Privacy Notice for Movista Solutions

 

Last updated on: May 13, 2025

Introduction

Movista, Inc. (“Movista”, “we”, “our”) cares about keeping your personal information, which we will refer to as “Personal Data,” safe. This document (“Privacy Notice” or simply “Notice”) outlines what we do with your Personal Data, how we protect it, and what privacy rights you may have with respect to it.

 

What This Privacy Notice Covers

This Notice describes how we process the Personal Data of individuals working for our customers (“Customers”) in the context of our web-based software applications (collectively, the “Services”), and those who contact our customer support channels.

 

When you give your data to one of our Customers or when we collect your Personal Data on their behalf, our Customer’s privacy notice, rather than this Notice, will be more relevant to the processing of your Personal Data, as our Customers are the ones deciding what Personal Data to collect and process about you, how it will be processed, and why. Please contact your employer directly to exercise your privacy rights.

What Is Not Covered by this Privacy Notice?

This Notice does not describe the Personal Data collected through our website, from business partners, or for promotional purposes. It also excludes data related to Movista employees, job applicants, interns, contractors, business owners, directors, officers, and medical staff. Additionally, if information is not maintained in a manner that can be linked to an individual or household, it is not considered Personal Data, and this Notice does not apply to the processing of such information.

What Personal Data Movista Processes

We process various types of Personal Data based on our Customers’ choices in using our Services. Here are some examples of the types of Personal Data regarding the Customers’ teams that we may process:

• Contact Information:
  • First name and last name
  • Home address (including street address, suite/apt number, city, state, postal code)
  • Contact & shipping address
  • Email address
  • Home phone
  • Mobile phone
  • Date of birth
  • Employee ID
• Status and Location:
  • Status: Not clocked in / Clocked in.
    • Once a team member clocks in, their manager may be able to see their real-time location until they clock out.
  • Work locations
  • Status (Active / Inactive)
• Access Information:
  • Single Sign-On (SSO) information
  • PIN to access the Services
  • Security question and answer
• Representative Details:
  • Type of representative
  • Device type (manufacturer, model) and operating system, operating system version and app version
    • Regarding the device ID, this includes the IDVF for iOS and the AndroidID for Android. These are unique identifiers derived from the device and app installation, not the serial number or IMEI. We use them to maintain the correct session or terminate an old session when a user logs in from multiple devices.
  • Attributes (created by the Customers), such as skills
• Payroll and Expenses:
  • Payroll and expenses information, such as job code, time manager, expense ID, maximum of daily and weekly hours
• Work Details:
  • Shipping location
  • Primary location
  • Work log
  • Work schedule (including company, address, and time)
• Uploaded Media:
  • Any Personal Data included in any photos and videos uploaded to the Services
  • Metadata (location, timestamp) of such photos and videos for verification purposes
• Mobile GPS Location Data:
  • Mobile GPS location data obtained by pinging the device periodically.
  • Information whether the individual is in a radius of the assignment location, nearby locations, how long the individual was at a location, and associated mileage and drive time
• Communications:
  • Notifications (messages)
  • Responses to task surveys created by Movista’s Customers
  • Any Personal Data included in communications with Movista’s support team

How Movista Obtains Personal Data

Personal Data is inputted by our Customers into the Services or provided by members of their teams upon invitation to join.

Movista’s Role with Respect to Personal Data

Within the scope of this Notice, Movista serves as an agent, also referred to as a data processor, for the Personal Data handled on behalf of our Customers when delivering our Services. Our Customers determine the type of Personal Data they want us to process on their behalf and how it must be processed. Typically, we do not directly interact with the individuals whose Personal Data we process on behalf of our Customers.

Purposes Movista Uses Personal Data For

Movista processes Personal Data for the following purposes:

·      Providing Access: Granting Customer teams access to our Services.

·      User Preferences: Remembering user preferences for the Services.

·      Information Provision: Providing Customers with team information through our Services.

·      Security: Ensuring the security of our Services.

·      Quality Maintenance: Maintaining and improving service quality.

·      Customer Support: Offering assistance and support to our Customers and their teams using the Services.

·      Billing: Handling billing for our Services.

·      Surveys: Sending satisfaction surveys about our Services.

·      Legal Matters: Addressing legal obligations, including record retention, legal claims, fraud detection and prevention, protecting rights and property, and complying with law enforcement requests and regulations.

How Long Movista Keeps Personal Data

We retain Personal Data for the duration of our contract with each Customer, and we retain GPS data as required by our Customer contracts. Data may be retained in our backup systems for up to 60 days in a non-editable state for data integrity.

