Back to Home

Privacy Policy

Understand how we protect and use your personal data on our platform.

Introduction

Welcome to GREATMOVS ("GreatMovs," "we," "us," or "our"). We are committed to protecting your privacy and ensuring that your personal information is handled securely, transparently, and responsibly. This Privacy Policy outlines how we collect, use, store, share, and protect your information when you engage with our website (www.greatmovs.com), services, and business activities.

Our Commitment: We respect your privacy rights and comply with applicable data protection laws, including:

  • United States: Federal and state privacy laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), New York SHIELD Act, and other state-specific regulations

  • Ghana: Data Protection Act, 2012 (Act 843) and regulations issued by the Data Protection Commission (DPC)

  • International: General Data Protection Regulation (GDPR) for EU/EEA residents and other applicable international privacy frameworks

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to our data practices as described herein.


1. Information We Collect

We collect various types of information to provide, maintain, improve, and personalize our services. The information we collect includes:

1.1 Personal Information You Provide

When you interact with our website or engage our services, you may provide:

  • Identity Information: Full name, date of birth, gender, national identification numbers (where legally required)

  • Contact Information: Email address, phone number, mailing address, business address

  • Business Information: Company name, business registration details, tax identification numbers, industry sector

  • Financial Information: Payment card details, bank account information, billing address, transaction history

  • Professional Information: Job title, professional credentials, employment history

  • Communication Data: Content of emails, messages, feedback, and inquiries you send to us

  • Service-Related Information: Information provided in service agreements, tax documents, financial statements, and other professional documentation

1.2 Information We Collect Automatically

When you visit our website, we automatically collect certain technical and usage information:

  • Device Information: IP address, device type, operating system, browser type and version, device identifiers

  • Usage Data: Pages visited, time spent on pages, click patterns, navigation paths, referral sources

  • Location Data: Approximate geographic location based on IP address

  • Cookies and Tracking Technologies: See Section 6 for detailed information

1.3 Information from Third-Party Sources

We may collect or receive information from:

  • Public Databases: Business registries, professional licensing boards, publicly available financial records

  • Credit Reference Agencies: For business credit assessments (with your consent where required)

  • Business Partners: Marketing partners, service providers, professional networks

  • Social Media: If you connect your social media accounts or engage with us on social platforms

  • Government Authorities: Tax authorities, regulatory bodies (Ghana Revenue Authority, IRS, etc.)

1.4 Sensitive Personal Information

In certain circumstances, we may process sensitive information with your explicit consent or as permitted by law:

  • Tax identification numbers and financial data

  • Information about legal proceedings or regulatory matters

  • Health information (only if relevant to employment benefits or accommodations)


2. How We Use Your Information

We use your information for legitimate business purposes, including:

2.1 Service Delivery

  • Providing consulting, financial, tax, accounting, and project management services

  • Processing and managing client engagements

  • Preparing financial statements, tax returns, and other professional deliverables

  • Managing client relationships and communications

  • Providing customer support and responding to inquiries

2.2 Payment Processing and Financial Management

  • Processing payments, invoicing, and billing

  • Managing accounts receivable and payable

  • Conducting financial transactions

  • Complying with anti-money laundering (AML) and Know Your Customer (KYC) requirements under:

    • Ghana's Anti-Money Laundering Act, 2020 (Act 1044)

    • U.S. Bank Secrecy Act and PATRIOT Act

    • International Financial Action Task Force (FATF) standards

  • Complying with tax laws and reporting obligations to:

    • Ghana Revenue Authority (GRA)

    • U.S. Internal Revenue Service (IRS)

    • Other relevant tax authorities

  • Meeting professional standards and ethical obligations

  • Responding to legal processes, court orders, and government requests

  • Maintaining professional indemnity insurance

  • Complying with Ghana's Data Protection Act, 2012 and U.S. privacy laws

  • Preventing fraud, money laundering, and other illegal activities

2.4 Business Operations and Improvement

  • Improving our website functionality and user experience

  • Conducting internal research and analytics

  • Developing new services and features

  • Managing business administration and operations

  • Training staff and quality assurance

2.5 Marketing and Communications

  • Sending service-related communications and updates

  • Providing newsletters, industry insights, and educational content (with opt-out options)

