Last updated: 1 January 2026

Privacy Policy

1. Who We Are

Khay Digital Ltd ("we", "our", "us") is a company registered in Mauritius. We operate Priva Data Compliance ("Priva"), a data compliance platform available at priva.mu. For data protection purposes, Khay Digital Ltd acts as the data controller for personal data collected through our website and platform.

2. What Data We Collect

We collect information you provide directly (name, email, company name, billing details), usage data (pages visited, features used, log data), and technical data (IP address, browser type, device identifiers). We do not collect sensitive personal data unless you explicitly provide it.

3. How We Use Your Data

We use your data to: provide and improve the Priva platform; process your subscription and payments; send service communications and security alerts; comply with our legal obligations; and respond to support requests.

4. Legal Basis for Processing

We process your data based on: performance of our contract with you (platform access, billing); compliance with legal obligations (DPA 2017, tax law); legitimate interests (security, fraud prevention, product improvement); and your consent (marketing communications, cookies).

5. Data Sharing

We do not sell your personal data. We share data only with: sub-processors necessary to operate the platform (see our DPA Agreement); professional service providers (legal, audit, accounting) under confidentiality obligations; and authorities where required by law. All sub-processors are bound by data processing agreements.

6. Retention

We retain account data for the duration of your subscription and for 7 years after termination (to comply with tax and accounting obligations). Deleted data is purged from backups within 30 days. Usage logs are retained for 12 months.

7. Your Rights

Under DPA 2017, you have the right to access, rectify, erase, restrict, and port your data. You may also object to processing and withdraw consent at any time. To exercise your rights, contact privacy@priva.mu. We will respond within 30 days.

8. Cookies

We use essential, analytics, and preference cookies. You can manage your cookie preferences at any time. See our Cookie Policy for details.

9. Contact Our DPO

Our Data Protection Officer can be contacted at: privacy@priva.mu 路 Khay Digital Ltd 路 Royal Road, L'Avenir, Saint Pierre, 80402 Mauritius.

10. Governing Law

This Privacy Policy is governed by the laws of the Republic of Mauritius, in particular the Data Protection Act 2017.