Privacy Notice
1. Introduction
1.1 Actuarix Consulting Limited ("Actuarix") is a Mauritius based entity, regulated by the Financial Services Commission ("FSC") of Mauritius under the Financial Services Act 2007 and is authorised to provide the following services:
· Actuarial Services
· Pension Scheme Administration Services
· Investment Advisory (Restricted) Services
· Insurance Broker Services
1.2 Actuarix is subject to the Anti-Money Laundering, Combatting of Financing of Terrorism and Proliferation Financing legal framework (including acts, laws, rules and regulations, codes and guidelines, circulars, and other related legislation) of Mauritius ("Legal Framework") and the above-mentioned services are provided in line with the Legal Framework.
1.3 Following the enactment of the General Data Protection Regulation (“GDPR”), Mauritius repealed its previous Data Protection Act 2004 and replaced it with the Data Protection Act 2017 (“DPA 2017”). The DPA 2017, effective since January 2018, is fully aligned with the GDPR.
1.4 These laws require clear procedures for the collection and use of personal data in a responsible secure, fair and lawful manner by all data controllers and data processors. Actuarix shall handle data of its various stakeholders in line with the provisions of the DPA 2017 and ensure that appropriate safeguards are in place to mitigate any risks of breach of data and by the same token, comply with the European Union GDPR, wherever applicable.
1.5 Actuarix is registered with the Data Protection Office of Mauritius and complies with the DPA 2017 and the data privacy policy of the company. Actuarix shall be guided by the DPA 2017 with regards to Data Protection matters.
1.6 This Privacy Notice (“Notice”) explains how Actuarix makes use of the personal information collected about you in connection with the services. Throughout this Notice, Actuarix may be referred to as "we", "us", "our" or “Actuarix”.
1.10 This Privacy Notice applies to the data processing activities carried out by Actuarix who acts as a Data Controller of your personal information (with regards to insurance broking services being provided) and Data Processor of your personal information (with regards to actuarial services, pension scheme administration services and investment advisory (restricted) services being provided).
2. Collecting Your Information
2.1 The information we collect about you may include the following:
- basic personal details, such as your name, address contact details, date of birth, age, gender, and marital status;
- demographic details, such as information about your lifestyle, and insurance requirements;
- driving history, certifications, and insurance details, such as driving license details, the period for which a license has been held, existing and previous insurance policy details, previous accident and claims history and details of any motoring convictions;
- financial details, such as payment card and bank account details of your credit history and bankruptcy status;
- data analytics and risk profiling;
- photograph and/or images/footage captured/recorded on CCTV or other video systems when you visit our offices;
- claims details, such as information about any claims concerning your insurance policy;
- and your marketing preferences and consents.
2.3 Where you provide personal information to Actuarix about third party individuals (e.g., information about your spouse, civil partner, child(ren), dependants, or emergency contacts), where appropriate, you should provide these individuals with a copy of this Notice beforehand or ensure they are otherwise made aware of how their information will be used by Actuarix.
2.4 In addition to collecting personal information from you directly, we may also collect personal information about you from other third parties, such as your employer, insurers, underwriters, reinsurers, credit bureaus, medical professionals, government bodies, claimants, vetting and data validation agencies and other professional advisory service providers. This information may be sourced prior to, and throughout the course of providing the services to you.
3. Processing Your Information
3.1 We will use the information we collect about you in connection with the services to:
- assess your application to receive the services;
- carry out due diligence, identity, credit reference, bankruptcy, sanctions, data validation and other vetting and risk management agency checks;
- evaluate risks relating to your prospective or existing insurance policy;
- offer, administer, and manage the services provided to you, including providing initial and renewal quotations and client care information;
- process your payment for the insurance premium and any mid-term adjustments;
- investigate and settle claims or complaints in relation to insurance policies and/or the services provided;
- facilitate the prevention, detection and investigation of crime and the apprehension or prosecution of offenders;
- trace debtors and recover any outstanding debt in connection with the services provided;
- fulfil legal and regulatory obligations and monitor compliance with the same;
- transfer books of business to successors of the business in the event of a sale or reorganisation;
- perform analytics for risk modelling purposes and to analyse trends;
- conduct market research and canvass your views about the services we offer to develop and improve our products and service offerings generally.
