We process your personal data for various purposes including:

• To manage our employment relationship with you;
• To manage our business relationship with you as client, customer, supplier, service provider or investor;
• The use your signature (whether in ink or electronic format), where you are an authorised signatory;
• To provide you our products and/or services and those of our Associated Companies;
• To respond to your request, query or complaint when you fill out a ‘contact us’ form;
• To consider your application where you have applied for a position with us;
• To comply with any legal obligations and statutory reporting requirements towards authorities and regulators such as the Mauritius Revenue Authority, Registrar of Companies, Stock Exchange of Mauritius or the Financial Services Commission;
• To prevent or detect abuse of our products and/or services;
• To confirm your identity and carry out background checks, including as part of our checks in relation to anti-money laundering, compliance screening and to prevent fraud and other crimes;
• To personalise your experience on your repeated visits to our website by delivering relevant website content and advertisement to you;
• To keep a database of customers/clients and potential customers/clients to communicate with in respect of our products and/or services and matters related thereto;
• To enable us to carry out statistical and other analysis to provide better customer service and measure the effectiveness of our communications to you;
• To pursue direct marketing and advertising;
• To use data analytics to improve our website, products, services, customer/client relationships and experiences;
• To administer and protect our businesses;
• To ensure security and safety on our premises;
•  To administer and protect our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
• Use of photographs/image for communication regarding our business activities in the ENL Group; and
• To fulfil such other purposes as may be related, directly or indirectly to our business activities.

We have described the purposes for which we may use your personal data. We will only use your personal data when the law allows us to and where it is necessary. The lawful bases we rely on when processing your personal data can be:

1. Where you have given your consent; or
2. The processing is necessary:

• for the performance of our contract with you or to take steps at your request before entering into a contract;
• for compliance with our legal obligations, for example any statutory reporting or record-keeping requirements towards authorities and regulators such as the Mauritius Revenue Authority, Registrar of Companies;;
• for the pursuance of our legitimate interests or those of a third party;
• for the purpose of historical, statistical and/or scientific research; or
• for the establishment, exercise or defence of legal claims or proceedings

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights, freedoms and interests. Examples of such ‘legitimate interests’ are data processing activities performed: for the better running of our business; (ii) for the provision and administration and improvement of IT services and network security; (iii) for a better identification on the types of customers we have and a study on their use of our services in order to develop our marketing strategy accordingly; (iv) for the prevention fraud or crime.

We will process your personal data for the purposes mentioned above based on your prior consent, to the extent such consent is required under Applicable Laws.

If you send to us a ‘spontaneous job application’ for any future job, you may be contacted by us regarding job vacancies within the ENL Group that could be of interest to you. We do not share your job applications and associated personal data with other entities in the ENL Group without your consent unless there is another lawful ground for doing so. When applying for a position with us, whether for a specific job or as part of a spontaneous job application, we will hold onto your personal data provided to us, for future job openings (please refer to Paragraph 8 below).

Except for certain information that is required by law, your decision to provide any personal data to us is voluntary. You will therefore not be subject to adverse consequences if you do not wish to provide us with your personal data, or you fail to provide that data when requested. However, please note that if you do not provide certain information, we may not be able to accomplish some or all of the purposes outlined in this Privacy Policy, in particular, we or you may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.

We will not use your personal data for purposes that are incompatible with the purposes for which they were collected, and of which you have been informed, unless it is required or authorised by law, or it is in your own vital interest (e.g. in case of a medical emergency) to do so.

We may process your personal data without your knowledge or consent, where this is required or permitted by law. For example, in order to prevent fraud and other illegal activity, and for verification process of any payment transaction or online payment.

We take cautionary measures to ensure we do not collect any personal data from you which we do not need in order to provide our products and services to you.

We shall pass on your personal information to our Associated Companies: i) only where you agree, so that they may offer you their products and services; or ii) where we are able to do so in accordance with Applicable Laws.