Politik konfidansialite

1.1This policy explains how visrah collects, uses, discloses and protects personal information when you visit https://visrah.mu (the "website"), contact us through it, or engage our software development, cloud and consulting services.

1.2The English version of this policy is the controlling legal version. Any translation is provided for convenience only.

1.3By using the website or engaging our services you acknowledge the practices described in this policy. If you do not agree with them, please do not use the website or our services.

2.1visrah ltd ("visrah", "we", "us") is a private company incorporated in Mauritius, providing software development, cloud infrastructure and technology consulting. For the purposes of applicable data protection law, visrah is the data controller for the personal information described in this policy.

2.2You can reach us for any privacy matter at info@visrah.mu.

2.3Our registered office is Camp Falbert Street, Saint Hubert, Mauritius, company registration number C23203108.

2.4Where we process personal data on behalf of a client using visrah cloud, we act as a processor rather than a controller for that client's end-user data — see clause 10 of our terms of service.

3.1Enquiries. When you submit our contact form we collect your name, email address, project type and the content of your message ("enquiry data").

3.2Website analytics. We measure page views, the referring page, browser and device type, language preference and country-level approximate location derived from your IP address. We also record interaction events on clearly labelled buttons and links, such as clicks on contact links. These measurements run entirely without cookies and are described further in clause 6.

3.3Client and account information. Where you engage us or subscribe to visrah cloud, we collect account details, billing and payment records, correspondence and the technical information required to operate and secure the service.

3.4Technical logs. Our servers keep brief request logs, including IP address and timestamp, for security, reliability and abuse prevention.

4.1We store a single preference cookie ("visrah-theme") and an equivalent browser storage entry so the website can remember whether you chose light, dark or system appearance. They contain no personal identifiers and are never shared.

4.2Our analytics run in a forced cookieless mode: the analytics service does not set cookies and does not build identifiers that persist beyond a single day or across websites.

4.3We do not use advertising cookies, social media trackers or cross-site tracking technologies of any kind.

5.1Performance of a contract, or steps preparatory to it, to respond to enquiries and to deliver contracted services and subscriptions.

5.2Our legitimate interests, in operating a secure and reliable website, protecting our services against misuse and understanding in aggregate how the website is used so we can improve it. Because our analytics are cookieless and non-profiling, these interests are not overridden by your interests or rights.

5.3Compliance with legal obligations, including accounting, tax, corporate and regulatory record-keeping requirements of Mauritius.

5.4Your consent, where we ask for it, for example before sending you updates or marketing communications. You may withdraw consent at any time.

5.5We do not use personal information for automated decision-making or profiling that produces legal effects concerning you.

6.1We measure website usage with PostHog Cloud, on infrastructure located in the European Union.

6.2Autocapture is disabled: only page views and the specifically defined interaction events described in clause 3.2 are recorded.

6.3Analytics data is used solely to understand and improve our own website. It is never sold, never used for advertising and never combined with data from other sites.

7.1Service providers (processors). We share personal information with companies that process it on our instructions under contract, currently: Brevo, which transmits contact form submissions to us as email; PostHog, which hosts our cookieless analytics; and Cloudflare, which hosts our website, request infrastructure and security logs.

7.2Professional advisers. Accountants, auditors and lawyers bound by duties of confidentiality, where reasonably required.

7.3Legal requirements. Authorities, regulators or courts, where disclosure is required by law or necessary to establish, exercise or defend legal claims.

7.4Business transfers. If we ever reorganise or sell part of our business, personal information may be transferred as part of that transaction; we would ensure it remains protected under this policy.

7.5We never sell personal information or share it for third-party marketing.

8.1Our primary operations are in Mauritius. The service providers listed in clause 7 may process personal information outside Mauritius, including in the European Union and the United States.

8.2Where personal information is transferred outside Mauritius, we take steps required by the Data Protection Act 2017 to ensure it receives comparable protection, including using providers located in, or certified under frameworks offering, GDPR-equivalent safeguards, and imposing contractual confidentiality and security obligations on them.

9.1Enquiry data is retained for up to 24 months after our last contact with you, unless you ask us to delete it sooner or it becomes client data under an engagement.

9.2Client, account and billing records are retained for the duration of the engagement or subscription and thereafter for the periods required by Mauritian accounting, tax and commercial law.

9.3Cookieless analytics events are retained according to the analytics provider's standard retention period and are deleted or irreversibly aggregated afterwards.

9.4Technical logs are kept only for a short security window, typically days to weeks.

9.5When information is no longer needed it is securely deleted or anonymised.

10.1We apply appropriate technical and organisational measures proportionate to the risk, including transport encryption (HTTPS/TLS), access controls following least privilege, managed secrets, dependency updates and monitoring of our systems.

10.2No method of transmission or storage is perfectly secure. If a personal data breach affecting you occurs, we will notify you and, where required, the Data Protection Commissioner in accordance with applicable law.

11.1Subject to conditions and exceptions in the Data Protection Act 2017 (and, where visitors are protected by the EU or UK GDPR, under those regimes on equivalent principles), you may ask us to: provide access to the personal information we hold about you; correct inaccurate information; delete information that we no longer need; restrict or object to particular processing; and export information you provided to us in a portable format.

11.2You may object at any time to direct marketing relating to you, and we will stop it. Where we relied on your consent, you may withdraw it at any time.

11.3To exercise any right, email info@visrah.mu. We will respond within a reasonable time, normally within one month, and may ask for information to verify your identity where necessary.

11.4You also have the right to complain to the Data Protection Commissioner of Mauritius if you believe our processing infringes the law.

12.1The website and our services are directed to businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us and we will delete it.

13.1We may update this policy to reflect changes in our practices, services or law. Material changes will be highlighted on this page, and the date above shows when the policy was last updated.

14.1For any question or request about this policy or our processing of personal information, email info@visrah.mu or write to us at our registered office (clause 2.3).