Privacy Notice

Last updated 2 August 2026.

1. Who we are

Globe Connected is operated by Globe Connected Limited (trading as Globe Connected), registered under number 166707. Our registered address and principal place of business is:

10 Fremont Perle, La Route Du Mont Mado, St John, JE3 4DN, Jersey

We are the controller for the personal data we collect about visitors to this site and users of our services. When you use this site or buy a paid service you are contracting with us.

For any privacy question, or to exercise your rights, email [email protected] or write to us at the address above.

2. Payments are handled by Paddle

Paddle.com Market Limited is our reseller and the merchant of record for every paid service on this site. Paddle collects your billing and payment data directly at checkout and is an independent controller of it — we never see or store your card details. Paddle's handling of that data is governed by Paddle's privacy notice.

3. What we collect, why, and on what legal basis

Data	Why we use it	Legal basis
Account data — name, username, email address, hashed password, account status, verification and join dates	Creating and running your account, authenticating you, verifying your email, sending service messages	Performance of a contract
Listing and classified content you submit — business or seller name, postal address, telephone number, email address, website, description, images	Publishing your entry in the directory or classifieds as you asked us to, and letting other users contact you about it. This content is public by design	Performance of a contract
Directory information compiled from public and third-party sources, which may include the contact details of a sole trader	Maintaining a useful business directory	Legitimate interests — running a directory of businesses and organisations that users expect to find listed
Moderation records — automated and human decisions on your submissions, reasons, and duplicate checks	Keeping the directory and classifieds accurate, lawful and free of spam and fraud, and handling appeals	Legitimate interests — content moderation and platform integrity; legal obligation where content must be removed
Subscription and entitlement records — the Paddle customer, subscription and transaction identifiers Paddle sends us, plan, status, renewal dates, slot and upgrade entitlements, credit balances and ledger entries	Giving you what you paid for, showing your billing state, applying refunds, chargebacks and adjustments	Performance of a contract; legal obligation for financial records
Advertising delivery data — impressions, clicks, campaign days, a random visitor identifier stored in a cookie where you have accepted optional cookies, and otherwise a short-lived hash of your IP address and browser user agent	Counting impressions and clicks for advertiser reporting, de-duplicating repeat views, filtering bots and preventing metric abuse	Consent for the cookie-based identifier; legitimate interests — accurate advertising measurement and fraud prevention — for the fallback and for bot filtering
Technical and security data — IP address, browser user agent, request and error logs, rate-limiting and login-throttling records	Keeping the service secure and available, investigating abuse, diagnosing faults	Legitimate interests — security, abuse prevention and service reliability
Correspondence — messages you send us and our replies	Answering you and keeping a record of what was agreed	Legitimate interests — customer support; performance of a contract where it concerns a paid service
Analytics data — pages viewed, referrers, approximate location, device and browser characteristics	Understanding how the site is used so we can improve it	Consent

Where we rely on legitimate interests we have considered the impact on you and use the least intrusive option that achieves the purpose. You can object — see section 7.

We do not sell personal data, and we do not use it for automated decisions that have a legal or similarly significant effect on you. Content moderation is automated in part, but a listing decision you disagree with can always be reviewed by a person — just contact us.

4. Who we share it with

• Paddle.com Market Limited, as merchant of record, for the sale of our paid services, subscription management and payments, and tax compliance and invoicing.
• Service providers acting on our instructions — our hosting and infrastructure provider, our email delivery provider, our search provider (Meilisearch), our analytics provider (Google Analytics), and our error-monitoring and logging tools. Each is bound by a written contract to process personal data only for us.
• OpenAI, which we use to screen submitted listings and classifieds for spam and prohibited content. Submitted content, which may include contact details you have chosen to publish, is sent for that check. It is not used to train models.
• Advertisers, who receive aggregate campaign reporting only — never data that identifies an individual visitor.
• Professional advisers — our lawyers, accountants and auditors, where they need it to advise us.
• Authorities, courts and other third parties where we are required to disclose by law, or where disclosure is necessary to establish or defend legal claims or to protect the rights or safety of others.
• A buyer or successor, if the business is reorganised, sold or transferred, subject to this notice.

