You will provide us your personal information when registering as a Registered User or as a Subscriber. By providing your data to mauritiusdirectory.org you acknowledge that we may also contact you with any other communications deemed relevant to your interest in mauritiusdirectory.org and its activities.

We may still contact you once your subscription has expired in reference to renewing your subscription, free content that is available or other information we believe may be of interest to you. You may choose to stop receiving emails from mauritiusdirectory.org at any time by emailing info@mauritiusdirectory.org

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We will not use your personal information to send you promotional information about third parties which we think you may find interesting, however if you wish us to do so, you can request in writing via email to info@mauritiusdirectory.org.

We require this information to understand your needs and provide you with a better service, and from time to time, we may also use your information to contact you for market research purposes.

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. Your enquiries will be handled by two regulated entities Total Wealth Planning FCA Reference No. 744938 and Gravitas Finance LLC and your data will be stored under both of these entities own privacy policies and GDPR provisions.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies.

The Site may contain links to External Sites. However, once you have used these links to leave the Site, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting any External Sites.

For further information on any aspect of these terms and conditions, please email info@mauritiusdirectory.org

Due to the new data protection regulation which will come into force on 25 May 2018, we would like to inform you of the changes we have made to our existing agreements as to ensure that we continue to act in accordance with the applicable Data Protection Legislation.

Our existing contractual agreement contains data protection clauses which govern the way we share and process our clients and or employee’s personal data. These requirements are necessary for us to fulfil our contractual obligations while providing services to our clients.

Please find herein the most up to date version of these clauses.

The addendum below will be effective from 25 May 2018, we will assume that you agree with these amendments, if we continue to provide or receive services to or from us. GDPR implementation has been a challenge for many organisations and at mauritiusdirectory.org we will be very happy to assist you with any query or clarification you may need regarding GDPR and/or our data processing procedures.

If you have any questions regarding the clauses below, please contact our compliance department on info@mauritiusdirectory.org.

The purpose of this addendum is to update your existing agreement with mauritiusdirectory.org. These changes are necessary to ensure that we can continue to act in accordance with applicable data protection laws and regulations after 25 May 2018. If you continue to provide services or products or use our services or products after the above date, we will assume that you agree with the amendments to the Agreement we have in place with you.

1. Data Protection Legislations means the Data Protection Act 1998, the EU Data Protection Directive 95/46/EC, General Data Protection Regulations GDPR 2016/679, the Regulation of Investigatory Powers Act 2000, the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 (SI 2000/2699), the Electronic Communications Data Protection Directive 2000/58/EC, the Privacy and Electronic Communications (EC Directive) Regulations 2003 and all applicable laws and regulations relating to processing of personal data and privacy, including where applicable the guidance and codes of practice issued by the Information Commissioner.

The words “personal data”, “data subject”, “data controller” and “data processor” herein shall have the meaning given to them in the Data Protection Act 1998 and or General Data Protection Regulations GDPR 2016/679 or as subsequently introduced.

2. In the performance of obligations under these Terms, to the extent that we are independent data controllers, we and you will comply at all times with the Data Protection Legislations. PropertyFinder.mu privacy policy and retail client terms and conditions of business explain in detail how PropertyFinder.mu operates as a data controller in respect of retail clients and how data is managed. In this context it is pointed out to retail clients that where they use US originating email addresses or cloud services owned or operated or managed by US enterprises, then email traffic to and from them may or will pass through non-EU servers.

3. We warrant to you, and you warrant to us, that, where either you or us collect personal data from clients or another third party, which one party subsequently transfers or makes available to the other, that we or you (as applicable) have:

