Mauritius DPA Privacy Notice

This notice supplements our Privacy Policy with information specific to the Mauritius Data Protection Act 2017 ('DPA'). Where you are in Mauritius, or your data is otherwise processed under Mauritian law, this notice applies.

AcuFin Corporate Limited, 13A King George V Avenue, Floréal, Mauritius, registered as a data controller in Mauritius. Our Data Protection Officer is reachable at dpo@acufin.global.

We rely on: performance of a contract; compliance with a legal obligation (notably under the Financial Services Act 2007, FIAMLA, FATCA and CRS); legitimate interests in operating our firm and protecting our systems; and consent (where required, for example for marketing).

You may request access to your personal data, correction of inaccurate data, erasure (subject to our retention obligations), restriction of processing, and objection to processing. Where processing is automated and legally significant, you may request human review.

Email dpo@acufin.global with a clear description of your request and proof of identity. We will respond within the period required by the DPA (currently 30 days, extendable in complex cases).

Records relating to clients, beneficial owners and transactions are typically retained for at least seven years from the end of the engagement, in line with Mauritius FSC and AML requirements. Other personal data is retained only as long as needed.

Some processing may involve transfers outside Mauritius, to service providers, professional advisors, regulators under FATCA/CRS, or to clients. We use written contracts and appropriate safeguards in line with the DPA.

If you believe your rights under the DPA have been infringed, you may lodge a complaint with the Data Protection Office of Mauritius (https://dataprotection.govmu.org/). We would, however, ask you to give us the opportunity to address the matter first by writing to dpo@acufin.global.