Privacy Policy

1. Who we are

BlackSwan Law LLP (“BlackSwan Law”, “the firm”, “we”, “our”) is a law firm duly registered in Mauritius under Registration No. MLF 9/2025, with its principal place of business at Capital Manor, Cnr Sir Pierre Simonet & Sir Victor de la Faye, Floreal 74110, Mauritius. For the purposes of the Data Protection Act 2017 of Mauritius (the “DPA”), BlackSwan Law is the data controller of personal data collected through this website and during the course of engagements.

2. Scope of this policy

This Privacy Policy explains how we handle personal data collected through blackswanlawllp.com, including data submitted via the contact form, data received by email, and data collected automatically by hosting infrastructure. It does not cover data we process under specific client-engagement letters, which are governed by those engagement terms and applicable professional rules.

3. Personal data we collect

We collect only the personal data necessary to respond to enquiries and to administer the website securely. Specifically:

• Information you provide. When you complete the contact form or otherwise contact us, we collect your name, email address, telephone number (if you choose to provide it), the matter category you select, and the content of your message. If you correspond with us by email, we receive the same information you choose to share.
• Information collected automatically. When you visit the website, our hosting and security infrastructure may log technical data including your IP address, device and browser type, referring page, and the date and time of your visit. This information is used to operate the site securely and is retained for limited periods (see Section 8).
• Cookies and similar technologies. The website uses a small number of strictly necessary cookies and may load fonts and third-party scripts (see our Cookie Notice for details).

4. How we use personal data

We use personal data for the following purposes:

• to respond to enquiries submitted through the website or by email;
• to evaluate whether the firm can act on a prospective matter and, where appropriate, to open an engagement;
• to comply with legal, regulatory, and professional obligations applicable to the firm, including those of the Mauritius Bar Council and the Financial Services Commission of Mauritius where relevant;
• to protect the security, integrity, and availability of the website and our systems; and
• to maintain internal records, including conflicts-of-interest checks.

We do not use personal data for marketing or profiling, and we do not sell personal data.

5. Lawful bases for processing

Under the DPA, we rely on the following lawful bases:

• Consent — for the optional collection of information you choose to provide through the contact form;
• Performance of a contract or steps preparatory to one — to evaluate and conduct a possible engagement;
• Legal obligation — to comply with professional and regulatory requirements applicable to the firm;
• Legitimate interests — to operate the website securely and to maintain conflicts records, where such interests are not overridden by your rights and freedoms.

6. Disclosure to third parties

We share personal data only with the following categories of recipients, and only to the extent necessary:

• Service providers. The website uses third-party infrastructure providers, including a hosting provider, an email-delivery service used to transmit contact-form submissions to the firm, and a font-delivery service. Each provider acts as a processor on our behalf and is bound by appropriate contractual safeguards.
• Professional advisers. Where necessary, we may disclose information to the firm’s professional advisers (such as auditors or insurers) under duties of confidence.
• Regulators, courts, and authorities. We may disclose personal data where required by law or by an order of a competent court, or to respond to a lawful request from a regulator.

We do not sell, rent, or otherwise commercialise personal data.

7. International transfers

Some of our service providers are located outside Mauritius. Where personal data is transferred outside Mauritius, we ensure that the transfer is made in accordance with the DPA — including, where applicable, by relying on adequate jurisdictions, standard contractual clauses, or other lawful transfer mechanisms.

8. Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected. As a general guide:

• contact-form enquiries that do not lead to an engagement: typically up to 24 months from receipt;
• records relating to opened engagements: in accordance with applicable professional and regulatory requirements, ordinarily not less than seven years from the conclusion of the matter;
• website technical logs: short rolling periods, typically not more than 90 days.

Specific retention periods may be longer where required by law, by a court or regulator, or by the firm’s legitimate interest in defending or asserting legal claims.

9. Your rights

Subject to the DPA and other applicable law, you have the right to:

• request access to the personal data we hold about you;
• request that inaccurate or incomplete personal data be rectified;
• request the erasure of personal data, where applicable;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• where applicable, request that personal data be transmitted to you or another controller; and
• withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please write to info@blackswanlawllp.com. We will respond within the timeframes prescribed by the DPA.

You also have the right to lodge a complaint with the Data Protection Office of Mauritius at any time.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, secure transmission, and the use of reputable infrastructure providers. No method of transmission over the internet or storage system is entirely secure, however, and we cannot guarantee absolute security.

11. Children

The website is not directed at children and we do not knowingly collect personal data from individuals under the age of 18.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The “Last updated” date at the top of this page indicates when the most recent revision was made.

13. Contact

For any question relating to this Privacy Policy or your personal data, please contact:

BlackSwan Law LLP
Capital Manor, Cnr Sir Pierre Simonet & Sir Victor de la Faye
Floreal 74110, Mauritius
info@blackswanlawllp.com