  • Conducting customer satisfaction surveys

  • Marketing our services (only with your consent where required by law)

  • Event invitations and networking opportunities

2.6 Security and Risk Management

  • Protecting against security threats, fraud, and unauthorized access

  • Monitoring and analyzing security incidents

  • Conducting risk assessments

  • Ensuring business continuity


For users in the EU/EEA and other jurisdictions requiring a legal basis, we process your personal data based on:

  • Contract Performance: Processing necessary to perform our service agreements with you

  • Legal Obligation: Compliance with tax laws, AML regulations, professional standards, and other legal requirements

  • Legitimate Interests: Business operations, fraud prevention, service improvement, and direct marketing (where permitted)

  • Consent: Marketing communications, cookies (non-essential), and processing of sensitive data (where explicitly obtained)

  • Vital Interests: Protection of life or physical safety in emergency situations

You have the right to withdraw consent at any time where processing is based on consent.


4. How We Share Your Information

We respect your privacy and do not sell, rent, or trade your personal information. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in:

  • Payment Processing: Banks, payment gateways, merchant services (PayPal, Stripe, mobile money providers)

  • IT and Cloud Services: Web hosting, data storage, cybersecurity, backup services

  • Professional Services: Legal advisors, auditors, insurance providers

  • Marketing and Analytics: Email service providers, website analytics (Google Analytics), CRM systems

  • Communication Tools: Email providers, video conferencing platforms, project management software

All service providers are contractually required to protect your information and use it only for specified purposes.

We disclose information when legally required to:

  • Tax Authorities: Ghana Revenue Authority (GRA), U.S. Internal Revenue Service (IRS), other tax agencies

  • Regulatory Bodies: Data Protection Commission (Ghana), Institute of Chartered Accountants Ghana (ICAG), AICPA, state boards of accountancy

  • Law Enforcement: Police, anti-corruption agencies, financial intelligence units

  • Courts and Tribunals: In response to subpoenas, court orders, or legal proceedings

  • Government Agencies: Compliance with sanctions, export controls, and national security requirements

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

4.4 Professional Obligations

We may share information with:

  • Professional Indemnity Insurers: For claims management and risk assessment

  • Professional Bodies: For compliance with ethical standards and disciplinary matters

  • External Auditors: During quality reviews and peer audits

We may share your information with third parties for purposes not listed above when we have obtained your explicit consent.

4.6 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you for research, analytics, or business purposes.


5. Data Security and Protection Measures

We implement comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

  • Encryption: SSL/TLS encryption for data transmission; AES-256 encryption for sensitive data at rest

  • Access Controls: Multi-factor authentication, role-based access, password policies

  • Network Security: Firewalls, intrusion detection/prevention systems, secure VPNs

  • Security Monitoring: 24/7 monitoring, regular security audits, vulnerability assessments

  • Secure Software Development: Regular updates, patch management, security testing

5.2 Organizational Safeguards

  • Staff Training: Regular privacy and security training for all employees

  • Confidentiality Agreements: All employees and contractors sign confidentiality agreements

  • Data Minimization: We collect only necessary information

  • Privacy by Design: Privacy considerations integrated into all business processes

  • Incident Response Plan: Procedures for detecting, responding to, and reporting data breaches

5.3 Physical Safeguards

  • Secure office premises with access controls

  • Locked filing cabinets for physical documents

  • Secure disposal of documents (shredding, secure deletion)

  • Visitor management and surveillance systems

5.4 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

  • Notify you within 72 hours (as required by GDPR and Ghana's Data Protection Act)

  • Notify relevant authorities (Data Protection Commission in Ghana, state attorneys general in the U.S.)

  • Provide information about the breach, affected data, and remedial actions

  • Offer assistance such as credit monitoring (if applicable)


6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content.

6.1 Types of Cookies We Use

  • Essential Cookies: Necessary for website functionality (login, security, load balancing)

  • Performance Cookies: Collect information about how you use our website (Google Analytics)

  • Functionality Cookies: Remember your preferences (language, region, settings)

  • Marketing Cookies: Track your browsing to deliver targeted advertisements (with consent where required)

6.2 Third-Party Cookies

We use third-party services that may set cookies:

  • Google Analytics: Website traffic analysis

  • Social Media Plugins: Facebook, LinkedIn, Twitter sharing buttons

  • Advertising Networks: Remarketing and targeted advertising (with consent)

You can control cookies through:

  • Browser Settings: Most browsers allow you to refuse cookies or delete existing cookies

  • Cookie Consent Tool: Available on our website to manage preferences

  • Opt-Out Tools: Network Advertising Initiative (NAI), Digital Advertising Alliance (DAA)

Note: Disabling essential cookies may affect website functionality. Disabling performance or marketing cookies will not impact core service delivery.

6.4 Do Not Track Signals

Some browsers transmit "Do Not Track" signals. Our website does not currently respond to Do Not Track signals, but you can control tracking through cookie settings.


7. International Data Transfers

GreatMovs operates internationally, and your personal information may be transferred to, stored, or processed in countries outside your country of residence, including:

  • United States: Our primary operations are based in New York

  • Ghana: We maintain operations and data processing activities in Ghana

  • Other Countries: Where we engage service providers or business partners

7.1 Transfer Safeguards

We ensure adequate protection for international data transfers through:

  • Standard Contractual Clauses (SCCs): EU-approved clauses for transfers outside the EEA

  • Adequacy Decisions: Relying on jurisdictions deemed adequate by the EU Commission or Ghana DPC

  • Binding Corporate Rules: Internal data protection policies for intra-organizational transfers

  • Consent: Your explicit consent for transfers where required

  • Contractual Necessity: Transfers necessary to fulfill our service agreements

7.2 Ghana-Specific Considerations

For data exported from Ghana:

  • We comply with Ghana Data Protection Commission requirements for cross-border transfers

  • We ensure receiving countries provide adequate data protection

  • We obtain DPC approval for transfers where required by law


8. Data Retention

We retain your personal information only as long as necessary for the purposes described in this Privacy Policy and to comply with legal, regulatory, and professional obligations.

8.1 Retention Periods

  • Client Records: 7 years from end of engagement (U.S. accounting standards); 6 years (Ghana tax laws)

  • Tax Documents: As required by applicable tax laws (generally 6-7 years)

  • Financial Records: 7 years or as required by law

  • Marketing Data: Until you opt out or withdraw consent; then deleted within 30 days

  • Website Usage Data: Typically 26 months (Google Analytics default)

  • Legal Documents: Duration of legal proceedings plus applicable statute of limitations

8.2 Deletion and Anonymization

After retention periods expire, we will:

  • Securely delete or destroy personal information

  • Anonymize data for statistical or research purposes

  • Maintain data only if required by law or legitimate business needs

You may request earlier deletion subject to legal and contractual obligations (see Section 9).


9. Your Privacy Rights

Depending on your location, you may have various rights regarding your personal information. We are committed to facilitating the exercise of these rights.

9.1 Rights Under GDPR (EU/EEA Residents)

  • Right to Access: Obtain confirmation of data processing and copies of your personal data

  • Right to Rectification: Correct inaccurate or incomplete information

  • Right to Erasure ("Right to be Forgotten"): Request deletion subject to legal exceptions

  • Right to Restrict Processing: Limit how we use your data in certain circumstances

  • Right to Data Portability: Receive your data in a structured, machine-readable format

  • Right to Object: Object to processing based on legitimate interests or for direct marketing

  • Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

  • Right to Lodge a Complaint: File a complaint with your supervisory authority

9.2 Rights Under CCPA/CPRA (California Residents)

  • Right to Know: Request information about data collected, used, and shared

  • Right to Delete: Request deletion of personal information (with exceptions)

