Legal

Privacy policy

Last updated: 5 October 2026

Draft for legal review. This text is a starting template. It must be reviewed and completed by a qualified lawyer for every jurisdiction GFIR operates in before the site goes live.

1. Who we are

GFIR — Global Fraud Investigation & Recovery ([Owner input required]: legal entity name, registered address and company number) is responsible for the personal information described in this policy. Contact: info@gfirglobal.com.

2. What we collect

When you contact us, we collect the details you choose to share: your name, email address, country, the type of case and your description of what happened.

If you become a client, we may also process records relevant to your case, such as transaction details, messages, screenshots and device data. We collect only what the investigation needs.

3. How we use it

To review your enquiry and reply to you
To carry out an investigation you have instructed us to perform
To prepare reports you ask us to share with lawyers, police or financial institutions
To meet our legal and regulatory obligations

4. Legal basis

We process personal information to respond to your request and perform our contract with you, to comply with legal obligations, and where necessary for our legitimate interests in operating securely. [Owner input required]: confirm legal bases per jurisdiction (e.g. GDPR, UK GDPR, PIPEDA).

5. Sharing

We never sell your information. We share it only with your consent (for example, with your lawyer or the police), with service providers who help us operate (such as secure email and hosting), or where the law requires it.

6. International transfers

Because our work is international, information may be processed in other countries. Where this happens, we use appropriate safeguards. [Owner input required]: list hosting locations and transfer mechanisms.

7. How long we keep it

Enquiries that don’t become cases are deleted after [Owner input required]. Case files are kept for [Owner input required], unless the law requires otherwise.

8. Security

We protect information with access controls, encryption in transit and need-to-know access. No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of the data.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict use of your personal information, to object to processing, and to complain to a data-protection authority. To exercise these rights, email info@gfirglobal.com.

10. Changes

We may update this policy. The date at the top shows when it last changed.

2. What we collect

When you contact us, we collect the details you choose to share: your name, email address, country, the type of case and your description of what happened.

If you become a client, we may also process records relevant to your case, such as transaction details, messages, screenshots and device data. We collect only what the investigation needs.