Legal

Privacy Policy

What we collect when you use the matcher or contact us, why we hold it, who we share it with, and the rights you have over it.

Last updated September 2026

1.Controller

Velivion Ltd, a company registered in Cyprus under number HE 495527, is the controller of the personal data collected through GlobalBusinessAccounts.com. Contact us at support@globalbusinessaccounts.com for anything in this notice.

2.What we collect

We keep this to the minimum we need to answer you and to introduce you to a provider or an advisor.

  • Details you send us: name, work email, phone, company name, country of registration, industry, residency, expected volumes and the currencies you need.
  • Matching answers: the choices you make in the bank matcher and any notes you add.
  • Technical data: IP address, browser type, pages viewed and referring page, collected through our analytics.
  • Correspondence: emails and messages you exchange with us.

3.Why we use it, and our legal basis

  • To answer your enquiry and produce a shortlist, on the basis of taking steps at your request before a contract, or our legitimate interest in responding.
  • To introduce you to a provider or advisor you asked about, on the basis of your request or your consent.
  • To send you updates or offers by email, on the basis of consent, which you can withdraw in any message.
  • To measure and improve the site, on the basis of our legitimate interest, and consent where a cookie needs it.
  • To meet legal, accounting and anti-money-laundering duties, on the basis of legal obligation.

4.Who we share it with

We share your details with a bank, e-money provider or advisor only when you ask us to introduce you, and only what they need to assess the application. They then act as their own controller under their own privacy notice.

We also use service providers who process data on our behalf: hosting, email delivery, customer support and analytics tools. They act on our instructions only.

We never sell your personal data.

5.International transfers

Some providers and tools operate outside the European Economic Area. Where that happens we rely on an adequacy decision or on the European Commission's standard contractual clauses, together with appropriate safeguards.

6.How long we keep it

Enquiry and matching data is kept for up to 24 months after our last contact, unless you ask us to delete it sooner. Records we must keep for accounting or compliance reasons are held for the period the law requires. Analytics data is kept in aggregated form.

7.Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest or to direct marketing. Where we rely on consent you can withdraw it at any time.

Write to support@globalbusinessaccounts.com and we will answer within 30 days. You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to your local supervisory authority.

8.Automated matching and AI

Our bank matcher is a rules-based and AI-assisted tool that suggests providers from the answers you give. It produces suggestions for a human to review, it makes no decision about you, and it does not assess your creditworthiness or score you.

You are always dealing with software when you use the matcher, and you can ask a person to review any shortlist by emailing us. Account decisions are made by the provider, not by us and not by the tool.

9.Security and children

We use encryption in transit, access controls and vetted processors. No online service is perfectly secure, so please do not send passwords or full identity documents by email unless we ask you to use a secure channel.

The site is for business use and is not intended for anyone under 18.

Who to contact

GlobalBusinessAccounts is a brand of Velivion Ltd, registered in Cyprus under company number HE 495527. For any question about this notice, your data, or the content of the site, write to support@globalbusinessaccounts.com. We answer legal and privacy requests within 30 days.