Users may be subject to different protection standards and, therefore, broader standards may apply depending on their location. Users can contact the Owner to learn more about applicable standards.

This document contains a section dedicated to Users in the European Union (GDPR compliance) and their privacy rights, as well as a section on Australia residents’ privacy rights.

This Privacy Policy can be printed for reference by using the print command in the settings of any browser.

Global British Passports
Northam road
Bentleigh East, Victoria, 3165, Australia
Email: hello@globalbritishpassports.com

This Application may collect various categories of Personal Data, either directly from Users or indirectly through third parties. The types of data collected may include, but are not limited to:

1. Personal Identification Data – such as name, residential address, date of birth, passport details, and contact information.
2. Communicated Data – including documents and information submitted by Users in connection with applications, renewals, or other service-related processes.
3. Payment Information – such as credit or debit card details, which are securely processed through our third-party payment provider (e.g., Stripe or PayPal).
4. Usage Data – including IP addresses, browser types, geographic location, and activity relating to the use of this Application.
5. Cookies and Tracking Technologies – used for analytics, service optimization, functionality, and advertising purposes.

Personal Data may be voluntarily provided by Users or collected automatically during use of the Application. Where certain data is designated as mandatory, failure to provide such information may result in our inability to deliver some or all of the requested Services.

The Owner adopts appropriate technical and organizational security measures including data encryption, secure storage practices, and access restrictions to protect Personal Data from unauthorized access, disclosure, alteration, or destruction. Data is processed through secure IT systems and procedures that are strictly aligned with the purposes outlined in this Privacy Policy.

Access to Data
Personal Data may be accessed only by:

• Authorized employees involved in passport application processing, customer support, compliance, and IT operations.
• External service providers, including hosting providers, IT and technical support agencies, courier and logistics providers (e.g., DHL), and payment processors (e.g., Stripe and PayPal).
• Approved subcontractors or third parties acting as Data Processors on behalf of the Owner, under strict contractual obligations.

Place of Processing
Data is processed at the Owner’s operating offices in Australia, the United Kingdom, and any other jurisdictions where external service providers are located. Any international transfers of Personal Data are carried out securely and in compliance with applicable data protection laws and standards, including EU, UK, and Australian requirements.

Retention of Personal Data
Personal Data will be retained only for as long as is strictly necessary to fulfill the purposes for which it was collected or as required by law. Specifically:

• Application records and passport-related data may be securely retained for up to seven (7) years, unless Users request earlier deletion (subject to legal and regulatory obligations).

Data required for legal, compliance, or auditing purposes may be retained beyond this period if necessary.
Once the retention period has expired, Personal Data will be securely deleted or irreversibly anonymised.

Global British Passports collects and processes Personal Data solely for legitimate business purposes, which include:

• Providing passport application and renewal services to our customers. – “Facilitating and managing passport applications and renewals on behalf of our clients.”
• Verifying identity and eligibility necessary for processing applications. – Validating the identity and eligibility of individuals as a necessary prerequisite to application processing
• Arranging the secure shipment and delivery of documents. – “Coordinating the secure handling, shipping, and delivery of confidential documents to designated recipients.”
• Managing customer communications in a safe and efficient manner. – Ensuring the secure, efficient, and compliant management of customer communications across all channels.”
• Processing payments through approved payment providers, such as Stripe and PayPal. – Facilitating payment processing through authorised and secure payment service providers, including Stripe and PayPal.”
• Delivering customer service and support to address enquiries and resolve issues.
• Detecting, preventing, and investigating fraudulent or malicious activity.
• Displaying content or services from third parties, such as DHL shipment tracking and payment confirmation tools.
• Conducting analytics to maintain and improve the quality, security, and functionality of our services.
• Complying with all applicable laws, government regulations, and legal obligations relevant to our services.

We use cookies and similar technologies to enhance your experience, analyse site traffic, personalise content, and deliver targeted advertising. These tools include, but are not limited to, Google Analytics, Google Ads, and Meta Pixel. These may collect IP address, device type, browser type, geographic location, and site usage data. This information may be shared with third parties such as Google and Meta. By using our website, you consent to the use of cookies. You may manage cookies through your browser settings or use the preferences shown in our cookie banner.

Global British Passports may process Personal Data if:

• The User has given consent
• Data is necessary for performance of a contract (e.g., passport renewal service)
• Processing is required for compliance with a legal obligation
• Processing is necessary for legitimate business interests (fraud prevention, service improvement)

Users located in the European Union and the United Kingdom are entitled to exercise the following rights with respect to their Personal Data:

• Withdraw consent at any time where processing is based on consent.
• Access their Personal Data and obtain a copy of the information we hold.
• Rectify any inaccurate or incomplete Personal Data.
• Request erasure of their Personal Data (“Right to be Forgotten”) where applicable.
• Restrict or object to the processing of their Personal Data under certain circumstances.
• Data portability, allowing users to receive their Personal Data in a structured, commonly used, and machine-readable format and transfer it to another data controller.
• Lodge a complaint with the relevant Data Protection Authority, such as the Information Commissioner’s Office (ICO) in the UK or supervisory authorities within the EU.

These rights are subject to certain legal exceptions and limitations. Requests to exercise these rights can be submitted to us using the contact information provided in this Privacy Policy. We will respond in accordance with applicable data protection laws and within any prescribed statutory timeframes.

We are committed to protecting your privacy. All personal data is securely stored and only used for the purposes of processing your application. Your information is deleted once your service is complete or after a defined retention period. We do not print or store paper copies. Data is not shared with third parties without your explicit consent. We comply with Australian privacy laws and, where applicable, the UK GDPR.

We take data security seriously and have implemented appropriate technical and organizational measures to safeguard your personal data from unauthorized access, accidental loss, destruction, or alteration.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. In addition:

• Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.
• We use regular Malware Scanning.
• Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology.
• We implement a variety of security measures when a user places an order, enters, submits, or accesses their information to maintain the safety of your personal information.
• All transactions are processed through a gateway provider and are not stored or processed on our servers.

Under the GDPR, you have the right to request access to your personal data, rectification of inaccuracies, erasure of data, restriction of processing, data portability, and the right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

LKMST Pty Ltd t/a Global British Passports is committed to upholding the rights of relevant data subjects. These rights encompass the ability to access, correct, delete, or restrict the processing of personal data associated with the individual. Furthermore, data subjects possess the authority to raise objections against processing, which includes direct marketing activities

Where the applicant is under the age of 16, the parent or legal guardian completing the application on their behalf represents and warrants that they have legal authority to do so. By submitting an application for a minor, the parent or guardian authorises Global Passports to assist with the preparation and submission of the minor’s British passport application and to act on the minor’s behalf where appropriate. The parent or guardian assumes full responsibility for ensuring the accuracy of all information provided and compliance with these Terms and Conditions.

These Terms and Conditions are governed by the laws of Australia. Any disputes shall be subject to the exclusive jurisdiction of the courts of Victoria.

To the extent permitted by law, LKMST Pty Ltd t/a Global British Passports is not liable for any indirect, incidental, special, or consequential damages, including loss of income, opportunity, data, or time, arising from the use of our services. We do not accept liability for decisions or delays made by the His Majesty’s Passport Office (HMPO) or any third-party providers beyond our control.

We use trusted third-party services such as email platforms, file upload tools, analytics, and couriers. We are not responsible for disruptions or delays caused by these services.

Changes to this Privacy Policy

The Owner reserves the right to modify this policy at any time. Changes will be communicated via email or notice on this Application.

Latest Update: September 2025