INTRODUCTION
Leal & Co. Ltd ("Leal", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy and Cookie Policy explains how we collect, use, disclose, store and protect personal data obtained through our website and during our interactions with prospective customers, existing customers and business contacts.
This Policy has been prepared in accordance with:
- The Mauritius Data Protection Act 2017 ("DPA"); and
- Where applicable, the General Data Protection Regulation (EU) 2016/679 ("GDPR").
By using our website, submitting an enquiry or interacting with us, you acknowledge that you have read and understood this Privacy Policy.
WHO WE ARE
Leal & Co. Ltd is a member of the Leal Group and provides corporate, business and professional services to customers and affiliated companies.
For purposes of applicable data protection legislation, Leal & Co. Ltd is the Data Controller in respect of personal data collected through this website and through customer and business relationship management activities.
SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies only to:
- visitors to our website;
- individuals making enquiries through our website;
- prospective customers;
- existing customers;
- individuals subscribing to newsletters or marketing communications;
- individuals attending events organised by Leal & Co.; and
- individuals communicating with us through our digital channels.
This Privacy Policy does not apply to employee, recruitment, supplier or other internal processing activities, which may be governed by separate privacy notices.
PERSONAL DATA WE COLLECT
Information You Provide Directly
We may collect the following personal data when you interact with us:
- First name and surname;
- Company or employer name;
- Job title;
- Email address;
- Telephone number;
- Country or business location;
- Information contained in enquiries, requests or correspondence;
- Marketing preferences; and
- Any other information you voluntarily provide.
Information Automatically Collected
When you visit our website, we may automatically collect:
- Internet Protocol (IP) address;
- Device information;
- Browser type and version;
- Operating system;
- Website usage information;
- Date and time of access;
- Referring website;
- Pages viewed;
- Cookie information; and
- Similar usage and analytical information.
HOW WE COLLECT PERSONAL DATA
We may collect personal data:
- Through website contact forms;
- When you communicate with us by email;
- Through telephone calls;
- During meetings and business discussions;
- Through newsletter subscriptions;
- Through event registrations;
- Through customer account creation;
- Through cookies and analytics tools;
- Through social media interactions; and
- Through publicly available professional sources.
PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
We may process personal data for one or more of the following purposes:
Customer Relationship Management
- Responding to enquiries;
- Providing information about products and services;
- Managing customer relationships;
- Handling requests and feedback;
- Preparing quotations and proposals.
Contractual and Business Purposes
- Providing products and services;
- Managing customer accounts;
- Administering contracts;
- Processing transactions;
- Managing payments and collections.
Marketing and Communications
- Sending newsletters;
- Sharing information regarding products, promotions and events;
- Conducting customer surveys;
- Managing subscriptions and communication preferences.
Website Administration
- Improving website functionality;
- Monitoring website performance;
- Analysing website usage;
- Troubleshooting technical issues;
- Ensuring website security.
Compliance and Legal Purposes
- Meeting legal and regulatory obligations;
- Protecting legal rights;
- Preventing fraud and misuse;
- Managing disputes and claims.
LAWFUL BASIS FOR PROCESSING
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Consent
Where you have expressly consented to a specific processing activity.
Contract
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal Obligations
Where processing is required to comply with applicable laws, regulations or lawful requests from authorities.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.
These interests may include:
- managing customer relationships;
- improving our services;
- maintaining website security;
- business administration;
- preventing fraud; and
- protecting our legal rights.
MARKETING COMMUNICATIONS
Where permitted by law, we may send information relating to:
- products and services;
- events and seminars;
- industry updates;
- newsletters;
- promotions; and
- other business communications.
You may unsubscribe from marketing communications at any time by:
- selecting the unsubscribe option included in electronic communications; or
- contacting us directly using the contact information provided below.
We will stop using your personal data for direct marketing once a valid objection or unsubscribe request has been received.
DISCLOSURE OF PERSONAL DATA
We may share personal data with:
Other Leal Group Companies
Where necessary to provide products, services or customer support.
