Privacy Policy

Introduction

Your privacy is important to us, and this policy explains how we collect, use, and protect your personal data when you use our website, platform, or services. It also outlines your rights and how to exercise them.

This Privacy Policy should be read together with our Terms and Conditions.

Who Does This Policy Apply To?

This policy applies to anyone using our website, platform, or services.

What Personal Data Do We Collect?

The personal data we may collect about you includes the following:

• Account Information: Name, email, job title, and contact details when you register.
• Profile Information: Username, password, and additional profile details.
• Third-Party Login: Data from services like Google when using Single Sign-On (SSO).
• Inquiries and Support: Name, email, and chat content from live chat interactions or help desk interactions.
• Marketing: Email addresses for newsletters or promotional content, with an option to unsubscribe anytime.
• Interactions: Additional personal data from the website contests, surveys, events and job applications, among others.
• Usage Information: Log data, IP address, browser type, pages visited, time/date of visits, time spent on pages, clickstream, device details, and location (where applicable and subject to applicable laws).
• Cookies & Tracking Data: See section below.
• Financial Data: Bank account details, billing information and purchase history depending on interactions with us.
• Special Category Data: Depending on the services you use, we may also collect special category data. This data is only collected and processed where a valid legal basis under Article 9 GDPR applies.

Why Do We Collect Your Data?

We use the personal data we collect for various business purposes, including:

• Providing Requested Services: To operate our website and platform, enable authorised users, and facilitate services for customers, and assist with inquiries.
• Improving Services: To analyze usage, gather feedback, maintain user-friendly interfaces, and enhance functionality.
• Security: To prevent fraud, detect suspicious activity and ensure safe operations.
• Marketing: To match user's needs and interests and provide personalised experiences (with your consent where required).
• Legal Compliance: To meet legal obligations and enforce our terms and disclose personal data to law enforcement or government authorities where necessary.

When Can We Use Your Data?

We will only process your personal data:

• You give explicit consent.
• It is needed to fulfil a contract with you.
• It's required by law.
• We have legitimate business interests that don't override your rights.

Sharing Your Data

We may share your personal data with:

• Service Providers: For hosting, analytics, or support services.
• Professional Advisors: Lawyers, auditors, or consultants.
• Legal Authorities: To comply with legal obligations or prevent fraud, or address security threats.
• Business Transfers: During mergers, acquisitions, bankruptcies, or similar business changes, subject to appropriate confidentiality arrangements.

International Data Transfers

The personal data we collect from you may be transferred to, stored, and processed by our affiliates, properly vetted sub-processors, and third party service providers, and may be transferred outside the country where it was collected. If transferred to a country with different data protection laws, we will take all steps necessary to ensure your data remains protected. By submitting your personal data, you acknowledge that it may be transferred, stored, or processed in a country with a different data protection standards than the country in which it was collected. All sub-processors and third-party service providers are under appropriate contractual obligations to ensure the safety and confidentiality of your personal data.

Data Security

We use industry-standard security measures to protect personal data from unauthorised access, loss, or misuse. Access to personal data is limited to employees and contractors on a need-to-know basis, and we regularly test our systems to ensure they remain secure. These steps take into account the sensitivity of the personal data we collect, process, and store, and the current state of technology. Given the nature of communications and technology, we cannot guarantee that personal data in our care will be absolutely safe from intrusion during transmission or while stored on our systems. We require partners with whom we share personal data to implement appropriate security measures to protect it. In the event of a personal data breach, we will notify both the relevant supervisory authority and affected individuals, where required by law.

Data Retention

We retain your personal data in accordance with applicable laws, regulations, and contractual agreements, and only for as long as necessary to provide our services and for reasonable business and lawful needs, including pursuing legitimate business interests, conducting audits, complying with legal obligations, resolving disputes, and enforcing our agreements. Specific retention periods by data category are set out in Arrel Technology's internal Record Retention Policy. When we no longer require your personal data, we will delete or anonymise it, or, where this is not immediately possible (for example, because it is held in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

Cookies

We will ask for your explicit consent before placing any cookies that identify you, your location, or your profile on your device. We may use cookies or similar technologies to identify how visitors use our website and platform, to help us improve and enhance the user experience, and to adjust the website and platform to your preferences. Cookies may contain data such as the pages you visited, the length of time you stayed, and the location from which you accessed the website or platform.

If you prefer not to have cookies stored on your device, you may reject non-necessary cookies through our website banner, adjust your browser settings, or manually remove cookies already placed. Rejecting cookies may limit your ability to fully access our website or platform.

To find out more about cookies, visit www.allaboutcookies.org.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor use of our Service, and this data may be shared with other Google services. Google may use the data to contextualise and personalise the ads of its own advertising network.

You can opt out of having your activity on the Service made available to Google Analytics by installing the Google Analytics opt-out browser add-on, which prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information about your visit activity.

For more information on Google's privacy practices, please visit: Google Privacy & Terms

Links to Other Sites

Our website or platform may provide links to other websites. This privacy policy does not cover the personal data practices of other providers of products or services, advertisers, or other websites or companies not owned or controlled by us. We suggest that before volunteering any personal data on a linked site, you review that site's own privacy policy, as we have no control over and assume no responsibility for third-party content or practices.

Your Rights

If you believe your rights regarding your personal data have been violated, you have the option to lodge a complaint with the relevant supervisory authority. To exercise your data protection rights below, please contact us at privacy@arreltech.com. Note that we may ask you to verify your identity first.

Your rights include:

• Being informed about the personal data we process about you;
• Accessing the personal data we process about you;
• Rectifying or updating the personal data you have provided;
• Requesting the deletion of your personal data;
• Opting out or objecting to certain uses of your personal data;
• Withdrawing consent at any time;
• Exercising the right to data portability; and
• Asking us to review any automated decisions made about your personal data.

Children's Data

Our services are not intended for children below the applicable age threshold in your jurisdiction, and we do not knowingly or intentionally collect personal data about children below that age. Age thresholds vary by jurisdiction, for example:

• Under 13: United States (COPPA), Canada (PIPEDA guidance).
• Under 16: European Union and United Kingdom (GDPR default), Mauritius (Data Protection Act 2017).
• Under 18: South Africa (POPIA).

If you are below the applicable age threshold, you may not use the website or platform unless parental or guardian consent is provided. If you believe we may hold personal data from or about a person below the applicable age threshold, please notify us at privacy@arreltech.com.

Policy Changes

We may occasionally update this privacy policy. When we do, we will post a prominent notice in this section notifying users of the update. For material changes (substantially new practices you wouldn't expect from us or that we hadn't previously told you about), we may also notify you by email or through your account, where we hold your contact details.

Data Protection Officer (DPO)

Arrel Technology Ltd is registered with the Data Protection Office of Mauritius as a Data Controller. If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you may contact: