1. Introduction

GLOBAL LINK CONSULTING AND TRANSLATION SERVICES (“Global Link”) respects the privacy of its clients and is committed to the responsible handling of their personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with the services provided by Global Link.

The processing of personal data is subject to the European Union’s General Data Protection Regulation (GDPR), Ireland’s Data Protection Act 2018, and other applicable legal provisions.

This policy applies to clients, prospective clients, and other individuals whose personal data is processed as a result of our services.

2. Identification and Contact Information

Trade name: GLOBAL LINK CONSULTING AND TRANSLATION SERVICES

Registration: Companies Registration Office (CRO), No. 607468

Registration holder and Data Controller: Vanessa Cristine Bastos

Business address: 45 The Grange – Raheen, Limerick, V94P8KR, Ireland

Website: https://gblinkservices.com

Email: contato@gblinkservices.com

WhatsApp Business: +353 87 395 0876

Global Link operates under an individual business name registration (Business Name – Individual). The data controller responsible for processing the personal data described in this policy is the holder of that registration, Vanessa Cristine Bastos, who operates under the business name Global Link Consulting and Translation Services.

Requests regarding the protection of personal data may be sent to the email address listed above.

3. Personal Data Collected

Depending on the service requested, we may collect and process:

• Full name, date of birth, nationality, and contact information;
• Home address and residential history;
• Copies of passports, identification documents, IRP cards, and immigration documents;
• Birth, marriage, and divorce certificates, as well as other family documents;
• Information on employment, compensation, social security contributions, and work history;
• Bank statements, financial records, and tax documents;
• Information about family relationships, dependents, and shared residence;
• Documents required for a certified translation;
• Payment, contract, and billing information;
• Messages, emails, forms, and documents related to customer service.

Through the website https://gblinkservices.com, we may also receive and process:

• Information provided on the quote request form, such as name, email address, phone number/WhatsApp, language, and country where the translation will be used, as well as the message submitted;
• Documents and files attached by the user to forms on the website;
• Registration information and access to the Client Portal, such as name, email address, username, login credentials, and access period;
• Technical information processed by hCaptcha (in forms) and Google reCAPTCHA (on the login page for the Client Portal and the administrative area) to distinguish between human users and automated access attempts;
• Technical information necessary for the operation and security of the website, such as IP addresses and access logs.

We may receive information from family members, dependents, or other individuals mentioned in the documents submitted by the client.

We collect only information that is relevant to the purposes of the services we provide or to applicable legal obligations.

4. Purposes of Processing

Personal data may be used for:

• Respond to inquiries and requests for quotes;
• Administratively review the submitted documentation;
• Provide advisory services regarding immigration, residency, citizenship, and passports;
• Prepare, organize, and monitor administrative applications;
• Provide certified translation services;
• Maintain communication with clients about their cases;
• Prepare contracts, invoices, and payment records;
• Comply with legal and regulatory obligations;
• Respond to requests from data subjects;
• Provide and manage access to the Client Portal and the materials published on it;
• Protect the website, forms, and user accounts against spam, abuse, and automated access;
• Manage, protect, and improve service delivery;
• Retain records necessary to demonstrate the performance of services and, when warranted, to respond to complaints or defend rights.

The data will not be used for purposes incompatible with those for which it was collected, unless there is an appropriate legal basis.

5. Legal Basis for Processing

Depending on the purpose, Global Link may base the processing of personal data on the following legal grounds set forth in Article 6 of the GDPR:

Performance of a contract or pre-contractual procedures: when processing is necessary to evaluate a request, provide advice, perform translations, or carry out the contracted services.

Compliance with a legal obligation: when necessary to comply with tax, accounting, or other obligations set forth in applicable law.

Legitimate interests: when necessary and proportionate to administer services, maintain relevant records, protect systems, prevent irregularities, provide duplicates when justified, or exercise and defend rights, provided that these interests do not unduly override the rights and freedoms of data subjects.

Consent: when required for a specific activity, and it may be withdrawn in accordance with applicable law.

In the context of this website, the following legal bases apply in particular:

• Quote request form and document submission: pre-contractual procedures requested by the data subject, and, if a contract is entered into, the performance of the contract;
• Client Portal and user accounts: performance of a contract, as this is a resource made available to clients in connection with the contracted services;
• hCaptcha, Google reCAPTCHA, and website security measures: Global Link's legitimate interests in protecting the website, forms, and users from spam, fraud, and automated access;
• Website hosting, document storage, email, and customer service platform: performance of a contract or pre-contractual procedures, depending on the purpose, and legitimate interests in the secure management of services.

Confirming that you have read this Privacy Policy does not constitute general consent for all data processing activities.

6. Sensitive Data and Third-Party Information

Certain processes may involve information that is specifically protected under the GDPR, such as health data, when such information is truly necessary for the purpose of the service.

In such situations, the processing must have a valid legal basis under Article 6 and meet an additional applicable condition under Article 9 of the GDPR.

Documents relating to criminal convictions or offenses, where necessary, will be subject to the specific rules set forth in Article 10 of the GDPR and under Irish law.

Global Link will seek to limit the collection of this information to what is strictly necessary.

When documents involve family members, dependents, children, or third parties, their handling must comply with applicable legal requirements, including those regarding transparency and the protection of vulnerable individuals.

7. Receipt and Storage of Documents

Client documents and information may be received via email, business WhatsApp, electronic forms, or other means of communication used during the provision of services.

Google Drive is the primary platform for storing electronic documents used in consulting and translation services.

To carry out the translations, the necessary documents are shared with authorized translators and collaborators via the Trello platform. Once completed, the translations are stored on Google Drive.

Communications may also be stored in email systems and on the customer service platform integrated with WhatsApp Business.

The Global Link website is hosted by Hostinger. The information submitted through the quote request form, including any attached files, is stored in the website’s system and forwarded via email to the Global Link team for processing.

Accounts for accessing the Client Portal are created and maintained in the website's system.

The forms on this website use the hCaptcha service, provided by a third party, to protect against spam and automated access. The processing carried out by hCaptcha is also subject to the provider’s privacy policy.

The page providing access to the Client Portal and the website’s administrative area uses Google reCAPTCHA, via the website’s security plugin, to protect against automated access. The processing performed by Google reCAPTCHA is also subject to Google’s privacy policy.

Access to the data must be limited to authorized individuals who need the information to perform their duties.

Global Link will implement technical and organizational measures commensurate with the risks involved, including access controls, permission management, and appropriate procedures to prevent disclosure, alteration, loss, or unauthorized access.

No electronic transmission or storage system can offer an absolute guarantee of security.

Cookies and Similar Technologies

This website uses cookies and similar technologies that are necessary for its operation, such as those used to maintain the session of authenticated users on the Client Portal and to protect forms and the login page using hCaptcha and Google reCAPTCHA.

As of the date of this policy, the website does not use audience analytics tools or advertising cookies.

8. Sharing of Personal Data

When necessary for the provision of services, the data may be shared with:

• Employees and authorized service providers;
• Authorized translators and collaborators involved in the performance of the contracted services;
• The competent Irish authorities, depending on the nature of the case;
• Providers of cloud storage, task management, email, communication, and customer service;
• Providers of website hosting and protection against spam and automated access;
• Administrative, accounting, and technology service providers, as needed;
• Public authorities, when there is a legal obligation;
• Qualified professionals, when their services are necessary and authorized.

Sharing will be limited to information relevant to the corresponding purpose.

Global Link does not sell its clients' personal data.

Suppliers acting as data processors must comply with applicable contractual and legal obligations, including those set forth in Article 28 of the GDPR, where applicable.

9. International Transfers

Global Link’s authorized translators and collaborators are based in Ireland and Brazil. Sharing documents with professionals based in Brazil constitutes an international transfer of personal data.

In January 2026, the European Commission adopted an adequacy decision recognizing that Brazil ensures an adequate level of protection for personal data. Transfers to recipients in Brazil covered by this decision may be based on it, pursuant to Article 45 of the GDPR, without prejudice to other applicable obligations, including those regarding the confidentiality and security of information.

Global Link also uses technology providers, such as cloud storage, task management, email, communication, customer service, and anti-spam and anti-bot services, which may process data outside the European Economic Area (EEA), including in the United States.

Where applicable, such transfers must comply with Chapter V of the GDPR, including adequacy decisions by the European Commission, standard contractual clauses, or other legally permitted mechanisms.

Global Link must verify and document the countries involved, the recipients, and the applicable safeguards before carrying out transfers that depend on these measures.

