This notice is for people who visit www.lutchmenarraidoochambers.com or send an enquiry through it. It also covers people named in an enquiry that someone else sends us. It explains what personal data the website collects, what happens to it, and what your rights are. It is given under the Data Protection Act 2017 of Mauritius (the Act).
1. Who is responsible
Yudish Lutchmenarraidoo, barrister, trading as Lutchmenarraidoo Chambers, Block E, Ground Floor, River Court, St Denis Street, Port-Louis, Mauritius, is the controller for this website and for the enquiries sent through it.
The Chambers is a separate controller from Audacia Ltd. Audacia Ltd (business registration number C20176915), Block E, River Court, St Denis Street, Port-Louis, runs Online Office, the office system the Chambers uses to read and answer its email. For that mail, Audacia Ltd processes personal data on the Chambers' behalf, as its processor. Audacia Ltd also runs, for the Chambers, the tool that counts visits to this website (see section 2). For those page counts too, Audacia Ltd acts on the Chambers' behalf, as its processor, and the Chambers remains the controller.
For anything about your personal data, write to dpo@audacia.mu, or by post to the Chambers at the address above. Requests sent to dpo@audacia.mu about the Chambers are handled for the Chambers.
2. What we collect and where it comes from
When you browse the site. The website does not ask you to sign in and has no user accounts. It sets no cookie of its own and stores nothing in your browser. To deliver each page, your browser sends its IP address and technical details (such as browser type and the page requested) to:
- our hosting provider;
- the content delivery network that sits in front of the site;
- Google, which serves the site's fonts on every page and the map on the Contact page.
Counting visits. To know how many people read which pages, the public pages of this site are counted with a measurement tool that Audacia Ltd runs for the Chambers on its own server. It is self-hosted, so no analytics vendor receives anything. When you open a counted page, your browser sends the page address (and the campaign tags of a link, if it has any, but no other part of a query string), the page title, the address of the site you came from, and your browser, operating system, device type, screen size and language. The server works out your country, region and city from your IP address at that moment. It does not store the IP address.
- No cookie is set, and nothing is written to your browser or device.
- You cannot be recognised from one day to the next. Within a single day, your page views are linked to each other by a code that cannot be traced back to you and that is replaced every day.
- If your browser sends a Do Not Track signal, nothing is counted.
- The contact form, and what you type into it, is not counted.
How this works is explained at audacia.mu/en/how-we-measure.html.
When you send the contact form. The form asks for:
- your name, email address, a subject and your message (required);
- a phone number (optional).
When you send it, the website adds your IP address, the date and time, and a short reference number. It removes any HTML tags from what you typed. The website itself does not store the form in a file or a database. It puts everything into one email and sends it to the Chambers' mailbox. The subject line of that email contains the subject you typed, your name and the reference number.
Sending an enquiry does not by itself make you a client of the Chambers.
If someone else names you. An enquiry can mention other people, such as the other party to a dispute. In that case we get your data from the person who wrote to us, not from you.
Sensitive information. An enquiry to a barrister can include special categories of personal data, such as information about health, or about an offence someone has committed or is said to have committed, or about proceedings for such an offence. We process it only where section 29 of the Act allows, in particular where it is necessary to establish, exercise or defend a legal claim (section 29(1)(d)(i)). Please send only what we need to understand your enquiry. We can ask for more detail later, once we know we can help.
3. What we use it for, and on what basis
- To answer your enquiry, and to decide whether and how we can act for you. This includes checking for conflicts of interest before we take on new work.
- To deliver the website and keep it working, for example by blocking automated spam.
- To count visits to the website, so that the Chambers knows how many people read which pages.
Our legal bases are in section 28 of the Act:
- for your own enquiry about our services: taking steps you asked for before a possible engagement (section 28(1)(b)(i));
- for everything else, including the data of people named in an enquiry, conflict checks and running the website and counting visits to it: our legitimate interests in answering correspondence sent to the Chambers, running the website and knowing how it is used, except where that would be unwarranted given the harm and prejudice to your rights, freedoms or legitimate interests (section 28(1)(b)(vii)).
