Mauritius Housing Company Ltd (hereafter referred to as “MHC”), as a registered Data Controller and Data Processor, is committed to ensuring the protection and confidentiality of your personal data.
MHC collects, uses, stores, and protects your personal data in compliance with applicable data protection laws and regulations.
WHAT INFORMATION DO WE COLLECT RELATIVE TO OUR PROCESSING OPERATIONS?
- Personal Identification Information: Name, address, phone number, email address, NIC number, passport number, date of birth, sex, marital status, age.
- Financial Data: Bank account details, credit history, income, loan information, and other financial data necessary for processing your application or managing your financial relationship.
- Employment Data: Job title, department, work history, performance evaluations, and other employee-related information.
- Sensitive Data: This includes data related to your physical or mental health, or other sensitive categories of data, incl. any proceedings for an offence committed or alleged to have been committed, provided in compliance with either parties’ legal or contractual obligations.
FOR WHAT REASON DO WE REQUIRE YOUR PERSONAL INFORMATION?
By virtue of our business activities and relative lawful operations, MHC shall collect your personal data for the following lawful processing:
Regulatory Compliance
- To ensure compliance with the local AML/CFT laws and regulations
- To perform due diligence screening
- To keep Know Your Customer (“KYC”) documents on our existing customers up to date.
Corporate Governance
- To comply with the recommended principles of corporate governance in relation to other stakeholders other than customers.
Service Delivery
- To assess, process, and manage your applications for deposit and/or loan, including verifying eligibility and managing payments.
Employee Management
- To hire, performance management, payroll, benefits, and employee engagement.
Supplier Management
- To process information relative to contractual obligations and business transactions as part of the local AML regulations.
Marketing and Communication
- To send promotional material, newsletters, or updates on our products and services
- To publish photos and/or testimonials on MHC’s social media platforms
Customer Support
- To manage inquiries, complaints, and feedback.
MHC will not share your personal information to third parties unless we have your express permission. We observe the rights granted to you under applicable privacy and data protection laws, and will ensure that queries relating to privacy issues are promptly and transparently dealt with.
You may request details of personal information which we hold about you under the Data Protection Act 2017 (as may be amended from time to time). For this, you must complete our Data Subject Request Form and submit it to our Data Protection Officer (“DPO”) by email, post, or through our branches for further processing.
Click here (Data Request Subject Form) to download the form.
TO WHOM WE MAY SHARE YOUR PERSONAL INFORMATION
MHC may share your Personal Data with following external parties:
- Regulatory Authorities such as financial regulators, tax authorities, and law enforcement agencies.
- Service Providers: To manage payroll, or perform other business functions.
- Affiliates or Partners where necessary, to provide you with additional services (with your consent, where applicable).
- Third Parties: If required by law, or as part of a business transaction such as mergers, acquisitions, or legal proceedings.
YOUR RIGHTS AS DATA SUBJECT (under the Data Protection Act 2017)
- Right to Access
- Right to Data Portability
- Right to Rectification
- Right to Erasure or object to processing (Conditions shall apply)
- Right to Withdraw Consent
For more information about your rights, or should you not be satisfied with the response from MHC’s DPO, you can visit the local Data Protection Office’s website: dataprotection.govmu.org.
HOW LONG DO WE KEEP YOUR DATA?
MHC will retain your Personal Data for as long as necessary to fulfill the legitimate purposes including compliance with legal, regulatory, or contractual obligations.
SECURITY
MHC shall always take and enforce upon appropriate technical and organizational measures to safeguard your Personal Data, including encryption, secure storage, and access controls, to prevent unauthorized access, disclosure, or misuse.
PERSONAL DATA BREACH
In case of any data breach being flagged, we reiterate our commitment to intervene at the earliest and take appropriate actions, including sanctions against those at fault. As one of our key stakeholders, your ongoing support is essential for us to fulfill our legal and compliance obligations with respect to data protection.
CONTACT DETAILS
If you have any questions, concerns, or requests regarding your personal data or this notice, or if you would like to exercise your rights, please contact MHC’s Data Protection Officer.
Level 1, MHC Building,
Révérend Jean Lebrun Street,
Port Louis
(+230) 405 5555
Should you not be satisfied with the response from MHC, you may contact the following offices:
1. Data Protection Commissioner
Data Protection Office,
Level 5, SICOM Tower,
Wall Street, Ebene Cybercity,
Ebene, Republic of Mauritius
(+230) 460 0251
2. Ombudsperson for Financial Services
Ground Floor, SICOM Tower,
Wall Street, Ebene 72201,
Republic of Mauritius
ombudspersonfs@ofsmauritius.org
(+230) 460 0473/0474
MHC reserves the right to amend this Data Privacy Policy at any time, partly or wholly, and such amendments shall be notified on MHC’s website. Unless otherwise stated, the current version shall supersede and replace all previous versions, and shall be effective as from the date of posting.
Approved by the Board of Directors on 14 May 2025.
