Privacy Notice
1. Introduction
1.1 BDO LLP, BDO Solutions Ltd and BDO IT Consulting Ltd (collectively referred to as ''BDO'', ‘we’, ‘us’ or ‘our’) along with their affiliates and subsidiaries, are committed to safeguarding the privacy of data subjects, visiting our website. As a result, we hereby inform the user ( referred as ‘you’ or 'your') the manner in which we use your personal data, as is required by the European Union General Data Protection Regulation (hereafter the “GDPR”) and the Mauritius Data Protection Act 2017 (hereafter the “DPA”), where applicable. We recommend you read this Privacy Notice so that you understand our approach towards the use of your personal data.
1.2 Our Privacy Notice sets out the types of personal data we collect, how we collect and process the same, and with whom we may share this information along with your rights with respect to collection and processing the user’s personal data.
1.3 As data controllers, we determine the purposes and means of the processing of personal data. We also comply with our obligations as a data processor under the DPA and the GDPR.
1.4 This website is owned, operated, hosted, and maintained by BDO Global.
2. Who we are
2.1 BDO Global (BDO International Limited) is a UK company limited by guarantee.
2.2 The BDO entities in Mauritius are registered with the Data Protection Office. The principal place of business of BDO entities operating in the jurisdiction of Mauritius, is at 10 Frère Felix De Valois St, Port Louis and/or at Vivea Business Park, Moka, Mauritius.
3. Personal data we may collect about you
3.1 Personal data is any data from which you can be identified, and which relates to you. The type of data we collect will depend on the purpose for which it is collected and used in our business context. We will only collect data that we need for that purpose.
3.2 We may collect your personal data in the following ways:
(a) When you give it to us directly for e.g., you use any of our services, you provide or offer to provide services to us, you correspond with us and provide us with your information, or you visit our premises.
(b) When you browse and/or interact on our website.
4. Cookies
We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website. For more information see our Cookie Policy here.
5. How we use your personal data
5.1 BDO will only use your personal data for the purposes for which it was collected or agreed with you. We will not use your personal data for any automated individual decision making, which will have a significant impact on you.
5.2 We have set out below the different purposes for processing your personal data:
6. Legal basis of processing personal data
BDO processes your personal data based on one or more of the following legal basis:-
7. Disclosure of personal data
7.1 In general, we do not share your personal information with third parties (other than service providers acting on our behalf) unless we have a lawful basis for doing so.
7.2 We may need to disclose your personal data to other entities of BDO network, and when we share your data, we do so on a need-to-know basis.
8. International transfers
8.1 We may transfer, or store, your personal data outside Mauritius as may be necessary for the purposes mentioned above. These transfers would always be made in compliance with the GDPR and/or the DPA. Data transfers do not change any of our commitments to safeguard your privacy, and your personal data remains subject to existing confidentiality obligations.
8.2 If we transfer your personal data to other countries which provide a lower level of protection, we will ensure that there are appropriate safeguards in place with regard to the protection of your personal data, such as by using:
9. Personal data security
9.1 We are legally obliged to provide adequate protection for the personal data we hold. We have appropriate security measures to prevent your personal data from being subject to any accidental or unlawful destruction, loss, alteration, and any unauthorized disclosure or access.
9.2 We have procedures to deal with any suspected personal data breach and will notify you and the Data Protection Office of a suspected breach where we are legally required to do so.
9.3 We will, on an ongoing basis, continue to review our security controls and related processes to ensure that your personal data is secure.
9.4 Our security policies and procedures cover, amongst others: access control, encryption, virus and malware protection firewall, audit trail, business continuity, backup and restoration.
9.5 When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that the personal data you provide, is kept secure.
9.6 We will ensure that anyone to whom we pass your personal data agrees to treat your data with the same level of protection as we are obliged to.
10. Your data protection rights
Under the GDPR and the DPA, you have the rights we need to make you aware of. The rights available to you depend on our reason for processing your information:
11. Retention of your personal data
11.1 Where we collect and or process your personal data for a specific purpose, we will not keep it for longer than is necessary to fulfil the purposes for which it was collected, including that of satisfying any legal, regulatory, contractual or professional obligations, unless we have to keep it for a longer period, where required by law, professional standards, or for the establishment, exercise or defence of legal claims for any other legitimate purpose.
11.2 The maximum time we will keep your personal data is 7 years after termination of an engagement
11.3 BDO maintains a comprehensive Record Retention Schedule outlining our retention periods. For further details, please reach out to our Data Protection Officer (DPO).