4. Legal Grounds for Processing
We rely on the following legal grounds to collect and use your personal information:
- Performance of the service contract with you
Where we offer the services or enter a contract with you to provide the services, we will collect and use your personal information where necessary to enable us to take steps to offer you the services, process your acceptance of the offer and fulfil our obligations in the contract with you, especially for the processing activities set out in sections 3(a), 3(b), 3(c), 3(d) and 39e) of this Privacy Notice. - Legal and regulatory obligations
The collection and use of some aspects of your personal information is necessary to enable us to meet our legal and regulatory obligations, particularly for the processing activities set out in section 3(i) of this Privacy Notice. For example, Actuarix is licensed and regulated by the Financial Services Commission and is required to provide the service in accordance with relevant regulatory rules. - Insurance purposes Note
The collection and use of some aspects of your personal information, such as information concerning your health, is necessary for insurance purposes, particularly for the processing activities set out in sections 3 (c) and 3(f) of this Privacy Notice. These purposes include advising on, arranging, underwriting or administer the insurance services, assessing and administering claims or exercising our rights or obligations in connection with the services. - Preventing and detecting fraud
We will use your personal information, including information relating to criminal convictions or alleged offences to prevent and detect fraud, other financial crime, and crime generally in the insurance industry in terms of its obligations in law in the prevention of financial crimes, particularly for the processing activities set out in section 3(g) of this Privacy Notice. - Legitimate interests, excluding special personal information and information
relating to children in Mauritius
The collection and use of some aspects of your personal information is necessary to enable us to pursue our legitimate commercial interests, e.g., to operate our business, particularly where we offer other products and services that may be of interest to you or conduct market research to improve our products and services generally including for the processing activities set out in sections 3(b), 3(f), 3(g), 3(h), 3(i), 3(j), 3(k), 3(l) and 3(m) of this Privacy Notice. Where we rely on this legal basis to collect and use your personal information, we shall take appropriate steps to ensure the processing does not infringe the rights and freedoms conferred to you under the applicable data privacy laws. - Consent
We rely on your consent to collect and use personal information concerning any criminal convictions or alleged offences, specifically for the purpose of assessing risks relating to your prospective or existing insurance policy, especially for the processing activities set out in sections 3(c) and 3(f) of this Privacy Notice. We may also share this information with other insurance market participants and third parties where necessary to offer, administer and manage the services provided to you, such as insurers and insurance underwriters, reinsurers, brokers, and vetting agencies.
In certain instances, and where we collect and use personal information concerning your minor child(ren), specifically for the purposes of assessing a risk profile associated with that minor child(ren) we rely on your consent for the processing of the personal information of that minor child(ren) for the purposes necessary for pursuing the legitimate interests of the Insurer or any third party to whom it is disclosed.
Where we rely on your consent to collect and use your information, you are not obliged to provide your consent and you may choose to subsequently withdraw your consent at any stage once provided. However, where you refuse to provide information that we reasonably require providing the services, we may be unable to offer you the services and/or we may terminate the services provided with immediate effect.
Where you choose to receive the services from us you agree to the collection and use of your personal information in the way we describe in this section of the Notice. You also agree that such information may be collected and used for the above purpose by the insurance underwriter named in your insurance policy documentation. You should refer to the insurer’s privacy notice on their website for further information about their privacy practices. - Publicly available
Where you have deliberately made the personal information relating to your health, race and ethnic origin or information concerning any criminal convictions or alleged offences public we can process such personal information, specifically for the purpose of assessing risks relating to your prospective or existing insurance policy.
- Performance of the service contract with you
5. Accuracy of Your Information
5.1 We rely on the availability of accurate personal information to provide the services to you and operate our business. You should therefore notify us of any changes to your personal information, particularly changes concerning your contact details, bank account details, insurance policy details or any other information that may affect the proper management and administration of your insurance policy and/or the services provided to you.
