Privacy Policy
Your privacy and data security are our highest priorities. Learn how we handle and protect your information.
1. Introduction
GHMM Bookkeeping Services ("we", "our", or "us") is committed to protecting the privacy and security of our clients' personal and financial information. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and safeguarding of your data when you visit our website or engage our professional services.
By utilizing our services, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use our services.
2. Information We Collect
To provide institutional-grade accounting services, we must collect specific categories of information:
- Corporate & Financial Data: Company names, tax identification numbers (EIN, VAT, GST/HST numbers), bank statements, payroll records, ledgers, and expense reports.
- Personal Identification Data: Names, titles, email addresses, phone numbers, and physical addresses of company directors or key contact personnel.
- Technical Data: IP addresses, browser types, and operating systems when you interact with our client portals or website.
3. How We Use Your Data
Your information is strictly utilized to fulfill our contractual obligations and regulatory requirements. We use your data to:
- Execute accounting, bookkeeping, and financial reporting services.
- Prepare multi-jurisdictional tax filings and compliance documents.
- Communicate with you regarding your accounts, discrepancies, or required documentation.
- Enhance the security of our client portals and prevent fraudulent activity.
We strictly do not sell, rent, or trade your personal or financial data to any third-party marketing agencies.
4. Information Sharing & Disclosure
We may share your information only under the following limited circumstances:
- Service Providers: With trusted cloud-accounting platforms (e.g., QuickBooks, Xero) and secure file-sharing services that assist us in operating our business, provided they are bound by strict confidentiality agreements.
- Legal Compliance: When required by law to comply with a valid subpoena, court order, or formal request from government or tax authorities (e.g., IRS, HMRC, CRA).
- Business Transfers: In the event of a merger, acquisition, or sale of firm assets, client data may be transferred as a business asset under continued strict confidentiality.
5. International Data Transfers
Because GHMM Bookkeeping Services operates globally, your information may be transferred to, stored, and processed in countries other than your own. We ensure that appropriate safeguards, such as Standard Contractual Clauses or adequate data protection frameworks, are in place to protect your data during cross-border transfers.
6. Data Security Measures
We implement robust, industry-standard security measures to protect your sensitive financial data against unauthorized access, alteration, disclosure, or destruction. This includes the use of end-to-end encrypted communication channels, secure file-sharing portals, multi-factor authentication (MFA) for our staff, and regular security audits.
7. Data Retention
We retain your financial and personal data only for as long as is necessary to fulfill the purposes for which it was collected, including the purposes of satisfying any legal, accounting, or reporting requirements mandated by applicable tax authorities.
8. Your Privacy Rights
Depending on your geographic location (such as under the GDPR in Europe, PIPEDA in Canada, or CCPA in California), you may have specific rights regarding your personal data, including the right to:
- Request access to the personal data we hold about you.
- Request correction of incomplete or inaccurate data.
- Request erasure of your personal data (subject to legal retention requirements).
- Object to or restrict the processing of your data.
- Request the transfer of your data to another party.
To exercise any of these rights, please contact our compliance team using the information provided below.
Legal Disclaimer
This document serves as a standard privacy policy template. Because data protection laws (such as GDPR, CCPA, and PIPEDA) vary widely by jurisdiction, we strongly advise having legal counsel review this policy to ensure absolute compliance with the regulations applicable to your specific region of operation.
Privacy or Data Concerns?
Contact our Data Protection Officer.