Your privacy matters to us

Ensuring the security and confidentiality of your information

Privacy Policy

How we handle and protect your personal information

This Privacy Policy applies to personal data provided by you to any member of the Mauritius Post Ltd (hereinafter referred to as ‘we’/ ‘us’/ ‘our’ as appropriate) and describes how we handle your personal data in line with the Data Protection Act 2017 (hereinafter referred to as ‘the Act’), including taking appropriate measures to ensure confidentiality and security of such data.

Definition

Wherever used in this Policy, the following terms will have the meaning defined in this section.

Mauritius Post Ltd

Mauritius Post Ltd, including its subsidiary ‘The Mauritius Post Foreign Exchange Ltd’, is the entity responsible for providing the services described in this policy.” 

Personal data

Any information relating to an identified or identifiable individual.

Purpose

We will use your personal data to provide the services listed above and to comply with legal requirements. If we need to use your data for other purposes, we will first obtain your consent. 

Information we collect
  • We will only collect the data necessary to provide the services described above.
  • Information that you provide to us, or that we collect from you or when you upload a document on our Website/Customer Portal;
  • Details of your visits to our Website/Customer Portal and the resources and pages that you access
  • Information provided when you communicate with us.

We may also need to collect special categories of personal data concerning you that would be necessary for us to process your application. If you do not provide all of the requested information, we may not be able to provide our services to you.

We will only collect the data necessary to provide the services described above.

Disclosure of personal data

Access to your personal data is limited to those persons whom we reasonably believe need to use that data in order to provide you with the service you requested.

Where disclosure is required by law or in connection with legal proceedings, we shall have to disclose your personal data to relevant governing and regulatory bodies.

We may need to share your personal data with third-party service providers to deliver the services you requested. This will always be done under confidentiality agreements.

Accuracy of personal data

We will take all reasonable precautions to ensure accuracy of your personal data.

Should there be any changes in your personal data, please notify us promptly in order for us to update our records and ensure accuracy of your personal data at all times.

Period for which personal data will be retained

We will not retain your personal data for longer than is necessary for the purpose of the contract you hold with us.  However, in some circumstances, it may be necessary for us to keep your personal data for longer than that in order to fulfill the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements.

 

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such data without further notice to you.

Data storage and transfers

In order to deliver the service you requested, we may have to transfer/store your personal data outside Mauritius, e.g. When you complete and submit online forms on our Website or upon your registration on our Customer Portal, your personal data will be stored overseas or in Cloud Storage inside/outside Mauritius where the servers. We will ensure that any data transfers comply with the Act and maintain the same level of protection for your personal data, regardless of location.  

Protection of personal data

We have in place appropriate security and organizational measures for the prevention of unauthorized access to, alteration of, disclosure of, accidental loss, and destruction of your personal data.

While we implement robust security measures, please note that the transmission of data over the internet cannot be guaranteed as completely secure. Transmission is at your own risk. Where we have given you or where you have chosen a password so that you can access your account, you are responsible for keeping that password confidential.

In the case of a personal data breach which is likely to result in a high risk to your rights and freedom, we shall communicate such breach to you without undue delay.

While we implement robust security measures, please note that the transmission of data over the internet cannot be guaranteed as completely secure. Transmission is at your own risk.

Payment Procedures

If you are effecting an online payment through our Website / – Customer Portal, you will be required to input your card details on a bank’s payment gateway, which is a secured platform for processing and approval.

You will be redirected from our Website/Customer Portal to the bank’s payment page/gateway that collects card information (whereby the cardholder shall input his/her card details) and the bank’s gateway shall send a message back to the Website / Customer Portal (landing page) showing if the payment was successful or not.  Both our Website/Customer Portal and the bank’s payment Site use encrypted Secure Socket Layer connections to keep all information secure.

Job applicants

If you are a job seeker and sending your job application to us, we will collect and hold your information, including information you provide to us in your application, or provided to us by recruitment agencies, as well as information on you from any referees you provide.

We use this as necessary to enter into an employment contract with you, and for our legitimate interests in evaluating candidates and recording our recruitment activities, and as necessary to exercise and perform our employment law obligations.

