TEGO · Privacy notice

Who is responsible

TEGO Platform Ltd, BRN C26237531, Telfair, Moka, Mauritius, is the controller of the personal data described here.

Questions about your personal data go to TEGO by email:

By post: TEGO Platform Ltd, Telfair, Moka, Mauritius.

Still to be confirmed:

[To be confirmed: the data protection officer]
[To be confirmed: registration with the Data Protection Office]

What TEGO collects

What TEGO holds about you depends on how far you go: a quote, a request for cover, then a policy. Each table below is one place the data comes from.

Your quote

What	In detail
Your situation	Whether the car is brand new, imported used, or already on the road in Mauritius.
The car	Its make and model, the years it was made and registered, its fuel, its engine size in cc or motor power in kW, the sum insured, and whether it is financed.
The cover you want	Third party; third party, fire and theft; or comprehensive.
The driver	Your age, how many years you have held a driving licence, your claims in the last five years, whether you had an accident in the last three years, whether you were at fault and its date, and whether anyone else will drive.
Who you are	Whether the policy is personal or for a business; for a business, the company's name and BRN; your name, profession and email address; and your phone number, if you give it.
Your consent	The tick that agrees to TEGO storing these details, the version of its words, and the time.
Where you came from	Direct, a partner's link, or a campaign's link or printed QR code.
The offers	Each insurer's price on your answers, as you were shown it, under your quote's reference.

From a partner

What	In detail
A referral	If a partner refers you, the name, phone number and vehicle it gives, a note and the date, typed in by TEGO's staff or by the partner's own staff in its portal.

Signing in

What	In detail
Your email address	The address you sign in with. A code sent to it proves it is yours.
The sign-in code	Kept for 10 minutes as a keyed hash, never as the code itself.
Your IP address	Kept until an hour after the last code request it counted, to limit how many codes one connection can ask for.
Your sign-ins	When a code was sent and when it was used, recorded without your address, your IP address or your device.

When you request cover

What	In detail
Your documents	Your national ID card, front and back, or for a business its certificate of incorporation; your driving licence, or the main driver's; the horse power card, or for a car not yet registered the dealer's invoice or purchase order; and proof of your address, or of the business's.
Optional documents	Your no claims bonus letter, if you have a bonus, and an accident report or claim letter, if you declared an accident.
About each document	Which document it is, and its name, size and type.
The documents themselves	Sent to TEGO only where upload is switched on, which today is the demonstration site. Elsewhere they stay on your device.
The documents, at launch	[To be confirmed: whether documents are uploaded at launch]
The identity check, today	Simulated. The camera picture stays on your device. TEGO keeps the provider's name, a reference, the time, and the result of four checks: the document is authentic, a live person is present, the face matches the ID, and sanctions and PEP screening is clear.
The identity check, with Didit	Once Didit runs the check: your identity document and a live image of your face. The image of your face is sensitive data.
What Didit keeps	[To be confirmed: what Didit keeps, where, and for how long]
The payment	Simulated today. TEGO keeps the amount, the card's last four digits, a reference and the time, never the card number.
Your card	[To be confirmed: the payment provider]

The proposal

The proposal form asks the insurers' own questions. What your quote already answered is not asked again.

What	In detail
Bank & finance	If the car is financed: the bank or leasing company, the type of finance, the amount still owed, and the lender's address.
About you	Your surname, first names, title and maiden name; date of birth; nationality; National Identity Card or passport number; country of residence; home and postal addresses; mobile and other phone numbers; your spouse's name; your occupation and employment, with your employer and its address, or your own business, its registration number, what it does and its address; your sector; where the money for the premium comes from; your average monthly revenue; your bank and account number, for refunds and claim payments; whether you, a relative or a close associate is a politically exposed person, and in what function; and whether your assets are worth over Rs 50 million. For a business, its registered address; for a business or the self-employed, a VAT number.
The car	Its make, model, year of make, engine size or motor power, sum insured and condition; whether it is hybrid or electric; its registration, chassis and engine numbers, colour and seats; whether registration fees and VAT are in the sum insured; whether it is kept in a garage overnight, and where; any security device; the kilometres it does a year; accessories and their value; and whether it was bought duty free or at auction, modified for performance, in an accident or a loss before, declared a total loss, is left-hand drive, or is not yours, and whose it is.
How the car is used	What it is used for, and whether it tows a trailer or is used by employees, for hire or reward, for rallies, for carrying goods or passengers for hire, in the motor trade, for hazardous materials, or on airport premises.
Licence & drivers	Whether your licence is valid or provisional, its number and type, and when you first held it; and for each other driver, their full name, relationship to you, date of birth, occupation, licence type and when they first held it.
History	Your claims in the last five years, with the date, the insurer, what happened, who was at fault and the costs. For everyone who will drive: motoring convictions, fines or endorsements in the last five years, prosecutions pending, licences suspended or drivers disqualified, alcohol before driving, drugs or medication that affect driving, and health conditions: diabetes, epilepsy, a heart condition, high blood pressure, defective vision, hearing problems, a physical disability, a mental or nervous condition, or any other condition that affects driving, with the details you give for each. Then your past insurance, anything an insurer did (declined a proposal, raised the premium or imposed special terms or an additional excess, refused to renew, cancelled a policy), and any other policy you hold with this insurer.
Sensitive answers	The answers on health, convictions, alcohol and drugs are sensitive data. They are about you and about anyone else who will drive.
Your cover	The day your cover starts, and anything on your quote you ask to correct.
Declaration	Your tick on each statement, including the privacy tick; your answers to the insurer's optional questions, such as policy documents by email and offers by email, and for some insurers automatic renewal, its customer portal, sharing your identity documents within its group, and market research; whether an agent introduced you, and the agent's name; and your typed name and the time you typed it.