  • Right to Correct: Request correction of inaccurate information

  • Right to Opt-Out: Opt out of sale/sharing of personal information (we do not sell data)

  • Right to Limit Use of Sensitive Information: Limit use of sensitive personal information

  • Right to Non-Discrimination: Exercise rights without discriminatory treatment

9.3 Rights Under Ghana's Data Protection Act

  • Right to Information: Be informed about data processing

  • Right of Access: Access your personal data

  • Right to Object: Object to processing for direct marketing

  • Right to Rectification: Correct inaccurate data

  • Right to Erasure: Request deletion in certain circumstances

  • Right to Lodge a Complaint: File complaints with the Data Protection Commission

9.4 Marketing Opt-Out Rights

You can opt out of marketing communications by:

  • Clicking "unsubscribe" links in our emails

  • Contacting us at pquarcoo@greatmovs.com

  • Updating preferences in your account settings

  • Calling us at (914) 564-3192

Note: Opting out of marketing does not affect service-related communications necessary for our business relationship.

9.5 How to Exercise Your Rights

To exercise any privacy rights:

Email: pquarcoo@greatmovs.com (Subject: Privacy Rights Request)
Mail: GreatMovs, 500 West 235th Street, Bronx, New York 10463
Phone: (914) 564-3192

Verification: We may request identification to verify your identity before processing requests.
Response Time: We will respond within:

  • 30 days (GDPR)

  • 45 days (CCPA/CPRA, extendable to 90 days)

  • 21 days (Ghana Data Protection Act)

No Fee: We generally do not charge fees for requests unless they are excessive, repetitive, or manifestly unfounded.


10. Children's Privacy

Our website and services are not directed to individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.


Our website may contain links to third-party websites, applications, or services (including payment processors, social media platforms, and professional networks). This Privacy Policy does not apply to third-party sites.

We are not responsible for:

  • Privacy practices of third-party websites

  • Content or security of external sites

  • Data collection by third-party services

We encourage you to review the privacy policies of any third-party sites you visit. Providing information to third parties is at your own risk.


12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations.

12.1 Notification of Changes

When we make changes, we will:

  • Update the "Last Updated" date at the top of this policy

  • Post the revised policy on our website

  • Notify you via email for material changes (if you have provided an email address)

  • Provide prominent notice on our website for significant changes

12.2 Continued Use

Your continued use of our website and services after changes become effective constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, please discontinue use and contact us to close your account or request data deletion.

12.3 Material Changes

For material changes that significantly affect your rights or how we process your data, we will:

  • Provide at least 30 days' notice before changes take effect

  • Obtain renewed consent where required by law

  • Provide options to opt out or object to new processing activities


13. Contact Us and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

GreatMovs
500 West 235th Street
Bronx, New York 10463
United States of America

General Privacy Inquiries:
Email: pquarcoo@greatmovs.com
Phone: (914) 564-3192

Data Protection Requests:
Email: pquarcoo@greatmovs.com
Subject Line: Privacy Rights Request or Data Protection Inquiry

Ghana Data Protection Commission (for Ghana residents):
If you are not satisfied with our response, you may lodge a complaint with:
Data Protection Commission
Ghana
Website: www.dataprotection.gov.gh

EU Supervisory Authorities (for EU/EEA residents):
You have the right to lodge a complaint with your local supervisory authority.

U.S. State Attorneys General:
For U.S. residents, you may contact your state attorney general's office regarding privacy concerns.


By using our website and services, you acknowledge that:

  • You have read and understood this Privacy Policy

  • You consent to the collection, use, and sharing of your information as described

  • You understand your rights and how to exercise them

  • You agree to international data transfers as necessary for our services

  • For marketing communications: You consent to receiving promotional emails (you may opt out at any time)

For Sensitive Information: Where we process sensitive personal information, we will obtain your explicit consent as required by law.