Privacy Notice

Introduction

Celerity Prime Ltd (“Celerity Prime”, the “Firm”, “we”, “us” or “our”) is a Mauritian law firm comprising several legal practitioners, as further described on our website, and providing local and cross-border legal services, in accordance with the laws of the Republic of Mauritius.

Celerity Prime is committed to protecting and respecting personal data. This Privacy Notice explains how we collect, use, disclose, transfer and otherwise process personal data through our website, in the course of providing legal and related services, and in connection with the operation of our business.

As a national and international-facing law firm, we recognise the importance of handling personal data in a manner that is lawful, fair, secure and proportionate. We are committed to processing personal data in accordance with applicable data protection laws, including the Mauritian Data Protection Act 2017 and, where applicable, the European Union General Data Protection Regulation (“EU GDPR”).

Application of the present Privacy Notice

This Privacy Notice applies to:

visitors to our website;
prospective, current and former clients of Celerity Prime;
representatives, employees and beneficial owners of our clients;
counterparties and their advisers;
service providers and professional contacts;
applicants for employment or internship positions; and
any individual whose personal data is provided to us in connection with a legal matter, transaction or dispute.

Your consent

By accessing or using our website, communicating with Celerity Prime, requesting or receiving legal or related professional services from us, or otherwise providing us with your personal data, you acknowledge that your personal data may be collected and processed in accordance with this Privacy Notice.

This Privacy Notice may be amended or updated from time to time to reflect changes in applicable laws, regulatory requirements, professional obligations, operational practices, or our services and activities. Any updated version of this Privacy Notice will be made available on our website and shall become effective upon publication, unless otherwise stated. We encourage you to review this Privacy Notice periodically in order to remain informed as to how your personal data is processed by us.

What personal data do we collect?

Personal data may be collected by us in various contexts connected to our activities and operations. This may include information provided when you browse or interact with our website, communicate with us, seek information regarding our services, engage us in relation to a legal matter, attend meetings or events organised by Celerity Prime, or otherwise interact with us in a professional or business context. We may also receive personal data from clients, counterparties, advisers, professional intermediaries and other third parties in connection with legal matters or professional engagements.

The categories of personal data processed by us depend on the nature of the relationship or interaction concerned, as follows:

Website visitors

We process personal data relating to website visitors primarily for purposes connected to the administration, security, operation and improvement of our website and systems. The data we may collect includes:

IP address and device identifiers;

browser type and version;

operating system and device information;

referring URLs and browsing activity;

pages visited and time spent on the website;

access dates and times;

approximate location data derived from IP information;

cookies and analytics data; and

information voluntarily submitted through website forms or enquiries.

Prospective clients

Where you contact us in connection with potential legal services or professional engagements, we may process your:

contact and identification information;

professional and organisational details;

information relating to the relevant enquiry, dispute, transaction or matter;

information necessary for preliminary conflict checks, risk assessments and compliance procedures; and

correspondence and communications exchanged with us.

This information is collected for purposes connected to assessing potential instructions, communicating with prospective clients and complying with applicable professional and regulatory obligations.

Clients and individuals connected to client matters

In the course of providing legal and related services, we may process personal data relating to our clients and individuals connected to client matters, for purposes of the provision of legal services, compliance obligations and the administration of legal matters. The data we may collect includes:

identification and contact information;

corporate, commercial or financial information;

due diligence and know-your-client documentation;

billing and payment information;

instructions, communications and legal documentation;

information relating to disputes, litigation, investigations, transactions or regulatory matters;

information relating to directors, officers, shareholders, beneficial owners, employees, advisers, counterparties or witnesses; and

special categories of personal data where relevant to the legal matter concerned.

The personal data processed in this context may be obtained directly from the client or from third parties involved in the relevant matter.

Counterparties and professional contracts

We may process personal data relating to counterparties, opposing counsel, professional advisers, consultants, service providers and other business or professional contacts, including:

names and contact details;

professional titles and affiliations;

correspondence and communications; and

information relating to transactions, disputes, legal proceedings or professional engagements.

Recruitment applicants

Where individuals apply for employment, internship or consultancy opportunities with Celerity Prime, we may process the following, for the purposes of processing applications, assessing candidates and employment-related administration:

CVs, resumes and application materials;

academic and professional qualifications;

employment history and references;

interview notes and recruitment assessments;

right-to-work and identification documentation; and

background verification information where permitted by law.

Information obtained from third parties and public sources

Depending on the circumstances, we may obtain personal data from:

clients and their representatives;

counterparties and professional advisers;

courts, tribunals, arbitral institutions and regulatory authorities;

publicly available registers and databases;

sanctions screening, compliance and due diligence providers;

recruitment agencies and referees; and

publicly accessible sources, including professional networking platforms.

Special Categories of personal data

In the context of legal services, disputes, investigations, employment matters or regulatory compliance, we may process special categories of personal data or personal data relating to criminal convictions or offences where such processing is necessary:

for the establishment, exercise or defence of legal claims;
for the provision of legal advice or legal services;
to comply with legal or regulatory obligations; and
with your consent where consent is required under applicable law.

How we use your personal data

We may process personal data for the following purposes:

providing legal and related professional services;
assessing whether to accept instructions and conducting conflict checks;
complying with know-your-client, anti-money laundering, sanctions screening and regulatory obligations;
communicating with clients, counterparties and professional contacts;
administering transactions, disputes, litigation, arbitrations and legal proceedings;
managing and administering our business operations;
maintaining records relating to legal matters and professional engagements;
improving, monitoring and securing our website, systems and infrastructure;
sending legal updates, publications, invitations or marketing communications where permitted by law;
recruitment and human resources management; and
establishing, exercising or defending legal rights.

Legal bases for processing

Where applicable law requires a legal basis for processing, we may rely on one or more of the following:

the performance of a contract or engagement, or steps taken prior to entering into such contract or engagement;
compliance with legal and regulatory obligations to which Celerity Prime is subject;
the legitimate interests pursued by the Firm, including the management of legal practice operations, client relationships, risk management, cybersecurity and business development;
the establishment, exercise or defence of legal claims; and
your consent, where consent is required.

Disclosure of personal data

In the course of operating our practice and providing legal services, we may disclose personal data to:

partners, lawyers, consultants and employees within Celerity Prime;
co-counsel, correspondent firms and foreign legal advisers;
courts, tribunals, arbitral institutions, regulatory authorities and governmental bodies;
counterparties, opposing counsel and transaction participants where necessary in connection with a matter;
banks, insurers, auditors and professional advisers;
external service providers assisting with IT, cloud hosting, cybersecurity, document management, administration or other operational support services;
due diligence, sanctions screening and compliance providers; and
any person where disclosure is required, permitted or reasonably necessary under applicable law.

Personal data may also be disclosed in connection with a merger, restructuring, transfer of business or similar corporate transaction affecting the Firm.

We do not sell personal data.

International Transfers

Given the international nature of legal practice, personal data may be transferred to and processed in jurisdictions outside Mauritius or outside the jurisdiction in which you are located.

Such transfers may occur where:

a legal matter involves foreign jurisdictions or counterparties;
we engage foreign counsel or service providers; and
our systems, infrastructure or cloud service providers operate internationally.

Where personal data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.

Legal professional privilege and confidentiality

As a law firm, we are subject to duties of confidentiality and legal professional privilege.

Personal data and information provided to the Firm in connection with legal advice, legal proceedings or client matters may therefore be protected by legal professional privilege, professional secrecy obligations and applicable ethical rules governing the legal profession.

Nothing in this Privacy Notice shall be construed as limiting any obligation of confidentiality or privilege owed by the Firm.

Data retention

We retain personal data for as long as is reasonably necessary for the purposes for which it was collected, including for the purposes of:

providing legal services;
complying with legal, compliance, regulatory, professional and accounting obligations;
satisfying applicable limitation periods;
preserving records in connection with legal proceedings, investigations or disputes; and
enforcing or defending legal rights.

The retention period applicable to a given matter or category of personal data will depend on the nature of the engagement, the legal and regulatory framework applicable thereto, and the operational requirements of the Firm.

Security Measures

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, misuse, disclosure, alteration, destruction or loss.

Such measures may include access controls, encryption technologies, cybersecurity protocols, secure document management systems and internal confidentiality obligations.

Notwithstanding the foregoing, no electronic transmission or storage system can be guaranteed to be entirely secure.

Your Rights

Subject to applicable law, individuals may have the right to:

request access to personal data held by Celerity Prime;
request correction of inaccurate or incomplete personal data;
request erasure of personal data in certain circumstances;
object to or request restriction of certain processing activities;
withdraw consent where processing is based on consent;
request portability of certain personal data; and
lodge a complaint with the relevant supervisory authority.

The exercise of certain rights may be limited where personal data is subject to legal professional privilege, confidentiality obligations, legal restrictions or other exemptions available under applicable law.

Requests relating to personal data may be addressed using the contact details below.

Third-party websites

Our website may contain links to external websites or platforms operated by third parties.

We are not responsible for the privacy practices, security or content of such third-party websites and encourage users to review the privacy notices applicable thereto.

Who we are and contacting us

Celerity Prime is a Mauritian law firm comprising several legal practitioners, as further described on our website, and providing local and cross-border legal and related professional services in accordance with the laws of the Republic of Mauritius.

For the purposes of applicable data protection legislation, Celerity Prime acts as a data controller in respect of the personal data processed by the Firm.

Should you have any questions regarding this Privacy Notice, the Firm’s processing of Personal Data, or should you wish to exercise any rights available to you under applicable data protection laws, you may contact us using the details below:

By post on the following:

Celerity Prime Ltd

38 St Georges Street,

Port Louis,

Mauritius

By email to info@celerity.mu

Through our website: celerity.mu

Glossary

Commissioner refers to officers appointed as officers by the Government of Mauritius under the Data Protection Act 2017.

Data controller means a person who or public body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data and has decision making power with respect to the Processing.

Data Protection Act 2017 means, in Mauritius, the law which governs the protection of Personal Data is the Data Protection Act (DPA) 2017.

EU GDPR refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, commonly referred to as the General Data Protection Regulation.

Personal data refers to Any information relating to an identified or identifiable natural person, being a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural, or social identity.

Processing refers to an operation or set of operations performed on Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Special categories of data in relation to a Data Subject means Personal Data pertaining to:

his racial or ethnic origin;
his political opinion or adherence;
his religious or philosophical beliefs;
his membership of a trade union;
his physical or mental health or condition;
his sexual orientation, practices or preferences;
his genetic data or biometric data uniquely identifying him;
the commission or alleged commission of an offence by him;
any proceedings for an offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any Court in the proceedings; or
such other Personal Data as the Commissioner may determine to be sensitive Personal Data.