Home / Privacy Policy
Privacy Policy
This policy explains how Global Equity Insurance Brokers collects, uses and protects personal data when you visit this website, contact us, or ask us to arrange or service insurance. It applies alongside our Data Protection Notice, which describes in more detail how personal data moves through the insurance chain, and our Terms of Use.
Last updated: 10 August 2026.
Who we are
Global Equity Insurance Brokers is an insurance brokerage licensed by the Financial Services Commission of Mauritius under section 70 of the Insurance Act 2005. For the purposes of the Data Protection Act 2017 we are a controller in respect of the personal data described in this policy, and we are registered as such with the Data Protection Office.
You can reach us at Suite 217, Ebene Junction, Rue de La Democratie, Ebene, Mauritius; by telephone on 5252 5688 or 5254 8855; or by email at info@globalequity.mu.
The personal data we hold
Most of what we hold comes directly from you, on a proposal form, in correspondence, or in conversation. Depending on the cover you ask us to arrange, it may include:
- Identity and contact details — name, date of birth, national identity or passport number, address, telephone number and email address.
- Risk information — details of the property, vehicle, vessel, business, goods or liability to be insured, together with your claims and insurance history.
- Financial information — bank details, payment records, and information needed to assess premium and credit terms.
- Policy and claims records — quotations, schedules, endorsements, correspondence, claims notifications and settlement records.
- Special category data, where the cover requires it — most often health information for medical, travel, personal accident or life products, and information about criminal convictions where a motor or fidelity proposal asks for it.
We also receive personal data from third parties: insurers, loss adjusters and claims professionals, surveyors and medical practitioners, and the checks we are required to run for identification and financial crime purposes.
Why we process it, and our lawful basis
Section 28 of the Data Protection Act 2017 requires a lawful basis for every processing activity. Ours are these.
- Performance of a contract, or steps taken at your request before entering one — obtaining quotations, placing and servicing your insurance, handling claims, collecting premium.
- Compliance with a legal obligation — our duties under the Insurance Act 2005 and the rules made under it, and our customer due diligence, record-keeping and reporting duties under the Financial Intelligence and Anti-Money Laundering Act 2002.
- Our legitimate interests — administering our business, maintaining records, managing our own insurance and professional indemnity position, preventing fraud, and improving the service we give clients, in each case where this is not outweighed by any harm or prejudice to you.
- Your consent — for marketing communications, and, in the manner section 29 requires, for the processing of special category data such as health information.
Where processing rests on consent you may withdraw it at any time, though we may then be unable to arrange or continue the cover to which it relates.
Who we share it with
Arranging insurance necessarily involves disclosure. We share personal data with insurers approached on your behalf; with loss adjusters, claims professionals, surveyors, medical advisers and lawyers involved in a claim; with our professional advisers and auditors; and with the technology providers who host and support our systems, who act as processors under written terms and may only act on our instructions.
We also disclose personal data where the law requires it — to the Financial Services Commission, the Financial Intelligence Unit, the Data Protection Office, the Mauritius Revenue Authority, the police or a court. Where a disclosure is made under the financial crime legislation we may be prohibited from telling you about it.
We do not sell personal data, and we do not share it with third parties for their own marketing.
Sending personal data outside Mauritius
Placing specialist risks means approaching underwriting markets in the region and internationally, so some personal data will be transferred outside Mauritius. Section 36 of the Data Protection Act 2017 permits this where appropriate safeguards are in place, where you have given explicit consent having been informed of the possible risks, or where the transfer is necessary for the performance of your contract or for the establishment or defence of legal claims. We rely on contractual safeguards with the parties we transfer to, and we transfer only what the market needs to see in order to quote or to handle a claim.
How long we keep it
We keep personal data only for as long as the purpose requires. In practice that means the life of the policy plus the period during which a claim or complaint could still arise, and at least seven years for the customer due diligence and transaction records we must retain under the anti-money-laundering legislation. When the purpose has lapsed, section 27 of the Act requires us to destroy the data as soon as is reasonably practicable and to instruct any processor holding it to do the same.
Keeping it secure
Section 31 of the Act requires appropriate technical and organisational measures, and we maintain them: access controls and role-based permissions, encryption in transit and at rest where appropriate, backup and recovery arrangements, supplier due diligence, staff training, and periodic testing of whether those measures actually work.
If a personal data breach occurs we will notify the Data Protection Commissioner without undue delay and, where feasible, within seventy-two hours of becoming aware of it, as section 25 requires. Where the breach is likely to result in a high risk to your rights and freedoms we will tell you as well, without undue delay, and explain what has happened and what you can do about it.
Your rights
The Data Protection Act 2017 gives you the following rights over your personal data.
- Access — to be told whether we hold personal data about you and to receive a copy of it, together with information about how it is used. We will respond within one month of receiving your request, which may be extended by a further month where the request is complex. There is no charge unless a request is manifestly excessive.
- Rectification, erasure or restriction — to have inaccurate data corrected, to have data erased where we no longer have grounds to hold it, and to have processing restricted while a question about it is resolved.
- Objection — to object in writing at any time to processing based on our legitimate interests. We must stop unless we can show compelling legitimate grounds. Where you object to direct marketing, that right is absolute and we will stop immediately.
- Automated decisions — not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you, except where the Act permits it.
Rights may be exercised by you, by a parent or guardian on behalf of a minor, by a guardian on behalf of a person who is mentally unfit, or by a representative you authorise in writing. Write to us at info@globalequity.mu and we will ask for proof of identity before we act.
Cookies and this website
This website uses only the cookies necessary for it to function and to keep it secure — for example, cookies that maintain a session for users signed in to the site’s administration area. We do not use advertising cookies, and we do not use cookies to track you across other websites.
The Data Protection Act 2017 does not contain a provision dealing with cookies by name. It does, however, require a lawful basis and transparency for any processing of personal data, including any carried out through a website. If we introduce analytics or any other non-essential cookie, we will update this policy and ask for your consent before those cookies are set. You can also block or delete cookies through your browser settings, though parts of the site may then not work as intended. Our cookie policy sets all of this out in full.
Marketing
We will send you information about our services only where you have asked for it or where you are an existing client and the information is relevant to the cover you hold. Every message contains a means of unsubscribing, and you can tell us to stop at any time by emailing info@globalequity.mu. We act on that immediately.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first — our complaints procedure explains how, and we would rather have the chance to put it right.
You also have the right to complain to the Data Protection Commissioner at the Data Protection Office, by telephone on 460 0251, by email at dpo@govmu.org, or through dataprotection.govmu.org.
Changes to this policy
We review this policy periodically and will publish any changes on this page with a revised date. Where a change materially affects how we use your personal data we will bring it to your attention directly.
