Legal

Privacy Policy

Last updated: 30 April 2026

1. Introduction

Globopay Technologies Limited ("Globopay", "we") is committed to protecting the privacy and security of personal and business data. This Privacy Policy explains what data we collect, how we use it, and the rights available to you.

2. Data We Collect

We collect the following categories of data:

  • Business data: company name, registration details, business addresses, beneficial ownership, and authorized representatives.
  • User data: name, email, phone number, role, and authentication credentials.
  • Transactional data: payment instructions, amounts, currencies, counterparties, timestamps, and settlement information.
  • Technical data: IP address, device identifiers, browser information, API usage logs, and security event data.

3. How We Use Personal and Transactional Data

We use data to provide, secure, and improve the Services, including to:

  • Process payments, collections, and settlements;
  • Perform fraud detection, risk scoring, and compliance screening;
  • Operate, monitor, and maintain the platform;
  • Comply with legal, regulatory, and reporting obligations;
  • Communicate with you about service-related matters.

4. Data Sharing with Partners

To deliver cross-border payment infrastructure, we share data with:

  • Payment providers, acquirers, banks, and mobile money operators;
  • KYC, AML, sanctions screening, and fraud prevention partners;
  • Regulators, supervisory authorities, and law enforcement where legally required;
  • Approved sub-processors providing cloud hosting, monitoring, and security.

We require partners to maintain appropriate confidentiality and security safeguards.

5. Data Security Measures

We apply administrative, technical, and physical safeguards including encryption in transit and at rest, role-based access controls, network segmentation, audit logging, regular security testing, and incident response procedures aligned with industry best practice.

6. Data Retention

We retain data for as long as necessary to provide the Services and to meet our legal, regulatory, accounting, or reporting obligations. Transactional and compliance records may be retained for periods mandated by financial regulation.

7. User Rights and Data Access

Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact us at privacy@globopay.tech. Some rights may be limited where data is required for regulatory or contractual purposes.

8. Cookies and Tracking

We use cookies and similar technologies to operate the website, remember preferences, secure sessions, and analyze usage. You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

9. International Data Transfers

Where data is transferred across borders, we use appropriate safeguards consistent with applicable data protection laws to ensure your data remains protected.

10. Compliance with Applicable Data Protection Laws

Globopay processes data in accordance with the Data Protection Act of Zambia and other applicable data protection laws in the jurisdictions where we operate. Where required, we cooperate with supervisory authorities.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the platform or by email. Continued use of the Services constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or to exercise your rights, contact privacy@globopay.tech or write to Globopay Technologies Limited, 1995 Off Palm Drive, Chelston, Lusaka, Zambia.