After your request

What	In detail
Your request	Its status, the notes TEGO's staff add and the tags they give your account, and the insurer's decision.
Policies and documents	Your policies, and the documents added to your requests, policies and claims.
Your claims	The policy, the date and place, what happened, whether anyone was injured, the police report number, and up to five photos of the damage or the police report.
Your payments	Each payment, and its receipt.
Emails and reminders	Which emails TEGO sent you and when, such as the renewal reminders 30 and 7 days before your cover ends.
Support messages	What you write to support, with its topic and any reference. It reaches TEGO by email.
Your profile	Your name, phone number and address, as you keep them on your Profile.

Who looked

What	In detail
Who downloaded a document	Who at TEGO or at the insurer downloaded a document, and when.
Who opened your request	Who at the insurer opened your request, and when.
Who opened your referral	Who at the partner opened your referral, and when.
Who changed what	Who changed your account, a request, a policy or a claim, and when.

Signing

What	In detail
The declaration	Your typed name on the proposal's declaration, and the time you typed it.
When you sign electronically	The signature you draw or type, the time, your IP address, your device and browser as they report themselves, and the document's SHA-256 fingerprint, in a certificate TEGO seals.
The verification link	It shows whoever holds it the document's type, reference and fingerprint, the signers' names and masked email addresses, the times and the trail.

Paying monthly

What	In detail
Your plan with a lender	Once paying monthly exists: your plan, its instalments and any arrears, from the lender's statements.
What the lender sends	[To be confirmed: what the lender's statements hold]

Not collected

Anything you enter in the travel preview. It never leaves your browser.
Analytics or advertising data. TEGO's pages run no analytics, advertising or tracking script.

Why, and on what basis

Each use of your data needs a lawful basis. The bases below are proposed, for a lawyer to confirm.

Purpose	Basis
Preparing your quote and emailing it to you	Your consent, given when you ask for the quote. [For legal review: whether this basis holds]
Signing you in and running your account	The service you asked for. [For legal review: whether this basis holds]
Arranging cover with the insurer you chose	Steps you asked TEGO to take before an insurance contract. The sensitive answers in the proposal rest on your explicit consent, given by its privacy tick. [For legal review: whether this basis holds]
Checking your identity before your request goes to the insurer	A legal obligation, once TEGO holds its FSC licence. [For legal review: whether this basis holds]
Taking payments and refunds, paying the insurer, and commissions	The contract with you, and the records the law requires. [For legal review: whether this basis holds]
Handling claims and sending renewal reminders	The contract with you. [For legal review: whether this basis holds]
Following up a quote you asked for, about that quote only	Your consent, given when you ask for the quote. [For legal review: whether the /quote consent, to prepare my quote, covers a follow-up]
Crediting the partner or campaign that brought you	TEGO's legitimate interests. [For legal review: whether this basis holds]
Security, and the record of who did what	TEGO's legitimate interests, and its legal obligations. [For legal review: whether this basis holds]
Keeping the evidence of a signature	[For legal review: the basis for keeping signature evidence]

Who receives it

TEGO's staff, each seeing what their role needs.
The insurer you chose, once TEGO has checked your request and sent it on.
The insurer receives your request as TEGO has checked it: your details; the answers your quote was priced on, and the offer you chose; your proposal answers, including health and driving records; the result of the identity check; your documents; the payment confirmation; TEGO's notes on your request that it shares with the insurer; and your request's history from the moment TEGO sends it.
For a proposal you sign electronically, the insurer also receives the signature certificate, with its time, your IP address and your device.
Everyone who signs the same document receives its signature certificate, with each signer's name, email address, time, IP address and device.
A lender, once you can pay monthly through one.
Regulators and authorities, when the law requires it.

The partner that brought you

A partner is a business, such as a car dealer or an agent, that sends customers to TEGO through its link or by referring them.

