Our Privacy Policy

This Privacy Policy explains how GSB collects, uses, stores and protects your personal data when you visit our website, contact us or otherwise interact with us.

For the purposes of this Privacy Policy, references to “GSB”, “we”, “us” or “our” mean GSB CapitaL Ltd, as applicable to the processing of your personal data.

What personal data do we collect?

Depending on how you interact with us, we may collect the following personal data:

Your name;
Job title and profession;
Contact information, such as your email address and telephone number;
Information you provide when making an enquiry or completing a form on our website;
Information you provide when requesting information about our products or services;
Marketing and communication preferences;
Information contained in correspondence or communications with us;
IP address and other technical information collected when you use our website;
Web browser type and version;
Operating system and device information; and
Information about how you use and interact with our website.

We may also collect additional personal data where necessary to provide our services or comply with our legal and regulatory obligations. Where this applies, we will provide appropriate information about how your personal data is used.

How do we collect your data?

We collect personal data in a number of ways, including when you:

Contact us through our website, by telephone, post or email;
Complete and submit a form on our website;
Enquire about or use our products or services;
Subscribe to or request marketing communications from us;
Attend or register for an event, webinar or other GSB activity;
Provide feedback or otherwise communicate with us; or
Use or browse our website.

We may also collect certain technical information automatically through cookies and similar technologies when you use our website.

In some circumstances, we may receive personal data from third parties or publicly available sources where permitted by law.

How will we use your data?

We may use your personal data to:

Respond to enquiries and requests;
Provide information about our products and services;
Provide and administer our services;
Manage our relationship and communications with you;
Maintain our business and regulatory records;
Meet our legal, regulatory and compliance obligations;
Prevent, detect and investigate fraud, financial crime, security incidents or misuse of our services;
Operate, maintain, secure and improve our website;
Understand how visitors use our website and improve its content and functionality;
Send marketing communications where permitted by law;
Manage events, webinars and other activities you have registered for; and
Establish, exercise or defend legal claims where necessary.

We will only use your personal data for the purposes for which it was collected unless we reasonably consider that we need to use it for another compatible purpose or are otherwise permitted or required to do so by law.

Our lawful bases for processing your personal data

Under UK data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we may rely on one or more of the following:

Contract: where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.
Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.
Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and interests. This may include responding to enquiries, managing our business relationships, improving our services, protecting our systems and maintaining the security of our website.
Consent: where you have given us consent to process your personal data for a particular purpose. Where we rely on consent, you can withdraw it at any time.

The lawful basis that applies will depend on the particular purpose for which we are processing your personal data.

Who do we share your personal data with?

We may share your personal data where necessary with:

Other companies within the GSB group;
Our employees, representatives and authorised personnel;
Professional advisers, including legal, compliance, audit and accounting advisers;
Technology, hosting, communications and other service providers that process personal data on our behalf;
Marketing, analytics and website service providers, where appropriate;
Regulators, supervisory authorities, law enforcement agencies, courts or other public authorities where required or permitted by law; and
Other third parties where necessary to provide our services, protect our legal rights or comply with our legal and regulatory obligations.

Where third parties process personal data on our behalf, we require them to handle it appropriately and in accordance with applicable data protection requirements.

We do not sell your personal data.

International transfers of personal data

As an international business, we may need to transfer or provide access to personal data outside the United Kingdom, including to other GSB group companies or service providers.

Where personal data is transferred to a country outside the United Kingdom (“UK”) that does not benefit from the UK adequacy regulations, the country may not provide the same level of data protection as the UK. Where required, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law and that appropriate safeguards are in place.

You can contact us using the details below if you would like further information about the safeguards that apply to international transfers of your personal data.

As per the UK adequacy regulation, the UAE does not benefit from having the same level of data protection laws as that of UK, so I think it’s good to include this. I’ll need to look into this a bit more and understand if there’s anything additional required from our side.

How do we protect your personal data?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet applicable legal, regulatory, accounting and reporting requirements.

The appropriate retention period will depend on factors including the nature and sensitivity of the personal data, the purposes for which it is processed, applicable legal or regulatory requirements and whether the information may be required to establish, exercise or defend legal claims.

When personal data is no longer required, we will securely delete or anonymise it in accordance with our applicable retention requirements.

Marketing

We may send you information about GSB products, services, insights, events or other information that we believe may be relevant to you where we are permitted to do so by law.

Where consent is required for marketing communications, we will ask for your consent before sending them.

You can ask us to stop sending you marketing communications at any time by using the unsubscribe link included in our marketing emails or by contacting us.

Opting out of marketing communications will not prevent us from contacting you where necessary in connection with services you receive from us or where we are otherwise required or permitted to communicate with you.

Cookies and similar technologies

Cookies are small text files placed on your device when you visit a website. They can be used to enable websites to function, remember preferences and provide information about how visitors interact with a website.

We may use cookies and similar technologies to:

Enable and maintain the functionality and security of our website;
Remember your preferences;
Understand how visitors use our website;
Measure and improve website performance; and
Support advertising and marketing activities, where you have provided any consent required by law.

Some cookies are necessary for our website to function and cannot be switched off through our cookie preferences. Other cookies, including certain analytics and advertising cookies, will only be used where permitted and, where required, after you have provided your consent.

You can manage your cookie preferences through the cookie controls available on our website. You can also control cookies through your browser settings, although disabling certain cookies may affect the functionality of the website.

For further general information about cookies, visit allaboutcookies.org.

Privacy policies of other websites

The GSB website may contain links to websites operated by other organisations.

This Privacy Policy applies only to GSB’s processing of your personal data. If you follow a link to another website, we recommend that you read that organisation’s privacy policy to understand how it collects and uses your personal data.

Your data protection rights

Depending on the circumstances and applicable data protection law, you may have the following rights in relation to your personal data:

The right to be informed about how we collect and use your personal data.
The right of access to the personal data we hold about you and to request a copy of that information.
The right to rectification if you believe that any personal data we hold about you is inaccurate or incomplete.
The right to erasure of your personal data in certain circumstances.
The right to restrict processing of your personal data in certain circumstances.
The right to object to processing of your personal data in certain circumstances.
The right to data portability, where applicable, allowing you to request that personal data you have provided to us is transferred to you or another organisation in a structured, commonly used and machine-readable format.
Rights relating to automated decision-making and profiling, where applicable.
The right to withdraw consent at any time where we rely on your consent to process your personal data. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights do not apply in all circumstances and may be subject to exemptions or limitations under applicable law.

How to exercise your rights or make a complaint

If you would like to exercise any of your data protection rights, or have a question or concern about how we use your personal data, please contact our Compliance team using the contact details below.

If you have a concern about how we have collected, used or handled your personal data, you can also submit a data protection complaint using the form below.

Make a data protection complaint

Please provide as much information as possible about your concern to help us investigate and respond appropriately.

Alternatively, contact us

If you would prefer not to use the form, you can contact our Compliance team directly at complaints@gsbglobal.com or +44 20 8050 8845.

If you are not satisfied with how we have handled your personal information or responded to your complaint, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Changes to our privacy policy

We keep this Privacy Policy under regular review and may update it from time to time to reflect changes to our practices, services or legal and regulatory requirements.

Any updates will be published on this page.

This Privacy Policy was last updated on 21 August 2026.