Privacy Policy

1. Who we are

Drive Line Mauritius (“we”, “us”, “our”) operates the website at https://drivelinemu.com and sells new and pre-owned vehicles in Mauritius. For the purposes of the Data Protection Act 2017 (Act No. 20 of 2017) and, where it applies, the EU General Data Protection Regulation (GDPR), we are the data controller of the personal data described in this policy.

Registered address: Desvaux Road, Petit Verger, St Pierre, Mauritius
Data protection contact: [email protected]
Phone: +230 5503 4669

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity data: your full name, and (for test drives) your National Identity Card (NIC) number and driving licence number.
• Contact data: email address, telephone number and postal address.
• Enquiry data: the vehicle(s) you are interested in, test-drive dates, trade-in details, messages and preferences you send us.
• Account data: if you create an account, your name, email and an encrypted (hashed) password.
• Finance data: information you provide so we can refer you to our banking/leasing partners for a car-loan or lease quotation.
• Technical & usage data: IP address, device and browser type, pages viewed and interactions, collected via cookies and similar technologies (see our Cookie Policy).

The NIC and driving-licence numbers we collect for test drives are handled only for the purposes below and are treated as sensitive; we minimise and secure them accordingly.

3. How we collect it

• Directly from you: when you complete a contact, enquiry, test-drive or finance form, create an account, or contact us by phone, email or social media.
• Automatically: through cookies and analytics when you use the website.
• From third parties: for example, our analytics and anti-spam providers, or a banking partner confirming a finance outcome.

4. Why we process it, and our lawful bases

We only process personal data where we have a lawful basis under Article 6 of the GDPR and the Data Protection Act 2017 (Act No. 20 of 2017). Our bases are:

• Performance of a contract / steps at your request: to respond to enquiries, arrange test drives, and progress a purchase.
• Consent: for optional analytics cookies, marketing communications, and passing your details to a finance partner. You may withdraw consent at any time.
• Legitimate interests: to run and secure our business, prevent fraud/spam, and improve our website, balanced against your rights.
• Legal obligation: to comply with applicable law (e.g. tax, accounting, and lawful requests from authorities).

5. How we use your data

• Respond to your enquiries and arrange and confirm test drives (including verifying licence/NIC so the vehicle is insured and ready).
• Process and follow up on vehicle purchases and trade-ins.
• Refer you, with your consent, to banking/leasing partners for finance and share the outcome with you.
• Manage your account and secure sign-in.
• Send service messages and, where you have opted in, marketing about vehicles and offers.
• Operate, protect, analyse and improve our website and services.
• Comply with our legal and regulatory obligations.

6. Who we share it with

We do not sell your personal data. We share it only with:

• Finance partners: where you ask us to arrange finance, the relevant bank or leasing house (for example MauBank, Absa, MCB, Bank One or SBM). Each is an independent controller under its own privacy policy.
• Service providers (processors) acting on our instructions, such as website/email hosting, our email (SMTP) delivery provider, and analytics/security providers (Google Analytics & reCAPTCHA; Microsoft Clarity).
• Professional advisers and authorities: where required by law or to establish, exercise or defend legal claims.
• Business transfers: a buyer or successor if we reorganise, merge or sell the business, subject to this policy.

7. International transfers

Some of our providers (such as Google and Microsoft) process data on servers outside Mauritius. Where we transfer personal data across borders, we do so in accordance with the Data Protection Act 2017 (Act No. 20 of 2017) and, for GDPR-protected data, on the basis of an adequacy decision or appropriate safeguards such as Standard Contractual Clauses. You may contact us for details of the safeguards in place.

8. How long we keep it

We keep personal data only as long as necessary for the purposes above and to meet legal, accounting or reporting requirements. Enquiry and test-drive records are generally kept for up to 24 months after our last contact unless a purchase proceeds; transaction records are kept for the period required by Mauritian tax and accounting law; account data is kept until you close your account. When no longer needed, data is securely deleted or anonymised.

9. How we protect it

We use appropriate technical and organisational measures, including encryption in transit (HTTPS), hashed passwords, access controls and data minimisation, to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the regulator of any breach where required by law.

10. Your rights

Subject to the Data Protection Act 2017 (Act No. 20 of 2017) and the GDPR, you have the right to:

• be informed about how we use your data (this policy);
• access a copy of the personal data we hold about you;
• have inaccurate data rectified;
• request erasure (“right to be forgotten”) where applicable;
• restrict or object to certain processing, including direct marketing;
• request portability of data you provided to us;
• withdraw consent at any time, without affecting prior processing; and
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any right, email [email protected]. We will respond within one month (extendable for complex requests) and will not charge a fee except where permitted by law. We may need to verify your identity first.

11. Cookies

We use cookies and similar technologies for essential functionality and, with your consent, for analytics. Please see our Cookie Policy for the full list and how to manage your choices.

12. Children

Our website and services are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will post the revised version here and update the “Last updated” date. Significant changes will be notified where appropriate.

14. Contact & complaints

For any privacy question or to exercise your rights, contact us at [email protected] or +230 5503 4669.

If you are not satisfied, you may lodge a complaint with the Data Protection Office (Mauritius) or, if you are in the EU/EEA, with your local EU/EEA supervisory authority.