We do not rely on your consent for any of this. We do not use enquiries for marketing, and we do not add you to a mailing list.
Is it compulsory? No. Sending an enquiry is your choice. If you use the form, we need your name, email address, subject and message to reply. Your phone number is optional. You can also write to us or telephone us instead.
4. Automated processing
- Spam filter. The form has a hidden field that people cannot see. If it is filled in, the website treats the message as sent by a robot and discards it without sending it on.
- Sorting and draft replies. The Chambers' mailbox is read by Online Office. An AI model reads each incoming message, including a form enquiry. It says what kind of message it is, how urgent it is, and whether it seems to belong to an existing client or matter. That decides where the Chambers sees the message and whether the system prepares a draft reply. Online Office is set up so that it cannot send the Chambers' mail itself. A draft stays in the mailbox's Drafts until a person reads it and sends it.
No decision that produces legal effects for you, or significantly affects you, is taken by automated means alone (section 38 of the Act). A person decides whether we reply, what we say, and whether we can act for you.
5. Who receives it
- Our hosting provider, Mauritius.biz, on the StackCP platform, serves the website and sends the form email. StackCDN, a content delivery network, handles every request to the site before it reaches the server.
- Google hosts the Chambers' email (Google Workspace). This is where your enquiry is delivered and kept. Google also serves the site's fonts (Google Fonts) and the map on the Contact page (Google Maps). Your browser contacts Google directly for these, so Google receives your IP address and browser details.
- Audacia Ltd runs Online Office on the Chambers' behalf. Online Office keeps a copy of the messages it reads. Audacia Ltd also runs the tool that counts visits to this website (section 2), on a server it rents from Hostinger.
- AI model providers. Online Office sends the text of an enquiry, including the names in it, to AI providers so they can sort it and draft a reply. Mail sent to the Chambers has gone to Anthropic (Claude models), Google (Gemini models) and xAI (Grok models). Online Office is also configured to use OpenAI for a final check on legal letters. The providers process the text to answer the request in hand.
- Telegram. When Online Office drafts a reply to a message, or holds one back, it sends the barrister a short notice over Telegram. The notice gives the email's sender and subject line. For a form enquiry, the subject line contains your name and the subject you typed.
- Legal research services. If an enquiry asks a legal question, Online Office may send search queries to legal research services. Those queries can include a fact from the enquiry. The services are listed in the Online Office privacy notice.
- Courts, regulators and other authorities, where the law requires it.
We do not sell personal data or share it with advertisers. The website uses no third-party analytics or tracking service: the only counting is the cookieless tool run by Audacia Ltd that section 2 describes.
You can read the Online Office privacy notice for more about how the office system handles mail.
6. Transfers outside Mauritius
Your data is processed outside Mauritius:
- Online Office runs on a server in a Hostinger data centre outside Mauritius.
- The tool that counts visits to this website runs on a Hostinger server in a data centre in Manchester, United Kingdom.
- The AI providers are based in the United States.
- Google, Telegram and the legal research services process data in their own facilities, which may be in several countries.
We have not confirmed where our website hosting provider and StackCDN keep their servers. They may also be outside Mauritius. These countries may not protect personal data to the standard of the Act.
We transfer personal data abroad under section 36 of the Act on these grounds:
- when you ask us about possible legal services, the transfer is necessary for steps taken at your request before an engagement (section 36(1)(c)(i));
- for a client, it is necessary to perform our contract with you (section 36(1)(c)(i));
- where the enquiry or the matter concerns a legal claim, including for other people named in it, it is necessary to establish, exercise or defend that claim (section 36(1)(c)(iv)).
