Privacy Policy

1) Scope

This Privacy Policy explains how GBFSI collects, uses, shares, and protects information when you visit our website, submit forms, book consultations, exchange documents, or otherwise use our Services.

2) Information we collect

Information you provide:

Financing information (project summaries, use of funds, location, required amount, financial statements, bank statements, tax returns, cap tables, ownership and control details, collateral data, appraisals, leases);

Compliance data (KYC information, IDs where permitted, certifications, beneficial-owner details, sanctions/PEP screening results);

Communications (emails, messages, meeting notes, call recordings where permitted by law).

Information we collect automatically:

Device and usage data (IP address, browser type, pages viewed, referring/exit pages, timestamps);

Cookies, pixels, and similar technologies for analytics, session management, and preference storage.

Information from third parties:

Public sources and commercial databases;

Referral partners, advisors, brokers;

Funding Providers during underwriting or syndication;

Verification vendors (identity, sanctions, credit, and fraud checks where permitted).

3) How we use information

We use information to:

Evaluate financing options and provide introductions to Funding Providers;

Underwrite, diligence, structure, and syndicate potential transactions;

Operate, secure, and improve the Services;

Communicate about requests, updates, and legal notices;

Conduct compliance activities (KYC/AML, sanctions, anti-fraud);

Perform research, analytics, and reporting;

Market our Services (you may opt out of marketing at any time);

Comply with law, enforce agreements, and protect rights.

4) Legal bases (where applicable)

For visitors in the EEA/UK, we rely on one or more lawful bases: performance of a contract, legitimate interests (e.g., providing and improving Services, fraud prevention), legal obligation (e.g., KYC/AML), and consent (e.g., certain marketing or cookie uses).

5) Sharing of information

We may share information with:

Funding Providers and institutional partners you authorize us to approach;

Service providers (IT hosting, cloud storage, analytics, identity verification, document collection, e-signature, CRM, email services);

Professional advisors (legal, tax, accounting) under confidentiality;

Authorities where required by law, regulation, court order, or to protect rights;

Successors in the context of a merger, acquisition, or financing of GBFSI.

6) Cookies & analytics

We use cookies and similar technologies for site functionality, security, and analytics. You can adjust cookie settings in your browser. Some features may not function properly without certain cookies.

7) Data security

We employ administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and logging. No method of transmission or storage is 100% secure; you use the Services at your own risk.

8) Data retention

We retain information for as long as reasonably necessary to provide the Services, meet legal and compliance obligations (including KYC/AML retention periods), resolve disputes, and enforce agreements.

9) International transfers

Your information may be transferred to, stored, and processed in countries other than your own. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

10) Your choices

Marketing: opt out via the unsubscribe link in emails or by contacting us.

Cookies: manage in your browser or device settings.

Account/data updates: contact us to update or correct information.

11) Your rights (jurisdiction-specific)

California (CCPA/CPRA): California residents may have rights to know/access, correct, delete, and opt out of “sale”/“sharing” of personal information and to limit use of sensitive personal information. To exercise rights or opt out, contact us at justin@gbfsinternational.com .

EEA/UK (GDPR): You may have rights to access, rectify, erase, restrict or object to processing, data portability, and to lodge a complaint with your local supervisory authority. Where consent is our legal basis, you may withdraw consent at any time.

12) Children’s privacy

Our Services are directed to businesses and are not intended for children under 16. We do not knowingly collect personal information from children.

13) Third-party sites

Our site may link to third-party websites. We are not responsible for their privacy practices. Review their policies before providing information.

14) Changes to this Policy

We may update this Policy from time to time. The “Last updated” date indicates the effective date. Material changes will be posted on this page.