12. Changes to this privacy notice
We keep our privacy notice under regular review. We reserve the right to change our privacy notice at any time thus, we encourage you to periodically review this notice to be informed of how we are using and protecting your personal data. We will notify you of significant changes by a pop-up on the website.
13. Contact details
13.1 The primary point of contact for questions relating to this privacy notice, including any requests to exercise your legal rights, is our DPO who can be contacted by email:
13.2 BDO LLP and BDO IP Consulting Ltd: Deepshi Hujoory: deepshi.hujoory@bdo.mu
BDO Solutions Ltd: Paul Ng Yuen Yan : paul.ngyuenyan@bdo.mu
13.3 If you believe we have not handled your request in an appropriate manner, you have the right to complain to the Data Protection Office. The procedure to file a complaint with the Data Protection Office is available on https://dataprotection.govmu.org/Pages/Home%20-%20Pages/Take%20Action/To-report-your-Complaint.aspx
1.1 BDO LLP, BDO Solutions Ltd and BDO IT Consulting Ltd (collectively referred to as ''BDO'', ‘we’, ‘us’ or ‘our’) along with their affiliates and subsidiaries, are committed to safeguarding the privacy of data subjects, visiting our website. As a result, we hereby inform the user ( referred as ‘you’ or 'your') the manner in which we use your personal data, as is required by the European Union General Data Protection Regulation (hereafter the “GDPR”) and the Mauritius Data Protection Act 2017 (hereafter the “DPA”), where applicable. We recommend you read this Privacy Notice so that you understand our approach towards the use of your personal data.
1.2 Our Privacy Notice sets out the types of personal data we collect, how we collect and process the same, and with whom we may share this information along with your rights with respect to collection and processing the user’s personal data.
1.3 As data controllers, we determine the purposes and means of the processing of personal data. We also comply with our obligations as a data processor under the DPA and the GDPR.
1.4 This website is owned, operated, hosted, and maintained by BDO Global.
2. Who we are
2.1 BDO Global (BDO International Limited) is a UK company limited by guarantee.
2.2 The BDO entities in Mauritius are registered with the Data Protection Office. The principal place of business of BDO entities operating in the jurisdiction of Mauritius, is at 10 Frère Felix De Valois St, Port Louis and/or at Vivea Business Park, Moka, Mauritius.
3. Personal data we may collect about you
3.1 Personal data is any data from which you can be identified, and which relates to you. The type of data we collect will depend on the purpose for which it is collected and used in our business context. We will only collect data that we need for that purpose.
3.2 We may collect your personal data in the following ways:
(a) When you give it to us directly for e.g., you use any of our services, you provide or offer to provide services to us, you correspond with us and provide us with your information, or you visit our premises.
(b) When you browse and/or interact on our website.
| Categories of Personal | Types of Personal Data that are collected and processed may include: | ||||
| Data: | |||||
| Contact details | First name, surname, email address, office phone and cell phone. |
||||
| IT information | IP addresses, browser type and version, access time and length of access, page views, user activity and website usage in log files. |
||||
4. Cookies
We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website. For more information see our Cookie Policy here.
5. How we use your personal data
5.1 BDO will only use your personal data for the purposes for which it was collected or agreed with you. We will not use your personal data for any automated individual decision making, which will have a significant impact on you.
5.2 We have set out below the different purposes for processing your personal data:
- For record-keeping.
- For analyzing the use of our website.
- For monitoring compliance with our policies and standards.
- For verifying your identity when you contact us.
- For contacting you with marketing information or in relation to services offered by us( unless you have opted out in receiving marketing communications, or when we are otherwise prevented by law from doing so).
- For ensuring the security of our website and maintaining back-ups of our databases.
- For identity verification when you exercise your data subject’s rights.
- For replying to any requests, complaints, comment, or enquiries you submit to us regarding our services and notifying you about changes to our service.
- For exercising our legal rights where it is necessary to do so, for example to detect violations of law.
6. Legal basis of processing personal data
BDO processes your personal data based on one or more of the following legal basis:-
- Legal Obligations: Processing is necessary to comply with our legal obligations.
- Consent: We may obtain your consent to collect and use certain type of personal information where we are required to do so by law, If we ask your consent to process your personal information, you may withdraw your consent at any time by contacting our DPO.
- Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party provided that such interests are not overridden by your rights and interests.
