1. Introduction
Kolos Cement Ltd ("we", "our", "us") is committed to protecting your privacy and ensuring that your personal data is handled securely and in accordance with applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.
2. Information We Collect
We collect the following types of information:
a. Personal Data You Provide
This includes information such as your name, email address, phone number, billing and shipping address, payment details, and any other information you provide when making a purchase, contacting us, or registering on our website.
b. Automatically Collected Data
We collect information automatically through cookies and similar technologies, including your IP address, browser type, operating system, browsing behavior, and other technical data.
3. How We Use Your Information
We use your personal data for the following purposes:
a. Order Processing
To process and deliver your orders, manage payments, and provide customer support.
b. Service Improvement
To enhance our website, products, and services based on your feedback and usage patterns.
c. Legal Compliance
To comply with legal obligations, such as tax reporting and fraud prevention.
4. Data Storage and Cloud Services
Your personal data is stored securely on our cloud servers, which may be located outside of Mauritius. We ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data in accordance with applicable data protection laws, regardless of where it is stored.
5. Our Legal Basis for Processing Your Data
We are committed to processing your personal data in a lawful, fair, and transparent manner. Under the Mauritius Data Protection Act 2017, we rely on the following legal bases for collecting and processing your information:
Performance of a Contract
We process your personal data to fulfil our contractual obligations to you. This includes processing your orders, managing payments, delivering products, and providing customer support.
Your Consent
We rely on your freely given, specific, and informed consent, where required by law, for processing your personal data. You have the right to withdraw your consent at any time by contacting us.
Legitimate Interests
We may process your information where it is necessary for our legitimate interests, provided these interests are not overridden by your fundamental rights and freedoms.
This includes activities such as improving our website and services, analysing user trends to enhance customer experience, and for fraud prevention and security purposes.
Compliance with Legal Obligations
We may be required to process your personal data to comply with our legal and regulatory obligations in Mauritius, including tax reporting, financial accounting, and responding to lawful requests from authorities.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, as well as required by law. After the applicable retention period, your data will be securely deleted or anonymized.
7. Sharing Your Information
We do not sell your personal data. We may share your data with trusted third parties, such as:
· Logistics Providers: To fulfill and deliver your orders.
· Payment Processors: To process transactions securely.
All third-party service providers are contractually obligated to protect your data and use it only in accordance with our instructions.
8. Privacy Notice
This Privacy Policy serves as a notice to inform you about how we collect, use, share, and protect your personal data. We are committed to transparency and ensuring that your data is handled responsibly in compliance with all relevant laws.
9. Privacy Consent
By using our website or providing personal information, you consent to the collection, use, and processing of your data as described in this Privacy Policy. Where required by law, we will seek your explicit consent before processing certain types of personal data.
10. Your Rights
You have the following rights regarding your personal data:
· Right to Access: You have the right to request a copy of the personal data we hold about you.
· Right to Rectification: You have the right to request corrections to any inaccurate or incomplete data.
· Right to Erasure: You have the right to request that we delete your personal data, subject to certain conditions.
· Right to Restrict Processing: You have the right to request that we limit the processing of your data in certain circumstances.
· Right to Data Portability: You have the right to request that your data be provided to you in a structured, commonly used format and transferred to another data controller.
· Right to Object: You can object to the processing of your data for specific purposes, such as direct marketing.
· Right to Withdraw Consent: You have the right to withdraw your consent at any time, provided that the processing is based on your consent.
11. Cookies
We use cookies to enhance your browsing experience and improve our services. Cookies are small data files that are stored on your device when you visit our website. They help us recognize your device and personalize your experience.
By continuing to use our website, you agree to our use of cookies. You can manage or disable cookies through your browser settings at any time. For more details, please refer to our Cookie Policy.
12. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or damage. This includes encryption, access controls, and regular security audits.
13. Data Breach Notification
We take data security very seriously. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we are committed to notifying both the Data Protection Office of Mauritius and the affected individuals in a timely manner, in accordance with our legal obligations.
14. International Data Transfers
As we use cloud services, your data may be transferred to and processed in countries outside of Mauritius. We ensure that such transfers comply with applicable data protection laws and that your data is protected through appropriate safeguards, such as Standard Contractual Clauses (SCCs).
15. Children’s Privacy
We do not knowingly collect personal data from children under the age of 16 without parental consent. If we become aware that we have inadvertently collected such data, we will delete it as soon as possible. Parents can contact us to request the deletion of their child's data.
16. Third-Party Links
Our website may contain links to other websites that are not operated by us (for example, links to our social media pages or to payment gateways). Please be aware that we have
no control over the content and privacy practices of these sites. This Privacy Policy applies only to our website. When you leave our site, we encourage you to read the privacy policy of the destination website.
17. Changes to This Policy
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page, and we encourage you to review it regularly. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.
18. Contact Us
For any questions specifically related to this Privacy Policy or how we handle your personal data, you can contact our designated data protection representative at dpo@koloscement.com