CRM Privacy & Data Handling Notice

Leasing Company (Seychelles) Limited (Seylease) operates this CRM for authorised business development, sales follow-up, application pipeline management, management reporting and related internal controls.

Seylease is a regulated financial institution. CRM use must therefore remain consistent with applicable Seychelles law, Seylease internal policies and relevant regulatory requirements.

The CRM may contain:

• CRM user identity, role and account status.
• Target organisation information and business contact details.
• Details of serious individual leads where consent has been confirmed.
• Sales interactions, outcomes, follow-ups, opportunities and application-stage information.
• Management guidance, approved sales reference material and brochure-location records.
• Security, access and audit records generated by use of the CRM.

Information must be recorded only where it is relevant to a legitimate Seylease business purpose. Users should keep records accurate, factual and proportionate, and should not enter unnecessary personal or sensitive information into free-text notes.

The CRM is a sales outreach and opportunity-management system. It is not an approved repository for identity documents, bank statements, salary slips, detailed credit files, AML/KYC evidence or similar sensitive financial documentation unless Seylease expressly authorises that use and appropriate controls are implemented.

Access is restricted to authorised Seylease users and is controlled by role. Users may access information only to the extent required for their duties and must not disclose, copy or export CRM information for unauthorised purposes.

A serious individual lead must not be created unless the person has agreed to Seylease recording their details for legitimate sales follow-up. The CRM records that consent confirmation as part of the lead record.

Seylease may use approved technology service providers to host and operate the CRM, including the database/authentication and application-hosting services configured for this system. Where processing occurs outside Seychelles, Seylease should apply its approved legal, contractual and security safeguards as required by applicable law and policy.

CRM records are retained in accordance with Seylease's approved records-retention schedule and applicable legal or regulatory requirements. No fixed retention period is stated here because requirements can differ by record type.

Requests to correct, access or otherwise address personal information should be referred through Seylease's designated privacy/compliance process. Records must not be deleted merely to remove legitimate audit or business history.

CRM users are expected to support the principles reflected in the Seychelles Data Protection Act, 2023, including fair and lawful handling, purpose limitation, data minimisation, accuracy, security and appropriate retention of personal data.