Privacy Notice

1. Privacy Notice

This Privacy Notice issued by CASS – Compliance Administration and Support Services Limited (“CASS”) explains how the latter collects, processes, and protects the personal data you provide to us when you visit our website and use our services.

2. Definition of Personal Data

 Personal Data has been defined in the Mauritian Data Protection Act 2017 as any information relating to a data subject. In broad terms, personal data would mean any information which identifies, or could reasonably be used to identify, an individual, either on its own or together with other information

 3.  Collection of Personal Data

 Personal Information: We may collect your personal data such as your name, email address, phone number when you voluntarily provide it to us through our website or other communication channels.

• We may also collect your personal data when information is shared with us by third parties such as governments, other agencies, service providers and introducers.

 Special Categories of personal data: We do not seek to collect or otherwise process your sensitive personal data save and except when required by law or when we have obtained your explicit consent prior to the processing of your personal data.

 Usage Data: We may also collect information about your usage of our website, including your IP address, browser type, pages visited, and other usage statistics.

4. Processing of Personal Data

 We will only process your personal data for any of the purposes listed below or wherever the applicable laws require such processing: 

• Due diligence
• Client on-boarding
• Legal matters
• Recruitment
• For any other purpose related to the aforementioned purposes or for any purpose on the basis of which you have provided your personal data to CASS.

 Where none of the aforesaid purposes apply to the processing, we shall seek explicit consent from you, setting out clearly the purpose for which we are collecting your personal data. Consent obtained for one purpose shall not be used for another purpose, unless prior written authorisation of the data subject is obtained.

5. How We Use Your Information:

• Provide Services: We use the information we collect to provide and improve our services, respond to inquiries, and fulfil any requests you may have.
• Communication: We may use your contact information to communicate with you about our services, promotions, updates, and other relevant information.
• Analytics: We may use usage data to analyse trends, administer the website, and gather demographic information about our user base.

6. Creation of Personal Data

 CASS may create Personal Data about you, such as records of your interactions with CASS, and details of your accounts, subject to applicable law.

7. Storage Limitation

 We will not keep your personal data in an identifiable form for longer than is necessary for the purposes for which the data is processed.

Subject to the applicable laws, we will retain your personal data for a minimum period of seven years from the date of commencement of business relationship. The criteria will be reviewed as and when there is any regulatory or legal amendment.

Reasonable steps will be taken to destroy or erase all personal data which is no longer required in accordance with the Company’s applicable procedures. This includes requiring third parties to delete that data where applicable.

8. Information Sharing

• Third-Party Service Providers: We may share your personal information with third-party service providers who assist us in providing our services. We will only provide personal data to third parties which have adequate level of data protection measures.
• Legal Compliance: We may disclose your information as required by law or in response to Court orders.
• International Transfer of Personal Data: Wherever we are required to transfer your personal data to countries outside Mauritius, we will abide by the applicable legal requirements. If the transfer of personal data is not based on any one of the lawful basis provided by the law, CASS shall seek the explicit approval of the Data Protection Office of Mauritius for any such transfer.

9. Data Security

We are committed to protecting the security of your personal information and have implemented appropriate technical and organizational measures to safeguard it from unauthorised access, use, or disclosure.

10. Your Rights:

As a data subject, you have the following rights:

• Right to Access: You have the right to request access to the personal data we hold about you and to request that we correct, update, or delete it if it is inaccurate or incomplete.
• Right to be informed: You have the right to be informed about the personal data which we collect and use.
• Right to transfer data to another controller: You have the right to have your personal data which we process or control transferred to another controller.
• Right to withdraw consent: Where we process your Personal Data on the basis of your consent, you have the right to withdraw that consent anytime.

• Right to object: You have the right to object to the processing of your data for a particular purpose or purposes.

• Right to restrict processing of your personal data: You have the right to restrict the processing of your data for a particular purpose or purposes.

• Right to lodge complaint: You have the right to lodge complaints with the Data Protection Office of Mauritius regarding the processing of your Personal Data.

• Right to Opt-Out: You may opt out of receiving promotional communications from us by following the instructions provided in those communications or by contacting us directly.

11. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Privacy Notice on our website.

12. Contact Details

If you have any questions or concerns about this Privacy Notice, please contact our Data Protection Officer at dpo@cass.mu.

By continuing to use the services of CASS, you hereby acknowledge that you have read and agreed to the terms of this privacy notice.