Privacy Policy

1. Who we are

RunState Ltd (the “Company”, “we”, “us”) is the data controller responsible for the personal data described in this policy. We are a company incorporated in the Republic of Mauritius.

• Registered name: RunState Ltd
• Business Registration Number (BRN): C26230427
• Registered address: Résidence la Colombe, Block B01, Forest Side 74435, Mauritius
• Email: support@runstate.mu
• Telephone: +230 5943 3074

For any question about this policy or about how we handle your personal data, or to exercise the rights described below, contact us at support@runstate.mu.

2. What personal data we collect

Information you give us

• Contact form — your name, email address, and the message you send.
• Free assessment form — your name, email address, telephone number, role, company name, and the information you provide about your systems.
• Chat assistant — the messages you send to our on-site or WhatsApp chat, and any contact details you choose to share in the conversation.

Information we collect automatically

• A random, anonymous visitor identifier used to run the chat and remember a session.
• Basic technical data your browser sends (such as IP address, approximate location, device type and browser, and referring page) and standard server logs.
• A preference cookie that remembers your chosen language (English or French). We do not use advertising or third-party analytics tracking cookies on this website — see section 9.

3. Why we use your data, and our lawful basis

Under section 28 of the Data Protection Act 2017 we must have a lawful basis for processing your personal data. We rely on the following:

• To respond to your enquiry and provide the assessment you requested — basis: steps taken at your request prior to a contract, and our legitimate interest in answering you.
• To operate the chat assistant and route conversations to a human where needed — basis: legitimate interest and, where you initiate contact, your request.
• To follow up about our services or send you marketing — basis: your consent, which you give by opting in and may withdraw at any time.
• To keep the website secure and maintain records — basis: legitimate interest and legal obligation.

Providing your data is voluntary. However, if you do not provide the information requested on a form, we may be unable to respond to your enquiry or carry out the assessment.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf to run this website and our operations, under agreements that require them to protect it:

• Our website hosting and infrastructure providers.
• Our email delivery provider, used to send and receive messages related to your enquiry.
• The AI providers that power our chat assistant, which process the content of chat messages to generate replies.
• Where you contact us through WhatsApp, the messaging platform that carries those messages.
• An IP geolocation provider used to show us the approximate country of a visitor.

We may also disclose personal data where required by law or by a competent authority in Mauritius.

5. Transfers outside Mauritius

Some of the providers above are located outside Mauritius, which means your personal data may be transferred to and processed in other countries. In line with section 36 of the Data Protection Act 2017, we make such transfers only where appropriate safeguards are in place (such as data-processing agreements with the provider), where the transfer is necessary to provide the service you asked for, or where you have consented after being informed of any risks. You may ask us for details of the safeguards that apply.

6. How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected. Enquiry and assessment records are kept for the duration of our discussions and a reasonable period afterwards for our legitimate business and legal record-keeping needs, after which they are deleted or anonymised. Chat records are retained for a limited period to operate and improve the service. You may ask us to delete your data sooner (see section 7).

7. Your rights

Under the Data Protection Act 2017 you have the right to:

• request access to the personal data we hold about you;
• request that inaccurate data be rectified;
• request erasure of your data, or restriction of its processing;
• object to processing based on our legitimate interests, and to direct marketing;
• withdraw consent at any time, where we rely on consent (this does not affect processing already carried out);
• request a copy of the data you provided in a portable format.

To exercise any of these rights, email support@runstate.mu. We will respond within the time required by law.

8. The chat assistant and automated processing

Our chat assistant uses artificial intelligence to understand your messages and generate replies, and it may prioritise enquiries for our team to follow up. It is an assistive tool: it does not make decisions that produce legal or similarly significant effects about you without human involvement, and a member of our team reviews and handles any consequential matter. Replies may occasionally be inaccurate or incomplete and should not be relied on as professional advice.

9. Cookies

This website uses a single, strictly necessary cookie that stores your language preference so the site displays in English or French. It is not used to track you and does not require consent. We do not use advertising cookies or third-party analytics that profile visitors. If we introduce analytics or marketing tracking in future, we will ask for your consent first.

10. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. In the event of a personal data breach that is likely to affect you, we will act in accordance with our obligations under the Data Protection Act 2017, including notifying the Data Protection Commissioner where required.

11. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the supervisory authority:

• Data Protection Office, Republic of Mauritius
• Website: dataprotection.govmu.org

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. Please review it periodically. See also our Terms of Use.