Privacy Policy

1. Introduction

BVM (Bold Vision MultiTech) Ltd. ("BVM", "we", "us", or "our") is committed to protecting your privacy and the security of your personal and business information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AscendSME platform, including our website at ascendsme.africa and all related services (the "Platform").

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Platform.

2. Information We Collect

2.1 Personal Information

We collect information that identifies you personally, including but not limited to:

• Contact Information: Name, email address, phone number, physical address.
• Identity Information: Government-issued identification, date of birth, nationality.
• Account Credentials: Username, password, security questions.
• Professional Information: Job title, role, professional qualifications.
• Communication Records: Messages, emails, and correspondence with our team.

2.2 Business Information

To provide our Services, we collect information about your business, including:

• Business Details: Business name, registration number, industry, location, size.
• Financial Information: Revenue, expenses, bank statements, financial projections.
• Operational Data: Business processes, employee count, operational challenges.
• Legal Documents: Business registration certificates, tax identification, licenses.
• Performance Metrics: Sales data, customer information, growth indicators.
• Diagnostic Responses: Answers provided during the Business Diagnostic assessment.

2.3 Technical Information

We automatically collect certain technical information when you use the Platform:

• Device Information: Device type, operating system, browser type, unique device identifiers.
• Usage Data: Pages visited, features used, time spent on the Platform, click patterns.
• Log Data: IP address, access times, referring URLs, error logs.
• Cookies and Tracking: Information collected through cookies, pixels, and similar technologies.
• Location Data: General geographic location based on IP address.

3. How We Collect Information

We collect information through various methods:

• Direct Submission: Information you provide when registering, completing the Business Diagnostic, or communicating with us.
• Automated Collection: Technical data collected automatically through cookies, analytics tools, and server logs.
• Account Manager Interactions: Information gathered during conversations and consultations with your dedicated Account Manager.
• Third-Party Sources: Information from business registries, credit bureaus, or partner organizations, where lawfully permitted.
• Document Uploads: Information extracted from documents you upload to the Platform.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Service Delivery

• To create and manage your Account.
• To conduct Business Diagnostics and generate sustainability assessments.
• To provide personalized guidance through your Account Manager.
• To track your progress along your Goal Pathway.
• To issue and manage Sustainability Cards.
• To facilitate access to the Marketplace and funding opportunities.

4.2 Communication

• To send service-related notifications and updates.
• To respond to your inquiries and support requests.
• To provide information about new features, services, or opportunities.
• To send marketing communications (with your consent).

4.3 Platform Improvement

• To analyze usage patterns and improve the Platform.
• To develop new features and services.
• To train and improve our AI diagnostic algorithms.
• To conduct research on SME sustainability and growth patterns.

4.4 Partner Services

• To connect you with relevant financial institutions and investors.
• To facilitate marketplace transactions.
• To provide aggregated and anonymized data to partners for impact reporting.

4.5 Legal and Compliance

• To comply with legal obligations and regulatory requirements.
• To enforce our Terms of Service and protect our rights.
• To detect, prevent, and address fraud or security issues.

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 With Your Consent

We share your information with third parties when you have given us explicit consent, such as when you opt to be introduced to financial partners or participate in the Marketplace.

5.2 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Cloud hosting and data storage providers.
• Payment processors.
• Analytics and monitoring services.
• Customer support tools.
• Marketing and communication platforms.

These service providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

5.3 Financial and Investment Partners

When you opt into funding opportunities, we may share your business information with:

• Banks and lending institutions.
• Impact investors and venture capital firms.
• Grant-making organizations.
• Development finance institutions.

You will be informed and asked for consent before your information is shared with any specific financial partner.

5.4 Donors and Impact Partners

We share aggregated, anonymized, and de-identified data with donors and impact partners for monitoring and evaluation purposes. This data does not identify individual businesses or persons.

5.5 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders and legal process.
• Government or regulatory agency requests.
• To protect our rights, privacy, safety, or property.
• To investigate or prevent suspected illegal activities.

5.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice before your information becomes subject to a different privacy policy.

6. Data Security

We implement comprehensive security measures to protect your information, including:

• Encryption: All data in transit is encrypted using TLS/SSL protocols. Sensitive data at rest is encrypted using industry-standard encryption.
• Access Controls: Strict access controls ensure only authorized personnel can access your information based on their role and need.
• Secure Infrastructure: Our Platform is hosted on secure, enterprise-grade cloud infrastructure with regular security audits.
• Monitoring: Continuous monitoring for suspicious activities and potential security threats.
• Employee Training: All staff undergo regular training on data protection and security best practices.
• Incident Response: We maintain an incident response plan to address any potential data breaches promptly.

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: We retain your information while your Account is active and for a reasonable period thereafter.
• Closed Accounts: Upon Account closure, we may retain certain information for up to seven (7) years for legal, regulatory, and audit purposes.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for research and analytics purposes.
• Legal Requirements: Some data may be retained longer if required by applicable laws or regulations.

8. Your Rights and Choices

You have certain rights regarding your personal information:

• Access: You may request access to the personal information we hold about you.
• Correction: You may request correction of inaccurate or incomplete personal information.
• Deletion: You may request deletion of your personal information, subject to certain legal exceptions.
• Portability: You may request a copy of your data in a portable format.
• Restriction: You may request that we restrict processing of your information in certain circumstances.
• Objection: You may object to processing of your information for certain purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at business@b-vm.com. We will respond to your request within thirty (30) days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and to improve the Platform. Types of cookies we use include:

• Essential Cookies: Necessary for the Platform to function properly. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality and personalization.
• Analytics Cookies: Help us understand how visitors interact with the Platform.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Ghana. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer your information internationally, we take appropriate safeguards to ensure your information remains protected, including:

• Standard contractual clauses approved by relevant authorities.
• Ensuring recipients are certified under applicable data protection frameworks.
• Obtaining your explicit consent where required.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

12. Third-Party Links and Services

The Platform may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on the Platform.
• Updating the "Last Updated" date at the top of this policy.
• Sending you an email notification for significant changes.

Your continued use of the Platform after any changes indicates your acceptance of the updated Privacy Policy.

14. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy and applicable data protection laws. You may contact our DPO at:

15. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Data Protection Commission of Ghana or other relevant supervisory authority in your jurisdiction.