- Contractual Necessity: Processing is necessary for the performance of a contract between you and us and/or taking steps, at your request, to enter such a contract.
7. Disclosure of personal data
7.1 In general, we do not share your personal information with third parties (other than service providers acting on our behalf) unless we have a lawful basis for doing so.
7.2 We may need to disclose your personal data to other entities of BDO network, and when we share your data, we do so on a need-to-know basis.
- We may also make certain personal data available to third-party companies that provide us with software and tools relevant to our business operations.
- We may also be required to disclose your personal data to other third parties such as lawyers, bankers, consultants, insurers, auditors as well as public and government authorities for purposes mentioned in Section 5 or where, we have a duty or a right to disclose in terms of law or for national security and/or law enforcement purposes;
- We may have to disclose personal data it is necessary to protect our rights or where we need to protect the rights, property or personal safety of any member of the public or a customer of our company or the interests of our company; or
- In instances, where You have given your consent.
8. International transfers
8.1 We may transfer, or store, your personal data outside Mauritius as may be necessary for the purposes mentioned above. These transfers would always be made in compliance with the GDPR and/or the DPA. Data transfers do not change any of our commitments to safeguard your privacy, and your personal data remains subject to existing confidentiality obligations.
8.2 If we transfer your personal data to other countries which provide a lower level of protection, we will ensure that there are appropriate safeguards in place with regard to the protection of your personal data, such as by using:
- The European Commission's approved Standard Contractual Clauses; or
- The BDO Global Privacy Policy, BDO’s Binding Corporate Rules for Controllers and Processors, if we are transferring your personal data to another member firm in the BDO Global network.
9. Personal data security
9.1 We are legally obliged to provide adequate protection for the personal data we hold. We have appropriate security measures to prevent your personal data from being subject to any accidental or unlawful destruction, loss, alteration, and any unauthorized disclosure or access.
9.2 We have procedures to deal with any suspected personal data breach and will notify you and the Data Protection Office of a suspected breach where we are legally required to do so.
9.3 We will, on an ongoing basis, continue to review our security controls and related processes to ensure that your personal data is secure.
9.4 Our security policies and procedures cover, amongst others: access control, encryption, virus and malware protection firewall, audit trail, business continuity, backup and restoration.
9.5 When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that the personal data you provide, is kept secure.
9.6 We will ensure that anyone to whom we pass your personal data agrees to treat your data with the same level of protection as we are obliged to.
10. Your data protection rights
Under the GDPR and the DPA, you have the rights we need to make you aware of. The rights available to you depend on our reason for processing your information:
- Right of Access: You have the right to request access to the personal data we hold about you. This includes the right to obtain confirmation of whether we process your personal data and to receive a copy of that information.
- If you wish to exercise any of the rights set out above, please contact our DPO (Refer to Section 13 below)
- We endeavour to respond to all requests within a reasonable time. However, it may take us longer time, if your request is particularly complex, or you have made several requests.
11. Retention of your personal data
11.1 Where we collect and or process your personal data for a specific purpose, we will not keep it for longer than is necessary to fulfil the purposes for which it was collected, including that of satisfying any legal, regulatory, contractual or professional obligations, unless we have to keep it for a longer period, where required by law, professional standards, or for the establishment, exercise or defence of legal claims for any other legitimate purpose.
11.2 The maximum time we will keep your personal data is 7 years after termination of an engagement
11.3 BDO maintains a comprehensive Record Retention Schedule outlining our retention periods. For further details, please reach out to our Data Protection Officer (DPO).
12. Changes to this privacy notice
We keep our privacy notice under regular review. We reserve the right to change our privacy notice at any time thus, we encourage you to periodically review this notice to be informed of how we are using and protecting your personal data. We will notify you of significant changes by a pop-up on the website.
13. Contact details
13.1 The primary point of contact for questions relating to this privacy notice, including any requests to exercise your legal rights, is our DPO who can be contacted by email:
13.2 BDO LLP and BDO IP Consulting Ltd: Deepshi Hujoory: deepshi.hujoory@bdo.mu
BDO Solutions Ltd: Paul Ng Yuen Yan : paul.ngyuenyan@bdo.mu
13.3 If you believe we have not handled your request in an appropriate manner, you have the right to complain to the Data Protection Office. The procedure to file a complaint with the Data Protection Office is available on https://dataprotection.govmu.org/Pages/Home%20-%20Pages/Take%20Action/To-report-your-Complaint.aspx