Privacy Policy

Last Update: 01.08.2026

Ivy Legal is strongly committed to protecting personal data.

This Privacy Notice explains how and why Ivy Legal collects, uses, stores and protects personal data when you visit this website, request information from us or engage our legal services.

It should be read alongside our Legal Notice.

Collection of information

Ivy Legal collects personal information for a range of business purposes from sources such as our clients, professional contacts, contractors and other individuals. Our policy is to be transparent about how and why we process personal data.

The personal information that we may collect from you includes:

• Your name, including title, the organisation you work for, and your role or position;

• Contact details, such as your e-mail address, telephone number(s) and address;

• Technical information from your visits to our website;

• Identification information you provide to us as part of a client onboarding process;

• Personal information provided to us in the course of, or for the purposes of, providing legal advice or acting for you or a client; and

• Any other personal information that you may provide to us.

How we deal with and use the personal information

Our main purposes for collecting personal information about individuals are:

• Providing legal services;

• Responding to enquiries and requests;

• Maintaining client relationships;

• Operating, providing and improving this website;

• Compiling anonymous statistics, for example website usage statistics;

• Responding to regulatory reporting and ongoing monitoring requirements; and

• Any other purpose relating to our business.

Ivy Legal applies appropriate standards of security when hosting and protecting personal information, whether held electronically or in hard copy and takes reasonable steps to keep it accurate and up to date. Only authorised persons are provided access to personal information, and such individuals have agreed to maintain the confidentiality of that information.

Disclosure of personal information

Ivy Legal does not routinely disclose personal information to other organisations unless:

• required by law or for regulatory purposes;

• the use or disclosure is permitted by this policy;

• we believe it necessary to provide you with a service you have requested or are contracted to;

• it is necessary to protect the rights of a client of Ivy Legal or the interests of Ivy Legal; or

• you give your consent.

Except as set out in this policy, we do not allow third parties to use personal information. We do not sell or trade personal information to third parties for commercial purposes.

Third party providers

We may transfer or disclose personal data we collect to third party contractors, subcontractors, and/or their subsidiaries and affiliates who support us in providing our services and help provide, run and manage our IT systems.

It is our policy to use only third party providers that are bound to maintain appropriate levels of security and confidentiality, to process personal information only as instructed by Ivy Legal, and to pass those same obligations down to their sub-processors.

Third party websites

We may provide links from our website to websites operated by third parties. We are not responsible for the privacy practices or policies of those sites. We encourage you to review each website's own privacy policy, especially if you intend to disclose personal information via that site. A link to another website is not an express or implied endorsement, promotion or warranty of any products or services offered by or accessible through that site.

Transfer of information outside Mauritius

We may transfer personal information outside Mauritius. Any such transfer does not change any of our commitments to safeguard your privacy, and the information remains subject to appropriate contractual and confidentiality safeguards.

Cookies may be used on some areas of our website. A cookie is a small file which allows a website to recognise a previous user and to observe how a user navigates within it. We may use cookies to improve the navigational experience of visitors to our website and to make it easier to use. If you are concerned about cookies, most browsers recognise when a cookie is offered and allow you to decline or delete it through your browser settings; you can usually refuse a cookie and still navigate the website.

Access to information

Upon written request, we will provide confirmation as to whether we process personal data about you and will provide a copy of your personal data and certain other information about how and why we process it.

If you believe that information we hold about you is incorrect or out of date, you may request that your personal data be amended or rectified where it is inaccurate.

If you wish to have your personal information deleted, please let us know and we will take reasonable steps to delete it, unless we need to keep it for legal, regulatory or risk management reasons.

You also have the right to object to the processing of your personal data at any time in writing, unless we have compelling legitimate grounds for the processing or the processing is necessary for the establishment, exercise or defence of a legal claim.

You may also request that we restrict the processing of your personal data where:

• you contest the accuracy of the data, for a period allowing us to verify its accuracy;

• we no longer need the data for the purpose for which it was processed, but you require it for the establishment, exercise or defence of a legal claim;

• the processing is unlawful and you oppose erasure of the data, requesting restriction of its use instead; or

• you have objected to our processing of the data, pending verification of whether our legitimate grounds override yours.

Where processing is restricted, we will, other than for storage, only process the data with your consent, for the establishment, exercise or defence of a legal claim, to protect the rights of another person, or for reasons of public interest, and we will inform you before any restriction is lifted.

Where we process your personal data based on consent, you have the right to withdraw that consent at any time.

You have the right to lodge a complaint with the Mauritius Data Protection Office if you are unhappy with how we have handled your personal data.

If you have any questions about this privacy policy, wish to exercise any of your rights or want to know what personal information we hold about you, please contact us.