Privacy Policy

THE LAW FIRM ("we", "our", or "us") is a law firm registered in Mauritius. We are committed to protecting your personal data in accordance with the Data Protection Act 2017 (DPA) of Mauritius and applicable regulations.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, engage our services, or otherwise interact with us.

We may collect the following categories of personal data:

• Identity Data: full name, title, date of birth, nationality, passport or identification details
• Contact Data: email address, telephone number, postal address
• Professional Data: job title, employer, professional qualifications, bar membership
• Financial Data: bank account details, billing information, tax identification numbers
• Usage Data: IP address, browser type, pages visited, time spent on pages, referral sources
• Cookie Data: information collected through cookies and similar technologies (see our Cookies Policy)

We process your personal data on the following lawful bases as provided under the DPA 2017:

• Consent: where you have given us explicit consent to process your data for a specific purpose
• Contractual Necessity: where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: where processing is necessary for compliance with a legal obligation to which we are subject
• Legitimate Interests: where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests

We use your information to:

• Provide legal services and respond to your enquiries
• Manage our client relationship and administer your account
• Comply with regulatory and legal obligations
• Improve our website and services
• Send you legal updates and publications (with your consent)

We may share your personal data with:

• Service Providers: third parties who provide IT, hosting, or other administrative services
• Professional Advisers: auditors, insurers, or other professional advisers as necessary
• Regulatory Authorities: the Mauritius Revenue Authority, Data Protection Commissioner, or other regulatory bodies as required by law
• Courts and Tribunals: in connection with legal proceedings or potential proceedings
• With Your Consent: any other third party where you have given us explicit consent

We do not sell your personal data to third parties. We require all third parties to respect the security of your personal data and to treat it in accordance with the DPA 2017.

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Staff training on data protection and confidentiality
• Incident response and breach notification procedures

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and the applicable legal requirements.

Client files are typically retained for a minimum of seven (7) years after the conclusion of a matter, in accordance with the rules of the Bar Council of Mauritius and applicable professional regulations.

Under the DPA 2017, you have the following rights:

• Right of Access (Section 26): to request a copy of the personal data we hold about you
• Right to Rectification (Section 27): to request correction of inaccurate or incomplete personal data
• Right to Erasure (Section 28): to request deletion of your personal data where there is no compelling reason for its continued processing
• Right to Object (Section 29): to object to processing of your personal data in certain circumstances
• Right to Restrict Processing: to request restriction of processing in certain circumstances
• Right to Data Portability: to receive your personal data in a structured, commonly used, and machine-readable format

To exercise any of these rights, please contact our Data Protection Officer at the details provided below.

Your personal data may be transferred to, and processed in, countries outside of Mauritius. Where we transfer personal data outside Mauritius, we ensure that appropriate safeguards are in place, including adequate data protection standards equivalent to those required under the DPA 2017.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or wish to exercise your rights under the DPA 2017, please contact our Data Protection Officer: