Privacy Policy

This Privacy Policy explains how Exura Prime Ltd ("Exura Prime", "the Company", "we", "us" or "our") collects, uses, discloses, stores and protects personal information in connection with this website. Exura Prime Ltd is authorised and regulated as an Investment Dealer (Full Service Dealer, excluding Underwriting) by the Financial Services Commission (FSC) of Mauritius, registration number 235905 GBC, with registered address at 5th Floor, Docks 1, The Docks Caudan, Port Louis, Mauritius.

Exura Prime Ltd is the data controller responsible for the personal data processed through this website. The protection of your personal information matters to us. We are committed to being transparent about the data we collect and to meeting our data protection obligations under the Mauritius Data Protection Act 2017 (Act No. 20 of 2017) and, where it applies to your data, the EU General Data Protection Regulation (GDPR).

"Personal data" or "personal information" means any information from which an individual can be identified. It does not include data that has been anonymised. We do not seek to collect special-category data (such as information about race, religion, health or political affiliation) through this website.

1. Scope of this policy

This policy covers personal information collected through this website — primarily when you contact us through our enquiry form or correspond with us. Exura Prime provides institutional liquidity and infrastructure services to professional and eligible counterparties; it does not open retail trading accounts through this website. Where a counterparty proceeds to onboarding, additional information is collected and processed under the separate client agreement and onboarding documentation, including the know-your-business (KYB) and anti-money-laundering checks we are required to perform.

2. Information we collect

When you use this website, we may collect:

Contact and enquiry information you provide directly through the contact form or by emailing us: your name, company, business email address, telephone number, the type of entity you represent, and the content of your message.
Attribution and source information captured with your enquiry to understand how you found us: the page you arrived on, the referring website, and standard campaign parameters (for example UTM tags, and Google or Meta click identifiers) where present in the URL.
Technical and usage information collected automatically when you browse, where you have consented to analytics: your IP address, browser type and version, device and operating system, language and time-zone settings, and information about how you navigate the site.

We do not collect financial information, identity documents or trading-account details through this website.

3. How we collect your information

We collect personal information in two ways:

Directly from you — when you complete the enquiry form, email us, or otherwise correspond with us.
Automatically — through cookies and similar technologies, and through analytics providers, only where you have given consent. Analytics is disabled by default until you accept it through our cookie banner. See our Cookie Policy for detail.

4. Legal bases for processing

We rely on the following legal bases:

Legitimate interests — to respond to your enquiry, to assess and pursue a potential business relationship with the institution you represent, and to operate and secure our website. These are business-to-business interests that do not override your fundamental rights.
Consent — for non-essential cookies and analytics, and for any direct marketing communications. You may withdraw consent at any time.
Legal and regulatory obligation — where we are required to process or retain information to comply with applicable law, including obligations owed to the FSC of Mauritius and applicable anti-money-laundering and counter-terrorist-financing requirements.

5. How we use your information

We use personal information to:

respond to your enquiry and provide the information or services you request;
assess and progress a potential institutional relationship, and contact you about it;
operate, maintain, secure and improve this website;
send you relevant communications where you have asked us to or where permitted by law; and
comply with our legal, regulatory and risk-management obligations.

6. Who we share your information with

We do not sell, rent or trade your personal information. We share it only as necessary, and only with parties bound to protect it:

Service providers (data processors) who operate parts of our infrastructure on our instructions, including: our email delivery provider (Twilio SendGrid) used to route enquiry notifications to our team; our website hosting and content-delivery provider (Vercel); and our analytics provider (Google Analytics) where you have consented.
Group companies, affiliates and professional advisers (such as lawyers, auditors and compliance providers) where required to operate our business or meet our obligations.
Regulators, law-enforcement and government authorities where we are required to disclose information by law, regulation or court order, or to protect our rights, property or safety.

All third parties that process personal information on our behalf are required to do so in accordance with our instructions and under appropriate confidentiality and data-protection obligations.

7. International transfers

Some of our service providers process data outside Mauritius, including in the European Union and the United States. Where personal information is transferred internationally, we take steps to ensure it remains protected to an appropriate standard, including through the use of recognised safeguards such as the European Commission's standard contractual clauses where applicable.

8. Data retention

We retain personal information only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements. Enquiry correspondence is generally retained for the period needed to manage the relationship and a reasonable period thereafter. Where we are subject to record-keeping obligations as a regulated entity, we retain the relevant records for the period those rules require.

9. Security

We maintain appropriate technical and organisational measures to protect personal information against accidental loss and unauthorised access, alteration or disclosure. Data in transit is encrypted using TLS, and access to personal information is limited to those who need it. No transmission over the internet can be guaranteed completely secure; while we work to protect your information, we cannot guarantee the security of data you transmit to us.

10. Your rights

Subject to applicable law, you have the right to:

access the personal information we hold about you;
request rectification of inaccurate or incomplete data;
request erasure of your data where there is no overriding reason to retain it;
object to or request restriction of processing;
request portability of data you provided to us;
withdraw consent at any time where we rely on it (for example, for analytics or marketing); and
lodge a complaint with the supervisory authority (see below).

To exercise any of these rights, contact us at our contact page or by email at privacy@exuraprime.com. We will respond within one month, as required by applicable law.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Office of Mauritius (Office of the Data Protection Commissioner), 5th Floor, SICOM Tower, Wall Street, Ebène, Republic of Mauritius — tel +230 460 0251, email dpo@govmu.org, dataprotection.govmu.org.

11. Cookies

We use cookies and similar technologies, with analytics and marketing cookies set only after you consent. For a full description of the cookies we use and how to manage them, see our Cookie Policy.

12. Third-party links

This website may link to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or our practices. The current version is always the one published on this website, with the effective date shown above.

14. Contact us

If you have any questions about this Privacy Policy or about how we handle your personal information, contact us at privacy@exuraprime.com or through our contact page.