Parties Movista Shares Personal Data With

Movista is a company headquartered in the United States of America. The service providers with whom we share Personal Data operate globally and include providers of:

• Customer Relationship Management (CRM) systems
• Reporting tools
• Tools used for mapping GPS locations and calculating and recording travel distance
• Email delivery services
• Ticketing systems

 

Our service providers may be located outside of your home country; however, we will require those third parties to maintain at least the same level of protection that we maintain for such Personal Data ourselves. Movista remains liable for the protection of your Personal Data that we transfer to our service providers, except to the extent that we are not responsible for the event giving rise to any unauthorized or improper processing.

 

Movista also makes the Personal Data available to its customers (typically, the employers of the individuals whose Personal Data Movista processes).

Other Disclosures of Personal Data

We may disclose Personal Data to the extent required by law, or if we have a good-faith belief that we need to disclose it in order to comply with official investigations or legal proceedings (whether initiated by governmental/law enforcement officials or private parties). However, we cannot guarantee the privacy and security of Personal Data disclosed to government/law enforcement officials.

 

Movista may also disclose Personal Data if we sell or transfer all or some of our company’s business interests, assets, or both, or in connection with a corporate restructuring. Finally, we may disclose Personal Data to our subsidiaries or affiliates, but only if necessary for business purposes, as described in the section above.

 

We reserve the right to use, transfer, sell, and share aggregated, anonymous data for legal purposes. This data, devoid of any Personal Data, may be used for analyzing usage trends or attracting compatible advertisers, sponsors, and customers.

Privacy Rights

You may have specific rights regarding your Personal Data that we collect and process. To exercise your rights with respect to information processed by us on behalf of one of our Customers, please read the privacy notice of that Customer.

Furthermore, we recognize the rights of individuals from the EU, UK, and Switzerland to access their Personal Data under the Data Privacy Framework (“DPF”), which includes EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. In accordance with our Customers’ instructions, we will collaborate to provide individuals with reasonable access to Personal Data we received under the DPF Principles. Additionally, we will take reasonable steps to enable individuals to correct, amend, or delete information that is demonstrated to be inaccurate or processed in violation of the DPF Principles. Moreover, if we have received your Personal Data under the DPF, you may have the right to opt out of having it shared with third parties and to revoke your consent to our sharing it with such parties. You may also have the right to opt out if your Personal Data is used for any purpose that is materially different from the purpose(s) for which it was originally collected or authorized by you. Individuals can request access to their Personal Data, make corrections, amendments, deletions, withdrawals of consent, or restrictions on the processing of their Personal Data in line with the DPF Principles by contacting our Customers.

How To Exercise Privacy Rights

To exercise any of the rights described above, please contact our Customer directly. If you need technical assistance, please contact [email protected].

Data Integrity & Security

We are committed to keeping your Personal Data safe. We have implemented and will maintain technical (such as encryption), administrative, and physical measures that are reasonably designed to help protect your Personal Data from unauthorized processing. Unauthorized processing includes unauthorized access, exfiltration, theft, disclosure, alteration, or destruction.

Data Privacy Framework

For Personal Data processed in the scope of this Notice, Movista complies with the applicable principles of the DPF set out by the U.S. Department of Commerce regarding the processing of Personal Data transferred under the DPF from the European Economic Area, the UK, and Switzerland to the United States, or otherwise received in reliance on the DPF.

 

We adhere to the DPF and will certify to the Department of Commerce our commitment to comply with the DPF Principles.

 

To learn more about the DPF Principles, and to view our certification information, please visit

Dispute Resolution

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Movista commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Movista at: [email protected]

 

Where a privacy complaint or dispute relating to Personal Data received by Movista in reliance on the DPF cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse without charging you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/.

Binding Arbitration

If a dispute or complaint related to Personal Data we received in reliance on the DPF cannot be resolved by us, nor through the dispute resolution mechanism mentioned above, you may have the right to require that Movista enters into binding arbitration with you under the DPF “Recourse, Enforcement and Liability” Principle and Annex I of the DPF.

U.S. Regulatory Oversight

Movista is subject to the investigatory and enforcement powers of the United States Federal Trade Commission.

Changes to this Notice

Material changes to this Notice will be posted on our website. Check the “Last Updated” date for the latest version.

Contact Us

For questions about this Notice or your Personal Data, email [email protected]. Please allow up to four weeks for a response.