Privacy Policy

Effective 25 September 2026.

1. Who we are

This notice explains how Intrasia Wealth Limited ("Intrasia Wealth", "we", "us") collects, uses, shares and protects personal data. Intrasia Wealth Limited is incorporated in Mauritius, with its principal address at The Strand 3, Beau Plan, Pamplemousses, Mauritius, and an office at 2nd Floor, Building 3, Parc du Cap, Mispel Road, Bellville, Cape Town, South Africa.

We are licensed by the Financial Services Commission of Mauritius as an Investment Adviser (Unrestricted), licence IX24200006, and are an authorised Financial Services Provider in South Africa, FSP 54955, regulated by the Financial Sector Conduct Authority.

For the personal data described in this notice we are the controller under the Mauritius Data Protection Act 2017 and, for clients and other individuals in South Africa, the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA).

2. How to contact us about your data

Our Data Protection Officer is the Head of Legal and Compliance. You can reach her at chloe@intrasiawealth.com, by telephone on +230 260 81 88, or by post at the Mauritius address above. For South Africa she is also our Information Officer under POPIA and the Promotion of Access to Information Act, and our PAIA manual (PDF) explains how to request access to our records.

3. The personal data we collect

Depending on your relationship with us, we may collect:

Identity data: name, date of birth, nationality, national identity or passport details, tax identification numbers, marital status and photographs on identity documents.
Contact data: residential and postal address, email address and telephone numbers.
Financial and suitability data: income, assets and liabilities, source of wealth and source of funds, investment objectives, knowledge and experience, attitude to risk, bank and custody account details, and records of the portfolios we advise on or manage.
Compliance data: the results of identity verification, sanctions and politically exposed person screening, and adverse media checks.
Family and connected persons: details of spouses, dependants, beneficiaries, directors, shareholders, trustees and beneficial owners, where relevant to your affairs. If you give us another person's data, please make sure they know you have done so and have seen this notice.
Communications: correspondence, meeting notes and, where we record them, telephone or video calls.
Website data: what you choose to send us through this website. The contact form collects your name and email address and, if you provide them, your telephone number, country of residence, an approximate range of investable assets and your message. If you choose to send us your risk profile assessment, we receive your name and email address, your answers, the scores and preliminary result the tool worked out from them, the purpose, currency and approximate amount you entered, your country of residence, and a reference number and date for the result. Technical data is described in section 11.
Recruitment data: curriculum vitae, qualifications and references, if you apply to work with us.

Some of this may be special category data, for example information about political exposure or, exceptionally, criminal convictions revealed by screening. We process it only where the law permits, including where it is necessary to comply with our anti-money-laundering obligations.

We do not knowingly collect personal data from children through this website. Data about children is collected only from a parent or guardian, for example where a child is a beneficiary.

4. Where we get it from

Most personal data comes directly from you. We also receive data from your professional advisers and representatives; from other companies in the Intrasia Group and introducers where you have been referred to us; from custodians, platforms and product providers in connection with your portfolio; from identity verification and screening providers; and from public sources such as company and regulatory registers.

5. Why we use it, and our legal basis

We use personal data only where the law allows. The purposes and the basis for each are:

To take you on as a client and provide our services, including assessing suitability, advising on and managing portfolios, instructing custodians and reporting to you. Basis: performance of a contract with you, or steps taken at your request before entering one.
To meet legal and regulatory obligations, including customer due diligence, screening, record keeping, tax reporting under the Common Reporting Standard and FATCA, and responding to regulators, courts and law enforcement. Basis: compliance with a legal obligation.
To run and protect our business, including managing risk, handling complaints, keeping records, securing our systems and establishing or defending legal claims. Basis: our legitimate interests, which we balance against your rights.
To respond to enquiries made through the contact form, by email or by telephone. Basis: steps taken at your request before entering into a contract, or our legitimate interest in answering you. Ticking the box on the contact form confirms that you have seen this notice and want us to contact you.
To prepare for a conversation using a risk profile assessment you send us. Basis: your consent, given by ticking the box before you send it. You can withdraw it at any time by contacting us, and we will then delete the assessment unless the law requires us to keep it.
To send market commentary, invitations and other marketing. Basis: your consent, which you can withdraw at any time. See section 9.
To consider job applications. Basis: steps taken at your request before a contract, and our legitimate interests.

Using the website's forms is voluntary. If you use one, we need your name and email address in order to reply; the other fields are optional. If you do not provide data that we need by law or to perform our contract with you, we may be unable to act for you.

We do not make decisions about you based solely on automated processing. The risk profile assessment on this website works out a preliminary result in your browser from your answers; it is an indication only, and any assessment that affects the service you receive is made by an adviser.

6. Who we share it with

We share personal data only where there is a reason to, and only what is needed. Recipients may include:

custodians, investment platforms, brokers, fund managers and product providers, to open and operate your accounts and carry out transactions;
other companies in the Intrasia Group, where you use or ask about their services, for example fiduciary administration or relocation;
partner firms to which we introduce you at your request, such as Acacia Wealth Limited in the United Kingdom;
service providers who process data on our behalf under written contracts, such as IT, cloud hosting, email, client relationship and portfolio systems, and identity verification and screening providers;
Formspree, Inc., which receives and delivers to us the submissions from our contact form and risk profile assessment, including the consent you give when you submit them;
our auditors, legal and other professional advisers and insurers;
regulators, tax authorities, the financial intelligence units, courts and law enforcement bodies, where the law requires or permits;
a purchaser or successor, in the event of a sale or reorganisation of our business, subject to equivalent safeguards.