6. Recipients of Your Information
6.1 We generally share your personal information with the following categories of recipients where necessary to offer, administer and manage the services provided to you:
- insurance market participants where necessary to offer, administer and manage the services provided to you, such as insurers and insurance underwriters, reinsurers, brokers, intermediaries, and loss adjusters. The insurance underwriter is the insurer that is underwriting your insurance policy and is named in your policy documentation. (Please note that for all debit orders processed by Actuarix, personal information including the banking details of the premium payer must be shared with the relevant Insurer on an ongoing basis to ensure compliance with legislation). You should refer to the insurer’s privacy notice on their website for further information about their privacy practices;
- vetting and risk management agencies, such as credit reference, criminal record, fraud prevention, data validation and other professional advisory agencies, where necessary to prevent and detect fraud in the insurance industry and take steps to assess the risk in relation to prospective or existing insurance policies and/or the services;
- legal advisers, loss adjusters, and claims investigators, where necessary to investigate, exercise or defend legal claims, insurance claims or other claims of a similar nature;
- medical professionals, e.g., where you provide health information in connection with a claim against your insurance policy;
- law enforcement bodies, where necessary to facilitate the prevention or detection of crime or the apprehension or prosecution of offenders;
- public authorities, regulators, and government bodies, where necessary for us to comply with our legal and regulatory obligations;
- third party suppliers, where we outsource our processing operations to suppliers that process personal information on our behalf. These processing operations shall remain under our control and will be carried out in accordance with our security standards and strict instructions;
- and successors of the business, where Actuarix or the services are sold to, acquired by, or merged with another organisation, in whole or in part. Where personal information is shared in these circumstances it will continue to be used in accordance with this Notice.
7. Overseas Transfers of Your Information
7.1 We operate on a global and worldwide basis, and we therefore reserve the right to transfer personal information about you to other countries including without limitation the United Kingdom and countries in the European Union (i.e., Germany, France, Poland, Ireland, The Netherlands) as well as India, The United States and Australia to be processed for the purposes outlined in the Notice. In particular, we may make such transfers to offer, administer and manage the services provided to you and improve the efficiency of our business operations. We shall endeavour to ensure that such transfers comply with all applicable data privacy laws and regulations and provide appropriate protection for the rights and freedoms conferred to individuals under such laws.
7.2 Where we collect personal information about you in Mauritius, we may transfer the information to countries outside Mauritius for the processing purposes outlined in this Privacy Notice. This may include transfers to countries that are considered to provide inadequate data privacy safeguards in line with the standard as expected under the DPA 2017. In these instances, Actuarix shall maintain a data transfer agreement in place which regulates cross-border transfers of your personal information and which incorporates standard contractual clauses in line with the DPA 2017. Where we transfer personal information to third parties located in countries that are not subject to an adequacy decision we shall put in place appropriate safeguards, such as the aforementioned standard contractual clauses, where necessary, approved by the Data Protection Office of Mauritius, as appropriate. Where necessary, we may implement additional technical, organizational, or contractual measures to ensure an adequate level of protection for your personal information. Where required, further information concerning these safeguards can be obtained by contacting us. In addition, if such personal information contains special personal information or personal information relating to children, we will obtain prior authorisation from the Data Protection Office of Mauritius prior to transfer of information if necessary.
8. Retention of Your Information
8.1 We retain appropriate records of your personal information to operate our business and comply with our legal and regulatory obligations. These records are retained for predefined retention periods that may extend beyond the period for which we provide the services to you. In most cases we shall retain your personal information for no longer than is required under the applicable laws. We will keep your personal information for the period necessary to fulfil the purposes described in this Statement unless: (i) a longer retention period is permitted or required by law; (ii) Actuarix reasonably requires it for lawful purposes related to its functions or activities; (iii) it is required by a contract between us; or (iv) with your consent. We have implemented appropriate measures to ensure your personal information is securely destroyed in a timely and consistent manner when no longer required.
9. Information Security
9.1 The security of your personal information is important to us, and we have implemented appropriate security measures to protect the confidentiality, integrity, and availability of the personal information we collect about you and ensure that such information is processed in accordance with applicable data privacy laws.
10. Your Information Rights
10.1 You have the following rights under applicable data privacy laws in respect of any personal information we collect and use about you:
- The right to access and inspect your personal information or be provided with a permanent copy of the information being held about you, for a reasonable fee. We may and where applicable, must, refuse access to information in terms of the grounds for refusal of access to records set out in the applicable laws.
- The right to request the correction of your personal information where it is inaccurate irrelevant, excessive, incomplete, misleading, or out of date or in cases where the accuracy of information is disputed, to supplement the information to give notice that you dispute its accuracy.
- The right to request the erasure, deletion, or destruction of your personal information, particularly where the continued use of the information is no longer necessary, and we have no other legal ground for processing the data.
- The right to object to the use of your personal information, at any time, particularly where you feel there are no longer sufficient legitimate grounds for us to continue processing the information where the justification for that processing is that it is necessary for pursuing our legitimate interests or for the protection of your legitimate interests or where the processing is in the context of the processing of personal information for the purposes of direct marketing. If you raise an objection, such objection should be based on reasonable grounds relating to your situation, unless legislation provides for such processing.
