Privacy Policy

This Privacy Policy explains how SmartComply Ltd ("we," "us," or "our") collects, uses, and protects your personal data in accordance with the Mauritius Data Protection Act 2017 (DPA).
1. Personal Data We Collect
We only collect personal data that is necessary for the purposes of providing our services. This may include:
  • Identity Data: Name, passport/ID details, and nationality (for incorporation services).
  • Contact Data: Email address, telephone number, and physical address.
  • Project Data: Information provided during your "Free Project Assessment."
  • Technical Data: IP address and browser type (via cookies).
2. Purpose of Processing
We process your data for the following lawful purposes:
  • Service Delivery: To perform our contract with you (e.g., company formation, virtual office setup).
  • Consultation: To provide the legal and tax recommendations requested in your assessment.
  • Marketing: With your express consent, to send updates on offshore jurisdictions.
  • Compliance: To meet our "Know Your Customer" (KYC) and Anti-Money Laundering (AML) legal obligations.
3. Your Rights as a Data Subject
Under the DPA 2017, you have the following rights:
  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer necessary.
  • Right to Object: Object to processing for direct marketing purposes.
  • Right to Withdraw Consent: Withdraw your consent at any time.
To exercise these rights, please contact us at admin@smartcomply.mu. We aim to respond to all legitimate requests within one month.
4. Data Retention and Security
  • Retention: We keep your data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements.
  • Security: We implement appropriate technical and organizational measures (such as encryption and firewalls) to protect your data from unauthorized access.
5. International Data Transfers
If we transfer your data outside of Mauritius (e.g., for offshore incorporation in other jurisdictions), we ensure that the recipient country provides an adequate level of protection or that suitable safeguards are in place.