The data subject may request additional information regarding relevant transfers using the contact details provided in this policy.

10. Document Retention and Disposal

Global Link will retain personal data only for as long as necessary to fulfill the legitimate purposes for which it was collected, in compliance with any legal obligations and the need to protect rights.

Global Link will conduct an annual review of the documents stored on Google Drive to assess whether they need to be retained.

10.1. Certified Translations

Completed certified translations, including a copy of the original document to which the translation pertains, may be retained for up to 5 (five) years after the service is completed.

The purpose of this archiving is to enable us, whenever possible, to provide duplicates to the client, thereby avoiding the need to produce and bill for a new translation.

The availability of a duplicate copy will depend on whether the file exists, whether it is suitable for the requested purpose, and the terms and conditions applicable to the service.

10.2. Immigration and Citizenship Procedures

Documents related to immigration, residency, and citizenship services may be retained for up to 5 (five) years after the case is closed, when such retention is necessary and justifiable.

Retention may facilitate the continuity of related services, the review of administrative records, the response to client requests, and the protection of rights.

The documentation will be subject to periodic reviews, with early deletion of information that is no longer necessary.

The possibility of a future engagement does not, in and of itself, justify the indiscriminate retention of all documents for five years.

10.3. Tax and Accounting Records

Contracts, invoices, payment records, and other documents subject to legal requirements will be retained for the periods specified in applicable law.

10.4. Communications and Other Information

Messages, emails, and other records will be retained in accordance with their purpose, their relevance to the provision of services, and any legal obligations.

10.5. Quote Requests Received Through the Website

Global Link sets a retention period of up to 12 (twelve) months from receipt for quote requests submitted through the website that do not result in a contract, including any attached files. This period may be extended where retention is necessary to comply with a legal obligation or where there is another justified need, such as a complaint or dispute. Records received before this retention period was adopted are under review and will be handled in accordance with this policy.

10.6. Deletion and Exceptions

At the end of the applicable period, the data must be deleted or anonymized appropriately, unless its retention remains necessary and legally justified.

Certain information may need to be retained for a longer period due to legal obligations, complaints, disputes, or administrative or judicial proceedings.

11. Rights of Data Subjects

Under the terms of the GDPR and subject to the applicable legal conditions and exceptions, data subjects may request:

• Access to their personal data;
• Correction of inaccurate or incomplete information;
• Data deletion, where applicable;
• Restriction of processing;
• Data portability, where applicable;
• Objection to processing based on legitimate interests;
• Withdrawal of consent, when that is the legal basis used;
• Information about fully automated decisions, where applicable.

Requests may be submitted to:

contato@gblinkservices.com

Global Link may request information reasonably necessary to verify the requester's identity before providing personal data.

Requests will be reviewed and responded to within the timeframes set forth by the GDPR, typically within one month, subject to any legal grounds for an extension.

The right to erasure is not absolute and may be subject to legal retention obligations or other exceptions provided for by law.

12. Provision of Information by the Client

The provision of certain data and documents may be necessary to assess eligibility, prepare applications, perform translations or carry out the contracted services.

If essential information is not provided, it may not be possible to start, continue, or complete the requested service.

The client must provide accurate information and report any changes that are relevant to the progress of the case.

13. Automated Decisions

Global Link does not, as part of the services described in this policy, use fully automated decisions that produce legal effects or have similarly significant impacts on clients.

Decisions regarding the granting of residency, citizenship, passports, or other permits are made by the competent authorities in accordance with their own procedures.

14. Complaints to the Data Protection Authority

If the data subject has any questions or concerns regarding the processing of their data, they may initially contact Global Link by email at:

contato@gblinkservices.com

The data subject also has the right to file a complaint with the competent data protection authority.

In Ireland, the supervisory authority is:

Data Protection Commission (DPC)

Website: https://www.dataprotection.ie

15. Updates to This Policy

This Privacy Policy may be updated to reflect changes in the law, operational changes, or changes to the services provided by Global Link.

The updated version will be posted on the official website, along with the date of the last update.

When required by law, data subjects will be informed of relevant changes before any new processing takes place.

16. Contact

For questions about this policy or requests regarding personal data:

GLOBAL LINK CONSULTING AND TRANSLATION SERVICES

Email: contato@gblinkservices.com

Website: https://gblinkservices.com

WhatsApp: +353 87 395 0876