Website Privacy Notice

Contents

1. INTRODUCTION
2. WHO WE ARE
3. Personal data we may collect about you
4. cookies
5. How we use your personal data
6. Legal basis of processing personal data
7. Disclosure of personal data
8. International transfers
9. Personal data security
10. Your data protection rights
11. Retention of your personal data
12. Changes to this Privacy Notice
13. Contact details

1. INTRODUCTION

   1. This website is owned and operated by KM Orizzon Limited (“KM Orizzon”, “we”, “us” or “our”).

   2. We are committed to safeguarding the privacy of data subjects, including our website visitors, prospective customers, visitors to branded social media pages, suppliers, service providers, contractors, business partners and other persons who interact with KM Orizzon through the website or general business channels.

   3. As a result, we would like to inform you regarding the way we use your personal data, as required by the Data Protection Act 2017 of Mauritius (“DPA”). We recommend that you read this Privacy Notice so that you understand our approach towards the use of your personal data.

   4. Our Privacy Notice sets out the types of personal data we collect, how we collect and process that data, who we may share this information with, and the rights you have in this respect.

   5. As data controller, we determine the purposes and means of the processing of that personal data.

   6. This Privacy Notice does not apply to personal data processed in connection with the provision of our software, implementation, support, maintenance or other customer services. Such processing will be addressed, where relevant, in a separate Customer Privacy Notice, applicable contractual terms and/or data processing terms.

2. WHO WE ARE

   1. KM Orizzon is a Mauritius-incorporated software publisher offering software solutions, together with related implementation, maintenance and support services.

   2. We are registered in Mauritius under registration number C0612524.

   3. Our principal place of business is at 2nd Floor - Quartier General - Old Post Office Road  |  Industrial Zone - St Pierre – Mauritius.

   4. For more information about KM Orizzon and our services, please refer to the relevant sections of our website.

3. Personal data we may collect about you

   1. The type of personal data we collect will depend on the purpose for which it is collected and used. We will only collect personal data that we need for that purpose.

   2. We may collect your personal data in the following ways:

      (a) When you give it to us directly, for example when you enquire about our products or services, request a demo, submit an enquiry through our website, provide or offer to provide services to us as a supplier, service provider, contractor or business partner, or correspond with us.

      (b) When you browse and/or interact with our website, online forms or branded social media pages.

   3. The types of personal data that are collected and processed may include:

      • Contact details: First name, surname, email address, phone number, company name and job title.
      • IT information: IP address, browser type and version, access time and length of access, page views, user activity and website usage in log files.

4. cookies

   1. We use cookies on our website. They help the website function properly, improve user experience and allow us to understand how visitors interact with the website.

   2. We may use the following types of cookies:

      • Necessary cookies: these cookies are required for the website to function properly and to enable essential features, such as security, page navigation or access to certain areas of the website. These cookies are essential and do not require your consent.
      • Analytics cookies: these cookies help us understand how visitors use our website, assess website performance and improve our services. Analytics cookies are not strictly necessary and will only be placed on your device where you have provided your consent, where such consent is required.

   3. Where cookies are not strictly necessary for the operation of our website, we will request your consent before placing them on your device. You may accept, reject or manage non-essential cookies through the cookie banner or cookie preference tool available on our website.

   4. You can also control or delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of the website.

   5. Some functions on our website may use third-party cookies, including analytics cookies. These cookies will only be stored in your browser where required consent has been obtained. We encourage you to consult the privacy and cookie notices of the relevant third-party providers for information regarding their use of cookies.

   6. We may use Google Analytics or similar tools to measure traffic and usage of our website. These providers may process information about your use of the website in accordance with their own privacy terms. Where required, these analytics cookies will only be used with your consent.

5. How we use your personal data

   1. KM Orizzon will only use your personal data for the purposes for which it was collected or agreed with you. We will not use your personal data for any automated individual decision-making which will have a significant impact on you.

   2. We have set out below the different purposes for processing your personal data:

      • for analysing the use and performance of our website;
      • for monitoring compliance with our policies and standards;
      • for ensuring the security of our website and maintaining back-ups of our databases;
      • for identity verification when you exercise your data subject rights;
      • for replying to any requests, complaints, comments or enquiries you submit to us regarding our services and notifying you about changes to our services;
      • for managing our relationship with web visitors, prospective customers, suppliers, service providers, contractors and business partners;
      • for managing procurement, contracting, invoicing and payment administration;
      • for record-keeping; and
      • for the establishment, exercise or defence of legal claims.