We do not sell personal data.

7. Transfers outside your country

We operate from Mauritius and South Africa and use custodians and service providers elsewhere, so your data may be transferred to and stored in countries other than the one you live in, including countries whose data protection laws differ from those of Mauritius or South Africa. Website form submissions, for example, pass through Formspree, Inc. in the United States before reaching us.

Where we transfer personal data abroad we do so in accordance with section 36 of the Data Protection Act 2017 and section 72 of POPIA: to recipients bound by laws, binding rules or contracts that provide an adequate level of protection; where the transfer is necessary to perform our contract with you or a contract concluded in your interest; or with your consent. You may ask us for details of the safeguards that apply to a particular transfer.

8. How long we keep it

We keep personal data for as long as it is needed for the purposes in section 5 and for as long as the law requires. Anti-money-laundering law requires us to keep client identification and transaction records for at least seven years after a relationship ends in Mauritius, and at least five years in South Africa; financial services law imposes similar periods for records of advice.

Enquiries that do not lead to a client relationship are kept for up to two years. Unsuccessful job applications are kept for up to one year.

Website submissions are also held by Formspree until we delete them there. We delete them from Formspree once they have reached our own systems.

When data is no longer needed we delete it, destroy it securely or anonymise it.

9. Marketing

We send market reviews, invitations and similar communications only to people who have asked for them or agreed to receive them, or, where the law permits, to existing clients about similar services. Every message includes a way to unsubscribe, and you can also opt out at any time by contacting us. Opting out of marketing does not affect the service communications we must send you as a client.

10. Security

We apply technical and organisational measures appropriate to the sensitivity of the data we hold, including access controls, encryption of devices and data in transit, staff confidentiality obligations and training, and written contracts with our processors. We review these measures regularly.

No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify the relevant regulator and affected individuals as the law requires. Please take care when sending us sensitive information by ordinary email, and ask us if you would prefer a more secure method.

11. This website, cookies and browser storage

You can browse this website without telling us who you are.

The retirement and compound growth calculators work entirely in your browser. What you enter is kept in the part of the page address after the # sign, so that you can bookmark or share a result; browsers do not send that part of an address to any server, so we do not receive your figures. Anyone you share such a link with will see the figures in it.

The risk profile assessment keeps your answers in your browser's session storage, in the tab you used, so that your result can be shown on the next page. They are deleted when you close the tab and are not sent to us unless you choose to submit them with your name and email address. The result page's address contains only a random reference number, not your answers.

The contact form and the risk profile assessment are delivered to us by Formspree, Inc., a United States-based form processing service, acting as our processor. When you tick the consent box and submit either form, we record your answers, that you agreed to this notice, which version of it you saw, and the date and time you ticked the box, so that we can demonstrate this if asked. If automatic sending fails, the page offers to open a pre-written email in your own email program instead; that email contains a summary but not your answers, and travels through your own email provider.

Our pages do not set cookies, and we use no analytics, advertising or tracking technologies. If we introduce any non-essential cookies or similar technologies, we will ask for your consent first and update this notice.

The server that hosts this website, and any content delivery network in front of it, records standard technical data such as IP address, browser type, the pages requested and the time of each request, for security and to keep the site running.

Pages, typefaces, images and video are all served from our own server. Browsing this website makes no requests to other companies' servers; the only third party involved is Formspree, and only when you choose to submit a form.

Links to other websites are provided for convenience. We are not responsible for their content or privacy practices.

12. Your rights

Subject to conditions and exceptions in the law that applies to you, you have the right to:

be told how your personal data is used, which is the purpose of this notice;
obtain confirmation that we hold personal data about you and a copy of it;
have inaccurate or incomplete data corrected;
have data erased or destroyed where we no longer have a lawful reason to keep it;
restrict or object to our processing, including any processing based on our legitimate interests, and to object to direct marketing at any time;
withdraw consent where we rely on it, without affecting processing already carried out;
not be subject to a decision based solely on automated processing that significantly affects you;
lodge a complaint with a regulator, as set out in section 13.

To exercise any of these rights, contact our Data Protection Officer at chloe@intrasiawealth.com. We will ask for proof of identity before acting. We do not charge a fee unless a request is manifestly unfounded or excessive, and we aim to respond within one month. Some data must be kept despite a request to erase it, for example records we are required by law to retain.

13. Complaints

Please raise any concern with us first at chloe@intrasiawealth.com so that we can try to put it right. You also have the right to complain to the regulator:

Mauritius: the Data Protection Commissioner, Data Protection Office, 5th Floor, SICOM Tower, Wall Street, Ebene. Telephone +230 460 0251, email dpo@govmu.org, website dataprotection.govmu.org.
South Africa: the Information Regulator, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Email POPIAComplaints@inforegulator.org.za, website inforegulator.org.za.

14. Changes to this notice

This notice is effective from 25 September 2026. We may update it from time to time. The current version will always be on this page with its effective date. If a change materially affects how we use personal data we already hold, we will tell clients directly.