data Protection Regulation (“GDPR”) or if you are a resident of Nigeria, we are bound by the Nigerian Data Protection Act (NDPA) 2023 and all applicable laws governing data privacy globally.
Categories of Personal Data We Process or Collect
We collect and process the personal data that you provide when interacting with us, either online or via email, mobile, phone or post.
Such personal data may include the following:
First name and surname;
Postal address;
Email address;
Telephone number;
Gender, date of birth;
Country of residence, nationality, language preference;
Unique identifier information (e.g. your customer NIN and passport number);
Financial information (e.g. payment card or bank account information);
Some details provided by your device such as IP address, device ID, device type, and location data.
Source and Categories of Personal Data
The source of the above information is received from either yourself — for instance if you instruct someone to complete our forms on your behalf, we may receive the information from them. The category of information is Personal data. The information is only used for business purposes to supply the Service.
What We Use Your Personal Data For, and Our Legal Basis
We must have a legal basis to process your personal data. In most cases, that will be for us to provide the agreed service. The table below sets out the purposes for which we use your personal data and our legal basis for doing so:
| What we use your information for | Our legal basis for doing so |
|---|---|
| Provide you with access to our website and/or our mobile app | To provide the agreed service |
| Provide assistance for your passport application and travel assistance needs | To provide the agreed service |
| Process any payment required for the products and services you have requested | To provide the contracted service |
| Store your payment card details, in order to be able to take agreed payments, as explained in the Conditions of Use | To provide the contracted service |
| Provide you with information you have requested, including without limitation, quotations, service documentation, brochures, and responses to applications | Where we have your consent |
| Provide you with newsletters, and other communications about the services you have purchased or chosen to opt into | Where we have your consent |
| Offer customer surveys to improve our products and services | For our legitimate interests to improve our services |
| Analyse your usage of our services in order to be able to personalise your service and improve our products | For our legitimate interests to improve usage of our services |
| Respond to any enquiries from you regarding our services | To provide the agreed service |
| Meet our legal and regulatory obligations to investigate and prevent fraudulent activities | To comply with our legal obligations |
Personal Data Sharing and Transferring
We will not share, rent or sell your personal data to anyone unless you agree to this, or such sharing is necessary to fulfil our agreement with you, or we are legally allowed or required to do so. Moreover, your personal data will only be shared with selected organisations which comply with our security procedures and policies.
Organisations we may share your personal data with include:
Our trusted partners or service providers where they help provide or improve our services to you;
Third party service providers and subcontractors: We employ other companies and individuals to perform other functions on our behalf. Examples include processing credit card payment, customer services, progressing applications and analysing data. They help us provide our services to you. This is provided under written contract where the personal data is only processed for the specific business purpose of providing the service to you. Service providers are prohibited from selling the personal data that we supply to them in the terms of the contract;
A regulating body or other authority where we need to comply with a regulatory or legal obligation;
Fraud prevention or debt collection organisations when required to protect our legitimate interests;
Partners or clients with which we offer or engage in joint marketing activities;
With your consent: Other than as set out above, you will receive notice when information about you might go to third parties, and you will have the opportunity to choose not to share the information.
Where service is a benefit of your payment card issuer (such as your bank), we may share your personal data with that card issuer and the payment card brand associated with that card.
Some of those organisations may be based in a country outside the country of your residence or where different data privacy laws apply. We will only transfer your personal data to that country if they ensure an adequate level of protection of your rights and freedoms, or that organisation is contractually bound to meet requisite data protection law using approved model contract clauses.
Personal Data Protection and Storage
We handle your personal data in accordance with adequate and reasonable procedures and technologies in order to maintain and protect its security, availability, confidentiality and integrity, and prevent its unlawful or unauthorised processing, accidental loss or damage, from its collection until its destruction.
Where personal data is transmitted across the internet, it will be encrypted.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of your personal data, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Personal Data Disposal and Retention
We will only keep your personal data for as long as it is needed for the purposes for which it was collected and we will remove from our systems all personal data which is no longer required.
