Integrity Metal Works Ltd (hereinafter referred to as “The Company,” “we,” or “us”) is committed to protecting the privacy of our employees, clients, suppliers, and all data subjects we interact with. We comply with the obligations set forth under applicable data protection laws, including the Data Protection Act 2017, regarding the collection, use, processing, and retention of personal and special categories data.
This Privacy Policy outlines how we collect, use, store, and retain your data, as well as the principles that guide these processes. It applies to all data held by the Company, regardless of the form, media, or manner in which it was acquired or retained.
This policy applies to all employees, agents, affiliates, consultants, and third-party service providers who may handle or have access to personal or sensitive data on behalf of Integrity Metal Works Ltd.
All individuals involved in data processing or handling within the Group are responsible for familiarizing themselves with this policy and ensuring its strict compliance.
Personal data means any information relating to a data subject, as such term is defined under the Data Protection Act 2017. Personal data includes, but is not restricted to:
Personal data such as medical information, morality certificate or biometrics pertain to special categories of data according to the requirements under the Data Protection Act 2017 and as such are subject to enhanced security measures as required by the applicable law.
We may use your personal information in the ways outlined below, as well as in any additional ways that advance our legitimate interests or are required or permitted under applicable law:
The Company retains data for as long as required to effectively conduct our operations and comply with legal requirements. The retention periods are outlined in the Data Retention Schedule in Annex A. After the retention period, personal data is securely deleted or anonymized.
The Company seeks to minimize data duplication, but in certain cases, it may be necessary to retain duplicate records for business or operational reasons. This policy applies to all data, including duplicates.
By engaging with any companies within the Group, you acknowledge and agree that your personal data may be shared among companies within the Taylor Smith Group for purposes such as administrative efficiency, customer support, and service delivery.
All Group entities adhere to this Privacy Policy to ensure consistent privacy and data protection standards.
We may disclose your Personal Information to the extent permitted by applicable law or with your consent:
The privacy practices and data protection policies of third parties are not covered by this Policy and cannot be controlled. Please read and refer to the third party's privacy and data retention policy when you submit personal information to such a third party. In circumstances, we disclose your personal data to third parties for the purposes described in this policy, they are bound by contractual obligation not to disclose or use the information for any other purpose.
If you choose to provide personal information of a third party (such as name, email and telephone number) to the Company, you represent and warrant that you have permission from the third party to do so (e.g. Marketing material or Job referrals).
The Company is committed to complying with regulations with respect to your rights. It is your responsibility as a data subject to ensure that the information you give us is kept up to date and is accurate. The Company takes all reasonable steps to discard or update any inaccurate data without delay.
You have certain rights in respect to how we use your personal data. These are:
Please contact us at dpo@taylorsmith.mu if you wish to exercise any of the above rights.
The security of your personal data is important for us. We use appropriate methods to protect your personal data. The Company is compliant with the basic privacy and security principles such as access control to different categories of personal data, clear screen policy, clean desk policy, and lockable document storage cabinets. Wherever practical, we ensure that data is encrypted during transit and storage and that access to this data is strictly limited to a minimum number of individuals and subject to confidentiality obligations.
We also train our employees on privacy and security protection to raise awareness of personal data protection and to ensure the security of your personal data. Our personnel having access to your personal data are bound by a non-disclosure agreement with the Company.
The Company only retains your personal data for a reasonable period and until the purpose for which the data was collected is achieved, including for the purpose of satisfying any legal, accounting, or reporting requirements. It is our policy to destroy personal information once we are no longer required to retain it by law or business.
In certain circumstances, we may anonymize your personal data (so that it is no longer associated with you) for research or statistical purposes.
The Company is sensitive with regards to children’s personal data, which is considered sensitive data. Children's personal data is collected with prior consent from their parents or guardians, for purposes outlined in that consent, for example, to be published in our newsletter or on our website or otherwise displayed within the organization. The Company is involved in activities including TS foundation, Welfare, CSR program and Company events, where Children's personal data may be collected. The Company will be using or disclosing the data only as permitted by law, with the clear consent of the parents or guardians of the child or as required for the child's protection. If we accidentally collect personal data of a child without verified prior permission from the parent or guardian, we will endeavor to delete the data at the earliest practicable opportunity.
Your personal data we collect may be processed or accessed outside Mauritius where the Company or its affiliates, service providers or business partners are situated. In this case, we take appropriate safeguards to ensure that the personal data is treated securely in accordance with this policy and applicable laws. We use encryption where appropriate. The Company uses a wide range of legal procedures, such as standard contractual clauses with those parties to ensure data is processed in a secure manner.
The information listed in the retention schedule below is intended as a guideline and may not contain all the records the Group may be required to keep in the future.

Most correspondence (external and internal) should be retained for the same period as the document they pertain to or support. For instance, a letter pertaining to a particular contract would be retained as long as the contract (10 years after project completion). It is recommended that records that support a particular project be kept with the project and take on the retention time of that particular project file.
Electronic mail will not be kept for more than 7 years unless the said mail contains documents and/or data for which a longer retention period is provided by this Policy. In such case, the electronic mail should be labeled as ‘never delete’ or ‘10 years’.
All employees are required to properly sort and label the retention period of their specific document/file/folder depending on the subject matter.
The backup retention period is 10 years for both electronic mail and documents.

Retention periods in the present Data Retention Schedule may be extended under exceptional circumstances where:
If there are any questions regarding this Privacy Policy, do not hesitate to contact us on dpo@taylorsmith.mu or if you have any complaints or concerns about privacy and want to contact the Data Protection Officer (DPO) of the Company.
This Policy is subject to change at the sole discretion of Taylor Smith Group. Updates may be made from time to time without prior notice.
This policy is the property of Taylor Smith Group and may not be reproduced, distributed, or used without prior written permission.
