1. Rights available
- Access: confirmation of whether personal data is processed and a copy of relevant data, together with prescribed supplementary information.
- Rectification: correction of inaccurate data and completion of incomplete data.
- Erasure: deletion where the legal conditions are met and no overriding retention ground applies.
- Restriction: limiting use of data in the circumstances provided by law.
- Objection: objecting in writing to processing, including an absolute objection to direct marketing.
- Withdrawal of consent: withdrawing consent at any time where consent is the basis relied upon.
- Automated decisions: protection against certain decisions based solely on automated processing that have legal or similarly significant effects.
- Complaint: lodging a complaint with the Mauritius Data Protection Commissioner.
- Data portability: the Data Protection Act 2017 does not provide a general statutory portability right.
2. How to make a request
Write to dhowcapital@bramston.co with the subject “Data protection request”, or send a signed letter to the registered office.
- State your full name and preferred contact details.
- Describe the right you wish to exercise and the information or interaction concerned.
- Explain your connection with Dhow Capital, if this is not evident.
- Provide authority if you act for another person.
- Do not send identity documents unless requested. We will seek only the information reasonably necessary to verify identity and authority.
3. Response time and fees
Under the Data Protection Act 2017, the controller must ordinarily inform the data subject in writing within one month of receipt whether action has been taken. That period may be extended by a further month where necessary because of complexity or the number of requests.
Requests are generally handled free of charge. Where a request is manifestly excessive, the Act permits a reasonable fee or refusal, and the controller bears the burden of demonstrating the excessive character of the request.
4. Lawful limitations
A right may be limited where an exception applies, another person’s rights would be adversely affected, identity cannot reasonably be verified, or data must be retained for a legal obligation, public-interest purpose or the establishment, exercise or defence of legal claims.
Where Dhow Capital refuses to act, it will explain the reason in writing within the applicable period and identify the possibility of complaining to the Commissioner.
5. Complaint to the Commissioner
You may lodge a complaint with the Mauritius Data Protection Commissioner. The Data Protection Office website provides official guidance and forms.