If you are successful in your application, your information will be used and kept in accordance with our internal policies.  If you are not successful in your application, your information will be held for up to 12 months after the relevant round of recruitment has finished, in order to notify you of any future vacancies within the Mauritius Post Ltd which we think may be of interest to you.

If you are listed as a referee by an applicant, we will hold your name, contact details, professional information about you (such as your employer and job title) and details of your relationship with the applicant.  We will use this information as necessary for our legitimate interests in evaluating candidates and as necessary to exercise and perform our employment law obligations and rights.  Your information will be kept alongside the applicant’s information.

If you are listed as an emergency contact by someone who is employed by us, we will hold your name, contact details and details of your relationship with that employee.  We will use this to contact you as necessary to carry out our obligations under employment law, to protect the vital interests of that employee, and for our legitimate interests in administering our relationship with that employee. Your information will be retained until updated by the employee, or until it is no longer needed after the employee’s tenure with us.

Personal data of third party

If, in the course of your relationship with us, you submit to us the personal data of another person, we will assume that you have obtained prior explicit consent from any third party whose data you provide to us.

Marketing

We will only contact you for marketing purposes with your consent.  You will always have the right to ‘opt out’ of receiving our marketing materials.  You can exercise the right at any time by contacting us at marketing@mauritiuspost.mu.  If we send you any marketing emails, we will always provide an unsubscribe option to allow you to opt out of any further marketing emails. We respect your preferences and will promptly remove you from our marketing lists upon your request.

If you ‘opt-out’ of our marketing materials, you will be added to our suppression list to ensure we do not accidentally send you further marketing materials.  Where you unsubscribe from any postal marketing, you may initially still receive some content which has already been printed or sent, but we will remove you from any future campaigns.  We may still need to contact you for administrative or operational purposes, but we will make sure that those communications do not include direct marketing.

We do use third party service providers to send out our marketing, but we only allow them to use that information as per our instructions and where they have agreed to treat the information confidentially and to keep it secure.

Your rights

The Act gives you a number of rights when it comes to personal data we hold about you.  

The key rights, as applicable and subject to our legal obligations, are set out below:

  • Request access to your personal data 

This enables you to receive a copy of the personal data we hold about you.  You will not have to pay a fee to access your personal data.  However, we may charge a reasonable fee if your request for access is manifestly excessive, or alternatively, we may refuse to comply with the request.

  • Request rectification of your personal data 

This enables you to have any incomplete or inaccurate information we hold about you rectified.

  • Request restriction of processing of your personal data 

This enables you to ask us to limit the future processing of your personal data.

  • Request erasure of your personal data 

This enables you to ask us to delete personal data, however we may need to continue using your personal data to comply with our legal obligations.

  • Object to processing of your personal data 

Where we do not have a legitimate basis for doing so which overrides your rights, interests and freedoms.  You also have the right to object where we are processing your personal data for direct marketing purposes.

  • Withdraw consent 

In the limited circumstances where we are relying on your consent (as opposed to the other instances set out above) to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.  Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) you originally agreed to, unless we have a legitimate interest in doing so.

Object to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.

  • Lodge a complaint 

If you think that we are using your personal data in a way which breaches data protection laws, you have the right to lodge a complaint with the Data Protection Officer.

 

If you want to make any of the above requests, please contact us at marketing@mauritiuspost.mu.  We may need to request specific information from you to help us understand the nature of your request, to confirm your identity and ensure your right to access the information.

We will respond to your request as soon as we can.  Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we will let you know.

Electronic communication and transactions

If you subscribe to this service, we will be able to communicate and interact with each other in a faster and more efficient way. When you subscribe, you will be able to receive your policy and other documents in digital format. In addition, you also have the option to send us your instructions and communicate with us via email.

Maintenance of this Policy

We may change this Policy as and when required.  Such changes will be posted on this page and, where appropriate, notified to you by email or otherwise.  Please check back frequently to see any updates or changes to this Policy.

Contacting us

If you have any questions regarding this Policy, please contact us at marketing@mauritiuspost.mu.