Last updated: 1 January 2026
Privacy Policy
1. Who We Are
Khay Digital Ltd ("we", "our", "us") is a company registered in Mauritius. We operate Priva Data Compliance ("Priva"), a data compliance platform available at priva.mu. For data protection purposes, Khay Digital Ltd acts as the data controller for personal data collected through our website and platform.
2. What Data We Collect
We collect information you provide directly (name, email, company name, billing details), usage data (pages visited, features used, log data), and technical data (IP address, browser type, device identifiers). We do not collect sensitive personal data unless you explicitly provide it.
3. How We Use Your Data
We use your data to: provide and improve the Priva platform; process your subscription and payments; send service communications and security alerts; comply with our legal obligations; and respond to support requests.
4. Legal Basis for Processing
We process your data based on: performance of our contract with you (platform access, billing); compliance with legal obligations (DPA 2017, tax law); legitimate interests (security, fraud prevention, product improvement); and your consent (marketing communications, cookies).
5. Data Sharing
We do not sell your personal data. We share data only with: sub-processors necessary to operate the platform (see our DPA Agreement); professional service providers (legal, audit, accounting) under confidentiality obligations; and authorities where required by law. All sub-processors are bound by data processing agreements.
6. Retention
We retain account data for the duration of your subscription and for 7 years after termination (to comply with tax and accounting obligations). Deleted data is purged from backups within 30 days. Usage logs are retained for 12 months.
7. Your Rights
Under DPA 2017, you have the right to access, rectify, erase, restrict, and port your data. You may also object to processing and withdraw consent at any time. To exercise your rights, contact privacy@priva.mu. We will respond within 30 days.
8. Cookies
We use essential, analytics, and preference cookies. You can manage your cookie preferences at any time. See our Cookie Policy for details.
9. Contact Our DPO
Our Data Protection Officer can be contacted at: privacy@priva.mu 路 Khay Digital Ltd 路 Royal Road, L'Avenir, Saint Pierre, 80402 Mauritius.
10. Governing Law
This Privacy Policy is governed by the laws of the Republic of Mauritius, in particular the Data Protection Act 2017.