Privacy Policy

AcuFin Corporate Limited (trading as AcuFin Global) is a Mauritius-headquartered Management Company and Qualified Trustee licensed by the Financial Services Commission, with its registered office at 13A King George V Avenue, Floréal, Mauritius. For any privacy enquiry, contact our Data Protection Officer at dpo@acufin.global.

This policy covers personal data we collect through our website (acufin.global), our client portal, our marketing communications, and the course of providing services to clients and prospective clients. Jurisdiction-specific notices for Mauritius (DPA), South Africa (POPIA), the EU/UK (GDPR) and the UAE are linked from our legal page.

From visitors and prospects: name, email, phone, country, company, the content of any enquiry, and basic technical data (IP, browser, pages viewed). From clients: identification documents, source-of-wealth and source-of-funds information, beneficial-ownership data, tax residence, and the data required to administer your structure. From candidates: CV, cover note, and the information you choose to provide.

To respond to your enquiry, deliver the services you have engaged us for, meet our regulatory obligations (FSC, AML/CFT, FATCA, CRS, beneficial ownership), administer entities under our care, send you content you have asked for, and run the firm. We do not sell or rent personal data.

Depending on the activity: contract (delivering services to you), legal obligation (regulatory and tax reporting), legitimate interests (running the firm, securing our systems, defending claims), and consent (where required, e.g. marketing).

Service providers under contract (IT, email, cloud, audit), regulators and authorities where required by law (FSC, FIU, MRA, foreign tax authorities under FATCA/CRS), professional advisors (lawyers, auditors), banks, and counterparties strictly to give effect to the engagement. We use written contracts and appropriate transfer mechanisms for any cross-border processing.

Client and KYC records are retained for at least seven years from the end of the engagement, in line with FSC and AML obligations. Marketing data is retained until you unsubscribe. Other data is retained only for as long as needed for the purpose for which it was collected.

Subject to applicable law, you may request access to your data, correction, deletion, restriction or portability, and you may object to processing. Where processing is based on consent, you may withdraw consent at any time. To exercise any right, contact dpo@acufin.global. You may also lodge a complaint with the relevant data-protection authority (in Mauritius, the Data Protection Office).

We use technical and organisational measures appropriate to the sensitivity of the data, including access controls, encryption in transit and at rest, audit logging, and staff training. No system is perfectly secure; we will notify you and the regulator as required if a personal-data breach occurs.

We may update this policy. The current version is always available at acufin.global/legal/privacy-policy. The date below indicates the last review.