# Priva

> Priva is web-based software that helps organisations in Mauritius manage their obligations under the Data Protection Act 2017 (DPA 2017). It is built for Mauritian businesses and other organisations that process personal data, and for the in-house data protection officer (DPO) who runs that work.

What is Priva? Priva is web-based software that helps organisations in Mauritius manage their obligations under the Data Protection Act 2017 (DPA 2017). Priva is a product of Khay Digital Ltd, a company registered in Mauritius. It is software, not legal advice: each organisation remains responsible for meeting the Act.

Who is it for? It is built for Mauritian businesses and other organisations that process personal data, and for the in-house data protection officer (DPO) who runs that work. Individuals can use the free My Data Portal to send data protection requests to organisations that use Priva, follow each one, and manage the consent they have given them.

What does it cover? It covers registration with the Data Protection Commissioner, records of processing activities, data subject requests and their 30-day response deadline, personal data breaches and the 72-hour notification deadline (s.25), consent records, cookie consent, data protection impact assessments, retention schedules, supplier due diligence, policy templates and staff training.

## Key pages

- [Home](https://www.priva.mu/): Priva helps organisations in Mauritius manage the Data Protection Act 2017: DPC registration, records of processing, data requests, breaches and consent.
- [About](https://www.priva.mu/about): Priva is built in Mauritius by Khay Digital Ltd around the Data Protection Act 2017. Read why it exists, who builds it and where the platform is heading.
- [Pricing](https://www.priva.mu/pricing): Compare Priva's three plans for managing the Data Protection Act 2017. Prices in Mauritian Rupees, billed monthly or annually, with each plan's features listed.
- [Contact](https://www.priva.mu/contact): Questions about Priva, its plans or getting started? Email support@priva.mu or send a message. The team typically replies within one business day.
- [DPC registration guide](https://www.priva.mu/dpc-registration-help): Who must register with the Data Protection Commissioner under s.14 of the DPA 2017, what the application needs, how to apply and how long a certificate lasts.
- [DPA 2017 guide](https://www.priva.mu/dpa-2017-guide): A plain guide to the Mauritius Data Protection Act 2017: scope, key definitions, lawful bases, data subject rights, controller duties, DPOs and penalties.
- [Security](https://www.priva.mu/security): The security measures behind Priva today: encryption at rest and in transit, access control, backups, incident response and governance, planned items marked.
- [Privacy policy](https://www.priva.mu/privacy-policy): How Khay Digital Ltd, which operates Priva, collects, uses, shares and keeps personal data, your rights under the DPA 2017 and how to contact our DPO.
- [Terms of service](https://www.priva.mu/terms-of-service): The terms for using the Priva platform: accounts, subscriptions and payment in Mauritian Rupees, acceptable use, liability, termination and governing law.
- [Cookie policy](https://www.priva.mu/cookie-policy): The essential, analytics and preference cookies used by Priva, what each one does, how long it lasts and how to manage cookies in your browser settings.
- [Data processing agreement](https://www.priva.mu/dpa-agreement): The data processing agreement between Khay Digital Ltd and Priva customers: processor duties, sub-processors, security measures, breach notice and deletion.
- [Verify a document](https://www.priva.mu/verify): Every document generated on Priva carries a document ID. Enter it to confirm which organisation it was issued to, what kind of document it is and when.
- [My Data Portal](https://www.priva.mu/my-data): A free portal for individuals: send data protection requests to organisations that use Priva, follow each one, and manage the consent you have given them.
- [Help centre](https://www.priva.mu/support): Step by step guides for setting up and running data protection work with Priva, and answers to the questions organisations in Mauritius ask most.
- [FAQs](https://www.priva.mu/faqs): Plain answers about the Mauritius Data Protection Act 2017: registration, data subject requests, breach reporting, consent, retention and more.

## Help centre: About Priva

- [Is Priva legal advice?](https://www.priva.mu/support/is-priva-a-law-firm): No. Priva is a compliance management tool. You remain responsible for your own compliance.
- [Who at Priva can see the data I put into the platform?](https://www.priva.mu/support/who-can-see-my-data): Your data is isolated per tenant at the database level, and access is logged.
- [How do I check that a Priva document is genuine?](https://www.priva.mu/support/verify-a-document): Every generated document carries an ID. Enter it at priva.mu/verify.

## Help centre: Billing

- [What happens when my trial ends?](https://www.priva.mu/support/free-trial): Your data stays. Access drops to the Starter feature set until you subscribe.
- [Can I change or cancel my plan?](https://www.priva.mu/support/change-plan): Yes, at any time and from inside the platform.

## Help centre: Breaches

- [When do I have to report a data breach?](https://www.priva.mu/support/breach-72-hours): Within 72 hours to the Commissioner where there is a risk to people, and to the individuals themselves where the risk is high.

## Help centre: Consent

- [Do I need a cookie banner on my website?](https://www.priva.mu/support/cookie-consent-required): If your site uses anything beyond strictly necessary cookies, yes, and consent must be opt in.

## Help centre: Data subject rights

- [What is a data subject access request, and how long do I have?](https://www.priva.mu/support/what-is-a-dsar): Someone asking what you hold about them. You have 30 days to respond.

## Help centre: Governance

- [Do I need to appoint a Data Protection Officer?](https://www.priva.mu/support/do-i-need-a-dpo): Many organisations do, and it is worth appointing one even where it is not compulsory.

## Help centre: Records

- [What is a record of processing activities, and do I need one?](https://www.priva.mu/support/what-is-a-ropa): A written inventory of what personal data you hold and why. Yes, you need one.
- [How long am I allowed to keep personal data?](https://www.priva.mu/support/how-long-keep-data): Only as long as you need it for the purpose you collected it, and no longer.

## Help centre: The law

- [What is the Mauritius Data Protection Act 2017?](https://www.priva.mu/support/what-is-dpa-2017): The law governing how organisations in Mauritius collect and use personal data, and what it requires of you.
- [Does my business need to register with the Data Protection Commissioner?](https://www.priva.mu/support/do-i-need-to-register): Almost certainly yes, if you are a controller or processor operating in Mauritius.
- [What counts as personal data?](https://www.priva.mu/support/what-is-personal-data): Anything that identifies a living person, directly or in combination with other information you hold.
- [What is a lawful basis, and which one should I use?](https://www.priva.mu/support/lawful-basis): The legal reason you are allowed to use someone data. Consent is only one of six, and often the weakest.
- [Can I use cloud services hosted outside Mauritius?](https://www.priva.mu/support/cross-border-transfers): Yes, with a lawful transfer mechanism in place and the transfer recorded.

## Optional

- [Full text of every public page and guide](https://www.priva.mu/llms-full.txt): the same content as this index, in full
- [Help centre as JSON](https://www.priva.mu/api/support/feed): every public article with its body and steps
- [Guides that need an account](https://www.priva.mu/signin): set-up guides for signed-in Priva account holders, including during the free trial, listed in the help centre with a lock