Can you provide a reference in the text of GDPR itself or an official government source such as the UK ICO that supports that criterion for determining if a company needs to comply with GDPR?
Your description does not match with what I have seen about GDPR applying to European data subjects which is the language the regulation uses.