Privacy Policy

This Privacy Policy explains how SHATTA MOVEMENT, with an address at Accra, Ghana ("Operator", "we", "us", or "our"), collects, uses, stores, shares, and protects personal information through the SHATTA FANS website and its features (the "Service").

Questions and data-rights requests should be sent to support@shattamovementfanbase.com. This Privacy Policy should be read with our Terms and Conditions.

1. Legal and Compliance Baseline

The Service is operated from Ghana and is designed to align with Ghana's Data Protection Act, 2012 (Act 843) and the expectations of the Data Protection Commission, as well as widely recognised international privacy principles, including the EU and UK GDPR and the California Consumer Privacy Act (CCPA/CPRA) for users in those regions.

Where the Service processes personal data at a scale or in a manner that requires it, the Operator maintains registration with Ghana's Data Protection Commission and keeps records of its processing activities.

2. Information We Collect

Fan and community information: full name, fan number, email, phone, WhatsApp number, country, city, social media handles, favourite songs, fan-since year, fanbase chapter, registration date, and verification status.

Membership and payment information: Gold Card and premium fan number details and status, 1GH Project donations, Business Talk requests, amounts paid, transaction and reference codes, the Mobile Money number used to pay, and any payment-proof screenshot you upload for manual verification. Card and payment processing is handled by our payment providers; we do not store full bank card numbers.

Community content: reviews, ratings, comments, Members Lounge messages, private lounge messages (DMs), and online-presence or typing status while you use the lounge.

Technical, security, and device information: IP address, browser and device information, pages and requests, timestamps, session cookies, CSRF tokens, rate-limit and security events, audit logs, error logs, and browser local/session storage and service-worker (PWA) cache.

Administrator accounts: for team members with dashboard access we store an email, a hashed password, role, and login and security metadata.

3. How We Use Information

We use information to register fans; create and verify fan numbers and Gold Cards; process and confirm payments for Gold Cards, premium numbers, 1GH donations, and Business Talk; run the Members Lounge and dashboards; display approved public community information; moderate content and reviews; detect and prevent fraud and abuse; maintain security; troubleshoot errors; respond to support and data-rights requests; enforce our Terms; and comply with legal obligations.

4. Legal Bases for Processing (EEA / UK users)

Where the GDPR applies, we rely on the following lawful bases:

Contract — to register you, issue your fan number, Gold Card, or premium number, process the payments you request, and run features you use such as the lounge and dashboards.

Legitimate interests — to keep the Service secure, prevent fraud, display approved public community information, understand usage, and improve the Service, balanced against your rights.

Consent — for any optional communications and any non-essential storage; you can withdraw consent at any time.

Legal obligation — to keep payment, tax, and accounting records and to respond to lawful requests.

5. Public Information and Visibility

Some information may be shown publicly or semi-publicly, including fan name, fan number, country, city, fanbase chapter, fan card, Gold Card status, Gold member listing, verification page and QR code, reviews, announcements, and community statistics.

Do not submit information you do not want used for the Service. If you want information corrected or removed, contact support@shattamovementfanbase.com.

6. Cookies, Sessions, and Browser Storage

We use only essential and functional cookies and storage: to keep you logged in, protect forms and admin tools (CSRF), remember access status and language choice, and cache assets for faster, more reliable loading. We do not use third-party advertising or cross-site tracking cookies.

You can control cookies and storage through your browser settings. Blocking them may prevent login, payments, or lounge features from working correctly.

7. How We Share Information

We may share information with payment processors and Mobile Money providers (for example, Paystack and MTN Mobile Money) to process and verify payments; hosting, database, storage, and deployment providers that run the Service; other technical service providers acting on our instructions; our own admins and moderators; the public, where information is displayed through the Service; legal or regulatory authorities where required; professional advisers; and a successor organisation if the Service is reorganised or transferred.

We do not sell your personal information for money. If that ever changes, we will update this Privacy Policy and provide any legally required notice and opt-out mechanism.

8. International Users and Transfers

The Service may be accessed from Ghana and other countries, and information may be processed or stored in Ghana or wherever our hosting, payment, or technical providers operate. Where personal data is transferred across borders, we take reasonable steps to protect it using appropriate contracts and safeguards.

9. Retention

We keep information only as long as needed for the purposes described above:

Fan profile and community data — while your account or registration is active; deleted or anonymised after a verified deletion request, unless we must keep it for a legal reason.

Payment and transaction records (Gold Card, premium number, 1GH donation, Business Talk) — kept for accounting, tax, and anti-fraud purposes for up to 6 years after the transaction.

Payment-proof screenshots — kept only as long as needed to verify the payment and resolve any dispute, then deleted.

Lounge messages and DMs — kept while the lounge operates; removed sooner on request.

Technical, audit, security, and error logs — typically 12 to 24 months.

Backups — overwritten on a rolling cycle, generally within 90 days.

10. Security

We use technical and organisational measures intended to protect personal information, including hashed passwords, secure session-cookie settings, access controls and admin authentication, upload restrictions, rate limiting, security headers, audit logging, and payment verification on a hosted, access-controlled database. No online service can guarantee perfect security.

11. Your Rights and Choices

Depending on your location and applicable law, you may have the right to confirm whether we process your data, access it, correct it, delete it, object to or restrict certain processing, withdraw consent where consent is the basis, object to direct marketing, request portability, and complain to a privacy regulator — including Ghana's Data Protection Commission, your local EEA/UK supervisory authority, or the California Privacy Protection Agency.

To exercise a right, contact support@shattamovementfanbase.com. We may need to verify your identity before responding. Some requests may be limited by legal, security, payment, anti-fraud, accounting, or dispute-resolution reasons.

12. Automated Processing

Some payment checks (for example, confirming a Paystack or Mobile Money payment) are automated so that a valid payment can be recognised quickly. We do not use these to make decisions that produce legal or similarly significant effects without the ability for a person to review them. If an automated payment or membership decision affects you, you can ask for human review at support@shattamovementfanbase.com.

13. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal information. In the EEA and UK, where a higher age of digital consent applies (up to 16, depending on the country), users below that age should use the Service only with a parent or guardian's consent. If you believe a child has given us personal information, contact support@shattamovementfanbase.com so we can review and take appropriate action.

14. Your California Privacy Rights

If you are a California resident, the CCPA/CPRA gives you the right to know the categories of personal information we collect (identifiers, contact details, commercial and payment information, internet activity, and user-generated content), to access and delete it, to correct it, and not to be discriminated against for exercising these rights. We do not "sell" or "share" your personal information for cross-context behavioural advertising. To make a request, contact support@shattamovementfanbase.com.

15. Third-Party Links and Services

The Service may link to or integrate with third-party services, including payment processors, QR code generation, social media platforms, and hosting providers. Their own terms and privacy notices apply to their services.

16. Changes and Contact

We may update this Privacy Policy from time to time. The updated version will be posted on the Service with a new effective date.

SHATTA MOVEMENT
Accra, Ghana
support@shattamovementfanbase.com