6. Legal basis of processing personal data

   1. KM Orizzon processes your personal data based on one or more of the following legal bases under the DPA:

      • Legal obligations: processing is necessary to comply with our legal obligations.
      • Performance of a contract: processing is necessary for the performance of a contract between you and us and/or for taking steps, at your request, to enter into such a contract.
      • Consent: processing is based on your consent, which you may withdraw at any time where consent is the applicable legal basis.
      • Legitimate interests: processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that such interests are not overridden by your rights and interests.

7. Disclosure of personal data

   1. In general, we do not share your personal information with third parties, other than service providers, suppliers, contractors, professional advisers or other third parties where this is necessary for the purposes set out in this Privacy Notice or where we otherwise have a lawful basis for doing so.

   2. We may make certain personal data available to third-party companies that provide us with software, hosting, IT support, cloud services, website management tools, payment services and other tools relevant to our business operations.

   3. We may also be required to disclose your personal data to other third parties such as lawyers, bankers, consultants, insurers, auditors, suppliers, service providers, contractors, as well as public and government authorities, where:

      • we have a duty or a right to disclose in terms of law or for law enforcement purposes;
      • we believe it is necessary to protect our rights;
      • we need to protect the rights, property or personal safety of any member of the public, web visitors, prospective customer, supplier, service provider, contractor, business partner or KM Orizzon; or
      • you have given your consent.

   4. We require our service providers, suppliers, contractors and other third parties to keep your personal data confidential and to only use the personal data for the specific purpose for which it was disclosed. Where required, we put appropriate contractual safeguards in place with our processors.

8. International transfers

   1. We may transfer, store or otherwise process your personal data outside Mauritius as may be necessary for the purposes mentioned above, including where we use service providers, hosting providers, cloud infrastructure, software platforms or support tools located outside Mauritius.

   2. These transfers will be made in compliance with the DPA.

   3. Data transfers do not change our commitments to safeguard your privacy. Your personal data remains subject to appropriate confidentiality and security obligations.

   4. Where required under the DPA, we will take reasonable steps to ensure that appropriate safeguards are in place for the protection of your personal data.

   5. If you would like further details on the transfer of your personal data outside Mauritius, please contact us using the contact details set out below.

9. Personal data security

   1. We have put in place appropriate security measures to prevent your personal data from being subject to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

   2. These measures may include access controls, password and authentication controls, secure transmission methods, backup and recovery procedures, incident management procedures, physical security measures, third-party management controls and periodic review of our security arrangements.

   3. We have also put in place procedures to deal with any suspected personal data breach and will notify you and the Data Protection Office of a suspected breach where we are legally required to do so.

10. Your data protection rights

    1. Under the DPA, you have rights we need to make you aware of. The rights available to you may depend on our reason for processing your information.

    2. These rights may include:

       • Right of access: you have the right to request access to the personal data we hold about you. This includes the right to obtain confirmation of whether we process your personal data and to receive a copy of that information.
       • Right to rectification: if you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
       • Right to erasure: in certain circumstances, you may have the right to request the erasure of your personal data. This includes situations where your personal data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other legal basis for processing.
       • Right to restriction of processing: you have the right to request the restriction of processing of your personal data under certain conditions. This means we may temporarily suspend the processing of your personal data, such as when you contest its accuracy or object to the processing.
       • Right to object: you have the right to object to the processing of your personal data in certain circumstances, such as where processing is based on legitimate interests. If you exercise this right, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
       • Right to withdraw consent: if we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

    3. If you wish to exercise any of your rights, please contact us using the contact details set out below. We may need to verify your identity before responding to your request.

11. Retention of your personal data

    1. Where we collect and/or process your personal data for a specific purpose, we will not keep it for longer than is necessary to fulfil that purpose, unless we have to keep it for legitimate business, legal, regulatory, audit or accounting reasons.

    2. To the extent permitted or required by law, we may delete your personal data at any time.

    3. KM Orizzon maintains, or may maintain, a record retention schedule outlining applicable retention periods. For further details, please contact us using the contact details set out below.

12. Changes to this Privacy Notice

    1. We keep our Privacy Notice under regular review.

    2. We reserve the right to change this Privacy Notice at any time. We encourage you to periodically review this notice to be informed of how we are using and protecting your personal data.

    3. Where appropriate, we may notify you of significant changes through our website, by email or through other appropriate means.

    4. This version was last updated in August 2026.

13. Contact details

    1. The primary point of contact for questions relating to this Privacy Notice, including any requests to exercise your legal rights, is our Data Protection Officer who can be contacted by email:
       [DPO@orizzon.com].

    2. If you believe we have not handled your request in an appropriate manner, you have the right to complain to the Data Protection Office of Mauritius.