Privacy Policy

1. Who we are

GritCargo Ltd. (registration number 226458) is the data controller for personal information collected through this site. We are registered in Mauritius at Mapou 31803, Mauritius.

2. What we collect

Information you give us through the demo / contact form: your name, work email, company, role, area of interest, and any message content you provide.

Information we collect automatically when you use the site: your IP address, device and browser type, and usage data collected via cookies and similar technologies. See our Cookie Policy for details.

3. Why we use it and our lawful basis

We use your information to:

• Respond to your enquiry and arrange a demo. Our lawful basis is taking steps at your request prior to entering a contract, and our legitimate interest in responding to business enquiries. Under POPIA, this processing is justified as necessary to conclude or perform under a contract and for our legitimate interests.
• Operate, maintain, and secure the site, in our legitimate interest in running a safe, functional website.
• Understand site usage through analytics, only where you have given consent.

We do not sell your personal information.

4. Who we share it with

We share personal information only where needed, with:

• Service providers (processors) who help us run the site and respond to you, namely Amazon Web Services (website hosting and infrastructure), Google Workspace (email and correspondence), Google Analytics (site analytics, with your consent), and HubSpot (customer relationship management).
• Mega Fortris, our distribution partner, to whom we pass your enquiry so they can respond to and fulfil it.

We require everyone who processes personal information on our behalf to keep it secure and to use it only for the purposes we specify. We do not otherwise disclose your information except where required by law.

5. International transfers

We are registered in Mauritius, and we may use service providers located in other countries, including the EEA and the UK. This means your personal information may be transferred to, and processed in, a country other than the one you are in.

Our website and infrastructure are hosted by Amazon Web Services in its Ireland (EEA) region. Some of our other providers, such as Google Workspace and HubSpot, may process personal information in other countries, including the United States.

Where we transfer personal information across borders, we put appropriate safeguards in place so that it remains protected to the standard required by the Mauritius Data Protection Act 2017, POPIA, and the GDPR / UK GDPR. We rely on standard contractual clauses for these transfers, including with Amazon Web Services, Google Workspace, and HubSpot.

6. How long we keep it

We keep enquiry data for up to 12 months after our last contact with you about your enquiry, after which we delete or anonymise it, unless we are required to keep it longer to meet a legal obligation or to establish, exercise, or defend a legal claim.

7. Your rights

Subject to the Mauritius Data Protection Act 2017, POPIA, and the GDPR / UK GDPR where applicable, you have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• request deletion of your information;
• request that we restrict or stop processing your information;
• object to processing based on legitimate interests, and to withdraw consent at any time where processing is based on consent; and
• request a copy of your information in a portable format, where that right applies.

To exercise any of these rights, contact us through our contact page. We will respond within the timeframes required by the applicable law.

You also have the right to lodge a complaint with the relevant supervisory authority:

• Mauritius. The Data Protection Office (Mauritius).
• South Africa. The Information Regulator (South Africa).
• European Union. Your local data protection authority.
• United Kingdom. The Information Commissioner's Office (ICO).

8. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date it took effect shown above.