- The right to object to the use of your personal information for direct marketing purposes. See section eleven (11) below for further information.
- The right to request the restriction of your personal information from further use, e.g. where the accuracy of the information is disputed and you request that the information not be used until its accuracy is confirmed, the processing is unlawful, but you do not want it erased, deleted or destroyed; or it is no longer needed for the purposes for which it was collected for purposes of proof; or you request the transmission of the personal data into another automated processing system.
- The right to request that some aspects of your personal information be provided to you or a third party of your choice in electronic form to enable its reuse.
- The right to object to decisions involving the use of your personal information, which have been taken solely by automated means. See section twelve (12) below for further information.
- The right to withdraw consent, at any time, whenever we have asked for your consent for processing your personal information without affecting the lawfulness of processing based on consent before its withdrawal.
- The right to complain to the relevant data protection regulator about our processing of your personal information. In respect of Mauritius, you have the right to lodge a complaint with the Mauritius Data Protection Office.
10.2 It is important to note, however, that some of the rights described above in Section 10.1 can only be exercised in certain circumstances. If we are unable to fulfil a request from you to exercise one of your rights under applicable data privacy laws, we will write to you to explain the reason for refusal (e.g., for compliance with a legal obligation, for the establishment, exercise or defence or legal claims or legal exemption). Where required, further information concerning these rights and their application can be obtained by contacting us.
11. Direct Marketing
11.1 We will use your personal information to send you direct marketing about other products and services that we feel may be of interest to you. Your personal information will only be used for direct marketing in accordance with applicable laws and regulations. We will give you the opportunity to consent to the receipt of direct marketing at the point that you apply or register to receive the services and, should you already be considered an existing customer of Actuarix who receives direct marketing from us in relation to the same or similar services, we will give you the opportunity to refuse direct marketing on each occasion thereafter that you receive direct marketing communications from us (usually in the form of an “unsubscribed link”). You can also change your marketing preferences at any stage by contacting us. Please note that, even if you “Opt-Out” of receiving direct marketing communications, we may still send you service-related communications where necessary.
12. Automated Decisions
12.1 Where you apply or register to receive the service, we may carry out a real-time automated assessment to determine whether you are eligible to receive the service. An automated assessment is an assessment carried out automatically using technological means (e.g., computer systems) without human involvement. This assessment will analyse your personal information and comprise a number of checks, e.g., credit history and bankruptcy check, validation of your driving licence and motoring convictions, validation of your previous claims’ history and other fraud prevention checks. Where your application does not appear to meet the eligible criteria, it may be automatically refused, and you will receive notification of this during the application process. However, where a decision is taken solely by automated means involving the use of your personal information, you have the right to challenge the decision and ask us to reconsider the matter, with human intervention. If you wish to exercise this right, you should contact us.
13. Complaints
13.1 If you wish to make a complaint about the way, we use your personal information you should raise this with us by contacting the Data Protection Officer of Actuarix in the first instance:
|
§ Call: |
+230 460 3800 |
|
§ Email: |
privacy@actuarix.mu |
|
§ Write to us: |
Actuarix Consulting Limited A/S Data Protection Officer, 1st Floor, The Pod, Vivea Business Park, Moka, Mauritius |
However, if you are not satisfied with the way we have handled your complaint you have the right to raise the matter with the Data Protection Office of Mauritius.
14. Changes to this Notice
14.1 This Notice is not contractual, and Actuarix reserves the right to reasonably amend it from time to time to ensure it continues to accurately reflect the way that Actuarix collects and uses personal information about you. Any updates or changes to this Notice will be made available to you. You should periodically review this Notice to ensure you understand how we collect and use your personal information.
15. Contact Information
15.1 If you have any questions about the content of this Notice or the rights conferred to you under the applicable data privacy laws, you should contact the Data Protection Officer:
|
§ Call: |
+230 460 3800 |
|
§ Email: |
privacy@actuarix.mu |
|
§ Write to us: |
Actuarix Consulting Limited A/S Data Protection Officer, 1st Floor, The Pod, Vivea Business Park, Moka, Mauritius |
About Actuarix
© Actuarix 2025. All rights reserved.
The information contained herein, and the statements expressed are of a general nature and are not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information and use sources, we consider reliable, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation.
Actuarix is licenced by the Mauritius Financial Services Commission [License No: AC06000010 (Actuarial Services), IY09000004 (Investment Adviser), BI13000090 (Insurance Broker), PA09000002 (Pension Scheme Administrator)].