Privacy Policy

ASKspire (Mauritius) Ltd

Privacy & Data Protection Policy

(the “Policy”)

Rue de la Démocratie, Suite 17, Ebene Junction, Ebene, Mauritius

Effective date: 3 June 2026

ASKspire (Mauritius) Ltd (hereinafter referred to as “ASKspire”, “we”, “us” or “our”) recognises the importance of protecting the personal data of clients, employees, service providers, contractors and other relevant parties, as well as users of our website (all collectively referred to as the “Parties”). ASKspire is a business process outsourcing and professional services provider based in Mauritius, delivering finance, human resources, operations and pharmacy/clinical support services to clients in the United Kingdom, Canada and other jurisdictions.

This Privacy & Data Protection Policy should be read in conjunction with any data protection and privacy procedures adopted internally by ASKspire from time to time. We are registered as a data controller with the Data Protection Office in Mauritius.

To ensure compliance with the Data Protection Act 2017 of Mauritius and any regulations made thereunder, and — in respect of data subjects resident elsewhere — the applicable data protection law of their country of residence (including the UK General Data Protection Regulation and the EU General Data Protection Regulation (GDPR), in force since 25 May 2018, and the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada where relevant), ASKspire has implemented a data protection programme consisting of the following key components:

1. Privacy & Data Protection

I. Written Policy and Procedures. We have implemented this Policy to protect personal data and privacy. The Policy provides the Parties with information regarding the purposes for processing their personal data, the lawful basis for processing, the retention period of their data and with whom the data will be shared. Our business functions, including the Information Technology (IT) and Operations teams, implement and maintain procedures to ensure the security and protection of personal data and to manage other related privacy matters.

II. Appropriate Delegation of Authority. ASKspire has designated a Data Protection Officer (DPO) responsible for overseeing compliance relating to the collection and processing of personal data by the data controller. The designated individual has relevant experience and the authority to oversee the implementation and maintenance of privacy standards across the business.

III. Education and Awareness. All staff members, including new hires, undergo data protection training. The DPO, in coordination with designated staff, identifies employees subject to role-based privacy training requirements and arranges mandatory training courses or seminars as necessary. We periodically provide refresher training to employees handling client data. Training may include online courses, in-person lessons or other instructive materials.

IV. Compliance Oversight. The DPO is tasked with evaluating new products, technologies, online activities, contracts and regulations for potential privacy impacts, and with advising senior management on implementing corresponding privacy protections. The DPO will maintain records to satisfy record-keeping obligations, and ASKspire will implement controls to recognise and respond to personal data breaches, including response plans and escalation procedures.

V. Periodic Assessments of Programme Effectiveness. ASKspire will periodically evaluate and may adjust the programme in light of risk assessment results, relevant findings by the Compliance Officer and the DPO, or in response to significant changes in business practices, operations or regulatory requirements.

2. Control of Non-Public Information

In the course of its business, ASKspire collects personal information about prospective and existing clients, employees, service providers and other third parties. We are committed to maintaining the highest standards of integrity and aim to provide fair, secure and appropriate methods for handling non-public personal information. All such activities are intended to be consistent with generally accepted privacy ethics and standard business practices.

To this end, ASKspire will adopt and implement adequate privacy measures. The principles of our privacy policy include:

2.1 Personally Identifiable Information

ASKspire will collect personal information specifically and knowingly provided by clients, staff, service providers and other third parties. Where applicable, we may use the personal information of clients to contact them regarding our services or to provide feedback and updates related to their use of those services. We will only retain data necessary to offer our services and ensure continuity.

2.2 Privacy Statement Changes

ASKspire may modify this Privacy & Data Protection Policy at any time and, as far as practicable, will notify clients of such changes to ensure they are aware of the conditions under which they provide personal information to us.

2.3 Retention of Records

ASKspire will retain personal information only as long as necessary and in compliance with applicable Mauritian laws regarding record-keeping, including for service provision or as required by law. Personal information no longer needed will be destroyed by shredding or other approved destruction methods to prevent unauthorised access, unless regulatory requirements mandate its retention.

ASKspire will safeguard all client information in its custody and will develop and maintain security procedures to protect personal information against loss, theft, copying, unauthorised disclosure, use or modification. Access to personal information is restricted to employees and authorised service providers with a legitimate need to know and use the information for their activities. We will not use clients’ personal information for any other purpose unless authorised.

Your Consent

By accessing our website, you consent to the collection, maintenance, use and disclosure of your personal data in accordance with this Privacy & Data Protection Policy.

Queries

If you have privacy-related questions not addressed by this Policy, or any other concerns about how ASKspire uses your personal data, or if you wish to contact our Data Protection Officer or exercise your rights in respect of your personal data, please contact us at: contact@askspire.com.

ASKspire (Mauritius) Ltd, Rue de la Démocratie, Suite 17, Ebene Junction, Ebene, Mauritius.