Service Providers
Including:
- website hosting providers;
- IT service providers;
- cybersecurity providers;
- cloud service providers;
- marketing service providers;
- customer relationship management providers.
Professional Advisers
Including:
- lawyers;
- auditors;
- insurers;
- accountants;
- consultants.
Public Authorities
Where disclosure is required by law, regulation, court order or legal process.
We do not sell personal data.
INTERNATIONAL TRANSFERS
Some of our service providers and technology partners may be located outside Mauritius.
Where personal data is transferred internationally, we will take appropriate measures to ensure compliance with the Mauritius Data Protection Act 2017 and, where applicable, the GDPR.
Such safeguards may include:
- transfers to jurisdictions recognised as providing adequate protection;
- contractual safeguards;
- Standard Contractual Clauses;
- appropriate technical and organisational protection measures.
PERSONAL DATA SECURITY
We implement appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- unlawful disclosure;
- accidental loss;
- destruction;
- alteration;
- misuse.
These measures may include:
- access controls;
- user authentication mechanisms;
- cybersecurity monitoring;
- network security controls;
- secure communication protocols;
- staff confidentiality obligations;
- incident management procedures;
- backup and recovery measures.
Despite our efforts, no website, system or method of transmission can be guaranteed to be completely secure.
DATA RETENTION
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy and to comply with legal, regulatory and business requirements.
As a general guideline:
|
Category |
Retention Period |
|
Website enquiries |
Up to 36 months after the last meaningful interaction |
|
Marketing subscriptions |
Until consent is withdrawn or unsubscribe request received |
|
Customer relationship records |
Duration of relationship and applicable legal retention periods |
|
Website logs |
According to operational and security requirements |
|
Cookie preferences |
According to cookie settings and expiry periods |
Where required, personal data may be retained for longer periods in relation to legal proceedings, regulatory matters or contractual claims.
COOKIES POLICY
What Are Cookies?
Cookies are small text files stored on your device when you visit a website.
Cookies help improve your browsing experience and enable certain website functionalities.
Types of Cookies We Use
Strictly Necessary Cookies
These cookies are necessary for:
- website operation;
- security;
- session management;
- saving cookie preferences.
Functional Cookies
These cookies allow the website to remember your preferences and improve your user experience.
Analytics Cookies
These cookies help us understand:
- how visitors use our website;
- which pages are viewed;
- how website performance may be improved.
Marketing Cookies
These cookies may be used to:
- measure campaign effectiveness;
- personalise content;
- improve advertising relevance.
Marketing cookies will only be used where permitted by applicable law and, where required, after obtaining your consent.
Managing Cookies
You may manage your cookie preferences:
- through our cookie preference tool;
- through your browser settings.
Disabling certain cookies may affect website functionality.
YOUR RIGHTS
Subject to applicable legal requirements and limitations, you may have the following rights:
Right of Access
To request information about personal data we hold concerning you.
Right to Rectification
To request correction of inaccurate or incomplete personal data.
Right to Erasure
To request deletion of personal data under certain circumstances.
Right to Restrict Processing
To request limitation of processing activities.
Right to Object
To object to processing based on legitimate interests or direct marketing.
Right to Data Portability
To receive personal data in a structured, commonly used and machine-readable format where applicable.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Data Protection Office of Mauritius if you believe your personal data has been processed unlawfully.
EXERCISING YOUR RIGHTS
To exercise any of your rights, please contact:
Data Protection Officer
Email: gdpo@lealgroup.mu
We may request proof of identity before responding to any request.
We will respond within the timeframes prescribed by applicable law.
THIRD-PARTY WEBSITES
Our website may contain links to third-party websites.
Leal & Co. Ltd is not responsible for the privacy practices, content or security of those websites. Users should review the privacy policies of third-party websites before providing personal data.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
- changes in legislation;
- technological developments;
- business requirements; or
- changes to our data processing practices.
The latest version will always be available on our website and will indicate the date of the most recent update.
CONTACT US
If you have any questions regarding this Privacy Policy or our processing of personal data, please contact:
Data Protection Officer
Leal & Co. Ltd
Email: gdpo@lealgroup.mu