5. International transfers

Some of our providers, including Google Analytics, OpenAI and Paddle, process data outside Jersey, the United Kingdom and the EEA — including in the United States. Where that happens we rely on an adequacy decision covering the destination country, or on the UK International Data Transfer Agreement or the EU standard contractual clauses together with the relevant addendum, and we assess whether additional safeguards are needed. You can ask us for details of the safeguards applying to a particular transfer.

6. How long we keep it

• Account data — while your account is open, then up to 12 months after closure to handle disputes and prevent re-registration abuse.
• Published listings and classifieds — while published. Classifieds expire automatically 30 days after publication or renewal; expired and removed items are retained for up to 12 months, then deleted.
• Moderation records — up to 24 months after the decision, so repeat problems and appeals can be handled.
• Billing, entitlement and credit-ledger records — 7 years, to meet accounting and tax obligations.
• Advertising metrics — identifier-level records up to 13 months; aggregate campaign reporting is kept indefinitely.
• Security and request logs — up to 90 days, longer only where retained for a specific investigation.
• Correspondence — up to 24 months after the matter is closed.

When data is no longer needed for the purpose we collected it for we delete it, or irreversibly anonymise it so it can no longer be linked to you.

7. Your rights

You have the right to:

• access the personal data we hold about you, and get a copy;
• rectify data that is inaccurate or incomplete;
• erase your data where we no longer have grounds to keep it;
• restrict our processing while a dispute about accuracy or grounds is resolved;
• portability — receive the data you gave us in a machine-readable format, or have it sent to another provider;
• object to processing based on legitimate interests, and to direct marketing at any time; and
• withdraw consent at any time where we rely on it, without affecting processing already carried out.

Email [email protected] to exercise any of these. We reply within one month, and will tell you if we need the extension the law allows for a complex request. We may ask you to confirm your identity first. Exercising your rights is free; we only charge where a request is manifestly unfounded or excessive.

You can also complain to a data protection authority: in Jersey the Office of the Information Commissioner (jerseyoic.org), in the UK the Information Commissioner's Office (ico.org.uk), or your local supervisory authority in the EEA. We would rather you came to us first so we can put things right.

8. Security

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit over HTTPS, one-way hashing of passwords, role-based access limited to staff who need it, signed and short-lived URLs for advertising metrics, rate limiting and login throttling, and logging of administrative actions. No system is completely secure, so we also keep breach-response procedures and will notify you and the relevant authority where the law requires it.

9. Cookies

We use a small number of cookies. Optional ones are only set after you accept them in our cookie banner — until then, Google Analytics is loaded with storage denied and stores nothing on your device, and we set no advertising identifier.

Essential — no consent needed

• A session cookie and a CSRF token cookie, needed to log you in and to protect forms. If you choose to stay logged in, a “remember me” cookie.
• A gc_cookie_consent cookie recording your cookie choice, kept for 12 months. Without it we would have to ask you on every page.

These cannot be switched off without breaking the site.

Optional — only with your consent

• Analytics — Google Analytics cookies, which tell us how the site is used in aggregate. We do not use them to identify you, and we do not use Google's advertising or cross-site tracking features.
• Advertising measurement — a gc_ad_visitor cookie holding a random identifier, kept for up to 12 months, used only to avoid counting the same visitor's ad view repeatedly. It does not track you across other websites. If you decline, we count views using a short-lived hash of your IP address and browser instead, which is less accurate but sets nothing on your device. If you withdraw consent we delete the identifier.

To manage your preferences, reopen the cookie banner and change your answer. You can also block or delete any cookie in your browser settings, browse in private mode, or opt out of Google Analytics everywhere using Google's opt-out browser add-on. Blocking essential cookies will stop you logging in.

10. Children

Globe Connected is for people aged 18 and over. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

11. Changes to this notice

We may update this notice. The version on this page is the current one and the date at the top shows when it last changed. If a change materially affects how we use your data we will tell you directly.