We will only retain your personal data for only as long as it is necessary and for a specified and limited purpose, where we are required to do so and in line with our retention policies, in order to meet a regulatory or legal obligation.
Your Rights
If you would like to access, review, update, rectify, and delete any personal data we hold about you, or exercise any other data subject right you can email us at passport@globalplugservices.co.uk. Our privacy team will examine your request and respond to you as quickly as possible.
Please note that we may still use any aggregated and de-identified personal data that does not identify any individual. We may also retain and use your information as necessary, for example, to comply with our legal obligations, resolve disputes, and enforce our agreements.
We respect all applicable local laws for data subject rights. For example, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, UK residents have certain rights regarding the personal data that businesses have about them. This includes the rights to request access or deletion of your personal data, as well as the right to direct a business to stop selling your personal data. We also offer data subject rights as defined under the GDPR as an additional arrangement.
| Your rights | Meaning |
|---|---|
| The right to object to the processing | You have the right to object to the processing of your personal data in certain situations. |
| The right to information | You have the right to be informed whether and to what extent we process your data. |
| The right of access | Subject to certain exceptions you have the right to obtain a confirmation as to whether or not we process your personal data, and if we do, request access to your data. |
| The right to rectification | If the personal data that we process is incomplete or incorrect, you have the right to request their completion or correction at any time. |
| The right to deletion | Subject to certain exceptions, if you consider that we should stop processing some or all of your personal data, you have the right to request its deletion. However, there may well be reasons why an immediate deletion may not be possible (for example where retention is required to meet legal or regulatory obligations). |
| The right to restrict the processing | You have the right to request that we restrict the processing of your personal data in certain situations:
|
| The right to data portability | Where the processing takes place on the basis of your consent or contract, and is carried out by automated means, you have the right to request that we provide your personal data to you in a machine-readable format. |
| Your rights in relation to automated decision making and profiling | You have the right to object to decisions based exclusively on the automated processing of your personal data. |
| The right to withdraw your consent | If your personal data is processed on basis of your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. |
If you wish to exercise your rights, you can get in touch with us by contacting the Data Protection Officers from the information on the “Contact Information” section of this privacy notice.
Once we receive your request, members of our Data Protection Team will endeavour to get back to you as soon as possible to confirm receipt. Where we use service providers to hold your personal data, a process exists to process the data subject right request also.
Our Website May Contain Links to Other Sites
We may have links to other sites promoting our partners and clients. These links may take you to other companies who have their own privacy notice and our privacy notice will not cover their use of data. They may collect additional information therefore we encourage you to look at these linked site privacy notices.
Business Transfers
We may choose to buy or sell assets and may share or transfer customer information in connection with the evaluation of these transactions. Also, if we, or our assets, are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, personal data could be one of the assets transferred to or acquired by a third party.
Security
We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction. We have written procedures and policies which are regularly audited, and the audits are reviewed at senior level.
Contact Information
To exercise any of your rights, or if you have any questions about our privacy notice, or if you wish to make a complaint about the use of your personal data, or want to report a security issue, please contact our Data Protection Officer via passport@globalplugservices.co.uk.
For the purposes of data protection legislation, GLOBAL PLUG SERVICES LTD, is a company registered in England and Wales with company number 13758259 and offices in 1st Floor, Highlands House, 165 The Broadway, Wimbledon London SW19 1NE.
If you are unsatisfied with our response, you can contact the Information Commissioner's Office (ICO). Further information can be found at https://ico.org.uk/.
Information Pertaining to Children
We do not knowingly collect or solicit personal data from anyone under the age of 18. If you are under 18, please do not attempt to register for our services or send any personal data about yourself to us. If we learn that we have collected personal data from a child under age 18, we will delete that information as quickly as possible. If you believe that a child under 18 may have provided us personal data, please contact us as soon as possible.
Automated Decision Making or Profiling
We do not engage in profiling or any processing related to automated decision-making activity.
Changes to Our Policy
We keep our privacy notice under regular review, and we will make new versions available on our privacy notice page on our website. This privacy notice was last updated on 26 June 2025.