1. Collected and processed such personal data fairly and lawfully manner;
2. Ensured that the process and disclosure of such personal data to the other party is for limited and specified purposes and in an appropriate way;
3. Ensured that the personal data being collected is adequate, relevant and not excessive for the specified purpose and the delivery of services and financial products being sold;
4. Ensured that personal data is accurate and up to date and not kept for longer than the necessary purpose;
5. Ensured that personal data is processed in line with the data subject’s rights;
6. Ensure that individuals have been fully informed of their rights to withdraw consent, right to portability, restrict processing, access their personal data, have inaccurate or incomplete data amended, have their data erased, to object to processing, not to be subject to decisions made by automated means and to be advised about the company data retention policy;
7. Ensured that personal data is kept secure from unauthorised access, accidental loss or destruction;
8. Ensured that when sending or receiving such personal data from the other party in accordance with the Terms and for the purposes of carrying out its obligations under these Terms, the sender or receiving party will not breach Data Protection Legislations;
9. Ensure that all third party recipients of client personal data are subject to written contractual obligations concerning the personal data being covered under these Terms (including obligations of confidentiality) which are no less onerous than those imposed herein;
10. You shall not act in any way in relation to the data subject personal data which might reasonably damage the reputation or goodwill of the mauritiusdirectory.org;
11. You shall ensure that all necessary notices and consents are in place to enable lawful transfer of any personal data for the performance of obligations under these Terms;
12. You shall promptly inform the data subject or the information commissioner’s officer as applicable of any security breach which poses a risk to the data subject’s rights; including but not limited to loss of data, unauthorised or accidental disclosure of, or access which affects the personal data of the data subject within 72 hours of its occurrence;
13. You warrant and undertake to mauritiusdirectory.org that while acting in your agent capacity under these Terms, you will ensure that your company has implemented proper technical and organisational measures and procedures to provide the safe custody, processing and destruction of personal data. In particular, the personal data will be protected by you and the company against any loss, accidental or unlawful destruction, falsification, theft, unlawful use, unauthorised modification and copying, and other unauthorised disclosures. In no event may you, the company or its affiliates subcontract the processing of personal data disclosed to you by mauritiusdirectory.org without obtaining our prior written consent;
14. You agree to indemnify mauritiusdirectory.org from and against any and all claims, demands, actions, causes of actions, liabilities, losses, damages, costs and expenses, including reasonable legal fees and expenses (collectively, a loss or losses) which mauritiusdirectory.org may suffer as a result of any or all breaches of this Data Protection addendum;
15. The parties will provide clients with a copy of their current privacy policy and will have in place a data retention policy and shall comply with all applicable Data Protection Legislations when required to delete personal data on termination of this Terms unless required by law to store the personal data;
16. The receiving party shall inform the other party without undue delay of any data subject request received which requires the other party to correct any inaccurate or incomplete information held about the client or to erase data or restrict processing. This process will ensure that all parties are processing accurate and up to date personal data, erasing or restricting the data as required by the data subject;
17. The parties must ensure that personal data will only be transferred by secure means through SFTP or via encrypted email, API. Personal data shall not be included in any email body sent or received by the parties. If mauritiusdirectory.org receives emails containing personal data within email’s body, these will be deleted;
18. Not, so far as it is within our control (recognising that global cloud based computing provided by third party providers cannot be completely controlled in respect of data transfer, disaster recovery and backup arrangements), transmit such Personal Data to a country or territory outside the European Economic Area without the other’s express approval.

Data Subjects’ Rights

Each party shall assist the other in complying with all applicable requirements of the Data Protection Legislations. In particular, each party shall:

1. consult with the other party about any notices given to data subjects in relation to the data subject personal data;
2. inform the other party about the receipt of any data subject access request which the other party must respond to within 48 hours;
3. provide the other party with reasonable assistance in complying with any data subject access request;
4. not disclose or release any data subject personal data in response to a data subject access request without first consulting the other party wherever possible;
5. assist the other party in responding to any request from a data subject and in ensuring compliance with its obligations under the Data Protection Legislations with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators;
6. notify the other party without undue delay on becoming aware of any breach of the Data Protection Legislations;
7. maintain complete and accurate records and information to demonstrate its compliance with this these Terms and permit the other party to conduct due diligence and or audit procedures to ensure compliance with this clause;
8. provide the other party with contact details of at least one employee as point of contact and responsible manager for all issues arising out of the Data Protection Legislations, the procedures to be followed in the event of a data security breach which must be informed to the other party within 24 hours, and the regular review of the parties’ compliance with the Data Protection Legislations.