Partners have their own access to TEGO: a portal for the people at the partner whom TEGO invites.

The partner whose link or referral brought you sees your name, your vehicle, your request's status and the date of each change.

The statuses it sees are Referred, Quoted, Requested cover, With insurer, Insured and Lost.

A partner's commission statement also shows your insurer and its own commission on your policy. Where that commission is a percentage of the premium, the partner can work out your premium from it.

The partner never sees your documents, your proposal answers, your identity check, the premium itself, contact details it did not give, TEGO's internal notes, or another partner's referrals.

Providers acting for TEGO

Provider	What it does for TEGO
Cloudflare	Hosts the website, the database in Western Europe, the documents and photos, and a short-lived store for sign-in codes.
Resend	Sends TEGO's emails.
MXroute	Holds TEGO's mailboxes.
Didit	Will run the identity checks, once they are live.
[To be confirmed: the payment provider]	Will take card payments, once they are real.

Cloudflare, Resend and MXroute process data outside Mauritius, and Didit will once the identity checks are live:

[For legal review: safeguards for transfers outside Mauritius]

The typefaces on TEGO's pages load from Google Fonts, which sees your IP address.

How long it is kept

These periods are set in TEGO's code:

Record	How long
The sign-in code	10 minutes, as a keyed hash, never the code itself.
Your IP address, counted for code requests	Until an hour after the last code request it counted.
The proof that your browser confirmed your address	7 days, or until you sign out.
Your session on one browser	30 days, or until you sign out.
The link to your quote, and the prices it shows	30 days.

Identity-check records are kept for not less than 7 years after the business relationship has ended, in accordance with section 17F of the Financial Intelligence and Anti-Money Laundering Act 2002.

Payment records are kept for 7 years after the transaction, in accordance with section 17F of the Financial Intelligence and Anti-Money Laundering Act 2002.

After 30 days the link stops showing your quote, but its record, prices included, stays. Today it is deleted only with your account, and only if it never became a request.

How long TEGO keeps the rest is still to be set:

Record	How long
Your quote's record	[To be confirmed: how long]
Your requests and the answers you gave	[To be confirmed: how long]
Policies	[To be confirmed: how long]
Claims	[To be confirmed: how long]
Documents	[To be confirmed: how long]
The record of who opened or changed what	[To be confirmed: how long]
Signature evidence	[To be confirmed: how long]
Emails TEGO sent you	[To be confirmed: how long]
Support messages	[To be confirmed: how long]

Your rights

Access

Your account shows your quotes, requests, policies, claims, payments and documents.

To ask for everything TEGO holds about you, write to TEGO.

Correction

You can correct your name, phone number and address on your Profile, or by writing to TEGO.

The address you sign in with changes only by writing to TEGO, because it is your account's identity.

Erasure

The Delete my account button on your Profile erases your account, and says what goes and what stays:

What goes: your sign-in, your contact details, your address and your saved quotes.
What stays: your requests and the answers you gave, your policies, claims, payments and documents. The law requires TEGO to keep them for the retention period.

[For legal review: which law requires each record that stays to be kept]

The requests that stay keep the name, email address and phone number they were sent with.

Your account cannot be deleted while a request or a claim is still open.

You can also write to TEGO to ask for it, and TEGO's staff erase the account in the same way.

A partner whose link brought you sees "Erased customer" in place of your name, and no longer your vehicle.

A referral typed in from what a partner gave, by TEGO's staff or by the partner's own staff in its portal, keeps what was typed.

Objection

You can object to TEGO's use of your data, by writing to TEGO.

[For legal review: when TEGO may go on using data after an objection]

Withdrawing a consent

You can withdraw a consent you gave, on your quote or on the proposal, by writing to TEGO.

[For legal review: what withdrawing a consent changes for a request already sent]

How to ask

To use any of these rights, write to TEGO:

contact@tego.mu

Complaints

You can complain to the Data Protection Commissioner's office in Mauritius:

[To be confirmed: its contact details]

No marketing

TEGO sends no marketing.

TEGO's emails are about your own quotes, requests, policies and claims, and the codes you sign in with.

On the proposal, the tick "Send me offers by email" answers the insurer's own question. TEGO passes that answer to the insurer.

Security

What TEGO's code does today:

The site is served over HTTPS.
You sign in with a code emailed to you. There is no password.
The cookies that keep you signed in are signed by TEGO, and scripts on the page cannot read them.
TEGO's staff see what their role allows, and TEGO checks that role each time staff open a page or make a change.
Changes, and staff downloads of documents, are recorded with who made them and when.

[To be confirmed: further security measures]

Changes to this notice

When this notice changes, TEGO publishes the new version on this page, with its date.

The consent you give with a quote has its own version, and each quote records the version it was given under.

The current version:

quote-2026-10

What TEGO keeps in your browser is set out in the cookie notice:

Cookie notice