Privacy Policy
Pedridot Management Ltd– Privacy Policy
Pedridot Management Ltd values your privacy and is dedicated to safeguarding your personal information. This privacy statement aims to explain how we handle your personal data, outlining your privacy rights and the legal protections afforded to you.
We encourage you to refer to the Glossary for clarification on any terminology used within this notice.
1.0 Purpose of this privacy notice
This privacy notice informs you about how Pedridot Management Ltd collects and manages your personal data, including information provided through our website, client portal, or when purchasing our products/services. Please review this notice alongside any additional privacy or fair processing notices provided on specific occasions. These notices ensure you understand how and why we use your data. Note that this notice complements, but does not override, other notices
1.1 Controller
As a Data Controller, Pedridot Management Ltd is responsible for your personal data. For questions or to exercise your rights, contact our Data Protection Officer through our Contact Us or through the company links. You can also lodge a complaint with the Mauritius Data Protection Commissioner's Office, but we encourage you to reach out to us first.
1.2 Changes to the privacy notice and your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
2.0 The data we collect about you
Personal data, or personal information, refers to any information that can identify an individual. This does not include data where the identity has been removed (anonymous data).
We may gather, utilize, store, and transfer various types of personal data about you, which we have categorized as follows:
2.1 What kind of personal data do we collect?
-
names and contact information;
-
general demographic information (such as gender, age, date of birth, marital status, nationality, employment details, residence, utility bills, etc.);
-
Financial arrangements, savings, investments and financial protection plan details;
-
personal identification documentation and related information such as passport numbers, national ID Card, driver’s licence and employee identification numbers;
-
source of wealth;
-
financial and payment data such as bank account numbers, bank statements and transaction information;
-
tax residency; and
-
information related to the provision of the services performed under the contract for services to our
The list provided is not exhaustive, and Pedridot Management Ltd may also gather and process personal data as far as it is useful or necessary for the provision of our services.
We do not collect any Special Categories of Personal Data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data. Additionally, we do not collect any information about criminal convictions and offenses, unless material to our services and reputation.
2.2 If you fail to provide personal data
In instances where we are required by law or under the terms of a contract we have with you to collect personal data, and you fail to provide the requested data, we may be unable to fulfill the contract we have or are attempting to enter into with you. Should this occur, we may need to cancel a service you have with us. However, we will notify you if such circumstances arise at the time.
3.0 How is your personal data collected?
We use different methods to collect data from and about you including through:
- Direct interactions.
You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for our products or services;
- create an account on our client portal;
- subscribe to our service or publications;
- request marketing to be sent to you;
- or give us some
- Automated technologies or interactions.
- Technical Data about your equipment, browsing actions, and patterns is automatically collected as you interact with our website.
- This information is gathered through the use of cookies and similar technologies.
- Additionally, if you visit other websites using our cookies, we may receive Technical Data related to you from those sites.
- Third parties or publicly available sources.
We may receive personal data about you from various third parties as set out below
- analytics providers such as Google based outside the EU and Mauritius;
- search information providers inside OR outside the EU or
- Identity and Contact Data from publicly availably sources.
4.0 How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract of services we have entered into with
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
1. Marketing
We endeavor to give you control over the use of your personal data, especially concerning marketing and advertising. Prior to providing services, we will always seek your preferences regarding the use of your personal information.
2. Third-party marketing
We will get your express opt-in consent before we share your personal data with any company outside Pedridot Management Ltd for marketing purposes.
3. Change of purpose
We use your personal data only for its original purpose unless compatible with new intent. If needed for an unrelated purpose, we'll inform you and explain the legal basis. We may process your data without your consent when necessary or permitted by law.
4. Disclosures of your personal data
Pedridot Management Ltd may share personal data with other companies for service offerings or compliance purposes outlined in this Privacy Notice. Your data won't be disclosed, transferred, or sold to third parties without your consent, except as stated.
5.0 International transfers
Our external third parties may operate outside of Mauritius, potentially involving the transfer of your personal data out of the country.
When such transfers occur, we ensure a comparable level of protection through the following safeguards:
- We only transfer your personal data to countries that offer an adequate level of protection as per international data protection standards.
- With certain service providers, we establish contractual agreements to uphold the same protection standards for your personal data as in Mauritius.
- If we collaborate with US-based providers, we may transfer data to them if they adhere to the Privacy Shield framework. This framework guarantees similar protection standards for personal data shared between Europe and the US. For further details, please refer to the European Commission: EU-US Privacy Shield.
For more information on the specific mechanisms we employ for transferring your personal data out of Mauritius, feel free to reach out to us.
6.0 Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7.0 Data retention
How long will you use my personal data for?
We retain your personal data only as long as necessary for the purposes we collected it for, including legal and accounting requirements. Our retention policy, available upon request, outlines specific timeframes for different data types. You may request data deletion under certain circumstances.
8.0 Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
If you wish to exercise any of the rights set out above, please contact us.
9.0 No fee usually required
Accessing your personal data or exercising your rights won't incur any fees. However, if your request is deemed unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply.
10.0 What we may need from you
To safeguard your personal data and ensure your right to access it or exercise any other rights, we may request specific information from you to confirm your identity. This is a security measure to prevent unauthorized disclosure of personal data. Additionally, we may contact you for further details related to your request to expedite our response.
11.0 Third-party links
Our website may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling connections may result in third parties collecting or sharing data about you. We do not govern these third-party websites and are not liable for their privacy policies. We advise you to review the privacy notice of each website you visit when leaving our site.