MBL Global

Effective date: 10 January 2025 (Revised Edition)

1. Introduction

Welcome to MBL Global Ltd.

MBL Global Ltd (“MBL Global”, “we”, “us”, “our”) operates the website
https://www.mbl.global/ (the “Service”).

This Privacy Policy explains how we collect, use, store, protect and disclose your personal information when you visit or use our Service. By using the Service, you agree to the practices described in this policy.

Our Terms and Conditions and this Privacy Policy together form the agreement between you and MBL Global Ltd.

2. Definitions

Service

The https://www.mbl.global/ website operated by MBL Global Ltd.

Personal Data

Information relating to an identified or identifiable individual.

Special Category Data

Personal data relating to health, psychological wellbeing, or other sensitive matters protected under GDPR Article 9.

Usage Data

Information collected automatically through use of the Service.

Cookies

Small files stored on your device that support functionality, analytics and user experience.

Data Controller

MBL Global Ltd determines the purposes and means of processing your personal data.

Data Processor

A third party that processes personal data on behalf of MBL Global.

Data Subject / User

Any individual using our Service.

3. Information We Collect

We collect different types of information to operate and improve our Service:

• Personal Data
• Special Category Data (where required and with explicit safeguards)
• Usage Data
• Cookie and tracking data

4. Types of Data Collected

4.1 Personal Data

When using our Service or contacting us, we may collect:

• First and last name
• Email address
• Phone number
• Company information
• Communication preferences
• Cookies
• Usage Data

We may send newsletters or updates where you have provided consent or where legitimate interest applies. You may unsubscribe at any time.

4.2 Special Category Data (Health and Psychological Information)

Due to the nature of our crisis response and psychological support services, we may process information relating to:

• Psychological wellbeing
• Trauma related impacts
• Health information relevant to support services

This data is handled under GDPR Article 9 conditions, using one or more lawful bases:

• Explicit consent
• Vital interests of the individual or another person
• Provision of health or social care support
• Legitimate interests where strictly appropriate and proportionate

Access to this data is restricted to authorised personnel and contracted professionals bound by confidentiality obligations.

4.3 Usage Data

Usage Data may include:

• IP address
• Browser type and version
• Pages visited
• Date/time of visit
• Device identifiers
• Diagnostic information

4.4 Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience and analyse site performance. Cookie types include:

• Essential cookies
• Analytics cookies
• Preference cookies
• Security cookies

Users can manage cookie settings directly through their browser or through our website cookie banner.

5. Lawful Basis for Processing (GDPR)

We process your data under one or more of the following lawful bases:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interests
• Explicit consent (for sensitive data or marketing)
• Protection of vital interests
• Public interest (where required by law or regulation)

6. Use of Data

MBL Global Ltd uses collected data to:

• Provide and maintain our Service
• Deliver crisis response and psychological support services
• Manage client relationships and contractual obligations
• Improve functionality, security and performance
• Communicate updates, notices or service changes
• Comply with regulatory or legal requirements
• Protect the rights, property and safety of users and the public
• Support analytics and internal reporting
• Send marketing communications with consent or legitimate interest

We do not conduct automated decision making or profiling.

7. Data Retention

We retain data only for as long as necessary:

Enquiry data

Up to 2 years

Client contract information

For the duration of the relationship plus 7 years

Crisis case notes and psychological support records

Typically 7 years unless legally required for longer

Marketing data

Until consent is withdrawn or inactive for 24 months

Usage Data

Up to 24 months

A detailed internal retention schedule governs all categories.

8. International Transfers

MBL Global operates globally. Personal Data may be transferred to:

• Countries where counsellors or crisis responders operate
• Third party processors located internationally

Safeguards include:

• EU Standard Contractual Clauses
• Adequacy decisions
• Confidentiality agreements
• Technical and organisational security measures

No transfer occurs without ensuring an equivalent level of data protection.

9. Disclosure of Data

We may disclose data:

• To comply with legal obligations
• To protect vital interests or safety
• To subsidiaries and affiliates
• To authorised contractors, crisis responders or counsellors
• To service providers supporting our operations
• With your explicit consent
• During corporate restructuring, merger or acquisition

We only display client logos on our website where prior written permission has been provided.

10. Security of Data

We use physical, technical and organisational measures to protect your data, including encryption, restricted access, secure storage and confidentiality controls. While no system is entirely secure, we take all reasonable steps to safeguard your information.

11. GDPR Rights (EU and EEA Users)

You have the right to:

• Access your data
• Rectify inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with a supervisory authority

Contact: ops@mbl.global

Identity verification may be required.

12. UK GDPR

If you are based in the UK, all rights under the UK GDPR apply. Our UK representative details are available upon request.

13. CCPA Rights (California Residents)

California residents may:

• Request details on what information we collect
• Request deletion of personal information
• Request disclosure of transfers
• Opt out of any data transfers considered a “sale” under California law

MBL Global does not sell personal information under any circumstances.

Requests: ops@mbl.global

14. Service Providers

We engage third party processors for:

• Hosting and IT services
• Security and fraud prevention
• Data analytics
• Communication and customer support systems
• Crisis management platforms
• Case management and coordination tools

All processors are bound by contractual confidentiality and data protection obligations.

15. Analytics

We may use analytics providers to evaluate site performance. Only anonymised or aggregated information is used wherever possible.

16. Behavioural Remarketing

We currently do not conduct behavioural remarketing. If this changes, users will be notified and consent options will be available.

17. Links to Third-Party Sites

Our Service may link to external websites. We are not responsible for the content or privacy practices of third parties.

18. Children’s Privacy

Our Service is not intended for individuals under 18. We do not knowingly collect data from minors. If a child has provided data, contact us and we will delete it.

19. Data Breach Notification

In the event of a data breach involving your personal information, we will:

• Notify the appropriate supervisory authority
• Notify affected individuals when legally required
• Take corrective actions to mitigate risk

20. Changes to This Privacy Policy

We may update this policy periodically. Updates will be posted on this page with a revised effective date. Users may also be notified through email or website notices where appropriate.

21. Contact Us

For privacy related enquiries or to exercise your rights:

Email: info@mbl.global