Privacy Policy

Dexx IT Computer System Co. Ltd is committed to protecting your privacy and ensuring that your personal data is handled securely and transparently in compliance with the Mauritius Data Protection Act 2017 (DPA 2017).

1. Who We Are (Data Controller)

For the purpose of the Data Protection Act 2017, the Data Controller responsible for processing your personal data is:

2. What Data We Collect

We collect and process the following categories of personal data when you interact with our website and services:

• Account Data: Full name, email address, and encrypted (hashed) account password when you register an account.
• Order & Delivery Data: Shipping address, city, postal code, phone number, payment method preference, and complete order history upon placing an order.
• Technical & Usage Data: IP address, browser type and version, operating system, pages visited, and traffic metrics collected automatically via Google Analytics 4 (GA4).
• Communication Data: Name, email address, subject, and message content sent to us via our website contact form or support channels.

3. Why We Collect It (Legal Basis)

We process your personal data under the following lawful bases established by the DPA 2017:

4. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Retained for the lifetime of your account until an explicit account deletion request is submitted.
• Order & Transaction Records: Retained for 5 years to comply with statutory accounting, tax, and audit obligations under Mauritian law.
• Analytics Data: Google Analytics data is retained for 26 months before automated deletion.

5. Who We Share Data With

We do not sell, rent, or trade your personal data to third parties. We share data strictly with trusted service partners required for operations:

• Delivery Partners: Local couriers and logistics personnel for physical order delivery across Mauritius.
• Payment Processors: Banking institutions and payment gateways to verify transactions and process payments safely.
• Analytics Providers: Google LLC for web traffic performance measurement.

6. Cross-Border Transfers

Our website uses Google Analytics 4, which transfers web traffic metadata to Google LLC servers located in the United States. These international data transfers are protected under Google's Data Processing Terms utilizing European Commission Standard Contractual Clauses (SCCs) recognized under DPA 2017 standards. We do not perform any other international transfers of personal data.

7. Your Rights Under DPA 2017

Under the Data Protection Act 2017, Mauritian data subjects hold statutory rights regarding their personal information:

• Right to be Informed: Transparent information on how your data is processed (this policy).
• Right of Access: Obtain confirmation and a free copy of personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer legally required.
• Right to Object: Object at any time to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please send an email to info@dexxitcomputer.com with the subject line "Data Request". We will verify your identity and respond to your request within 21 days.

8. Cookies & Tracking Technologies

Cookies are small text files stored on your device to ensure proper site function and measure user interaction. We use essential session cookies (necessary for shopping cart and user authentication) and Google Analytics 4 performance cookies. You can manage or disable cookies at any time directly through your web browser settings.

9. Data Protection Office Escalation

If you believe that Dexx IT has not complied with your data protection rights under DPA 2017, you have the right to lodge a complaint with the national supervisory authority:

10. Policy Updates

We reserve the right to modify this Privacy Policy as necessary to reflect operational or legal updates. Any revisions will be published on this page with an updated "Last Updated" timestamp (Current version: June 2026).