We have not given the Data Protection Commissioner proof of appropriate safeguards for these transfers under section 36(1)(a). If you ask for a copy of your data, we will also tell you about any safeguards taken under section 36 (section 37(2)(i)).
7. How long we keep it
- Enquiries. An enquiry is kept in the Chambers' mailbox, and in the Online Office copy, for as long as we need it:
- If you become a client, it becomes part of your file. We keep it for as long as our professional and legal record-keeping obligations require, or while a claim is still possible.
- If you do not become a client, we keep it only as long as we need it to deal with your enquiry. After that, we may keep a short record for conflict checks.
Online Office does not delete enquiries automatically. We delete them by hand, in the mailbox and in Online Office, when they are no longer needed (section 27 of the Act).
- Online Office backups are made daily and encrypted before they leave its server. Copies on the server are kept for 7 days. Copies in Google Drive have no automatic end date yet.
- The website does not save your enquiry. Our hosting provider's mail system passes the email on to the Chambers' mailbox.
- Page counts. The record of each counted visit is kept for 13 months and then deleted automatically. It holds no IP address, and no cookie or device identifier.
- Technical logs. Our hosting provider, StackCDN, Google and Telegram may keep technical logs under their own terms.
- Enquiries sent through the old website. Until April 2026, the previous version of this website stored contact enquiries (name, phone number, email address, subject, message, IP address, and the date and time) in a database at our hosting provider. It also emailed a copy of each enquiry to a separate Gmail address set up in the old website's code. The old website also used Google Analytics.
8. Your rights
Under the Act you can:
- ask whether we hold personal data about you, and ask for a copy (section 37). Ask in writing. It is free. If a request is manifestly excessive, we may charge a fee or decline it, and we must show why it is manifestly excessive (section 37(7)). We answer in writing within one month. We may take one further month where that is necessary because of the complexity or number of requests (section 37(5)). If we have a reasonable doubt about who you are, we may ask for information to confirm it (section 37(1)(b));
- have inaccurate data corrected and incomplete data completed (section 39(1));
- have data erased, for example when we no longer need it or it was processed unlawfully (section 39(2));
- ask us to restrict processing in the cases the Act lists, for example while you dispute the data's accuracy. The Act allows us to restrict it in those cases (section 39(5));
- object in writing, at any time, to our processing of your personal data, and object to its use for direct marketing (section 40). We then stop, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend a legal claim;
- not be subject to a decision based solely on automated processing that produces legal effects for you or significantly affects you (section 38);
- withdraw your consent where we rely on it. This does not affect anything we did before you withdrew it. We do not rely on consent for enquiries (see section 3 of this notice).
Someone you authorise in writing can make a request for you (section 41(c)).
Some rights have limits. For example, we do not have to erase data we need to comply with a legal obligation or to establish, exercise or defend a legal claim (section 39(4)).
Confidential and privileged material. Enquiries and client files often contain other people's personal data. They can also contain information that is confidential to a client or covered by legal professional privilege. The Act allows an exception to its rules only where the exception is a necessary and proportionate measure in a democratic society, for example to protect judicial proceedings or the rights and freedoms of others (section 44(1)(d) and (e)). The Act has no general exemption for legal professional privilege. Where giving you a copy would reveal another client's confidential or privileged communications, or another person's personal data, we may withhold that part, but only where withholding it is a necessary and proportionate measure of that kind.
If we refuse all or part of a request, we will tell you why in writing within one month. We will also tell you that you can complain to the Data Protection Commissioner (section 37(6)).
To use any of these rights, write to dpo@audacia.mu.
9. Complaints
You can complain to the Data Protection Commissioner at the Data Protection Office: dataprotection.govmu.org.
If the European Union's General Data Protection Regulation applies to you, you also have the rights it gives you. You can also complain to your own supervisory authority.
10. Google services on this website
The website does not ask you to sign in with Google and does not use your Google account.
- Google Fonts. Every page loads its typeface from Google's servers (fonts.googleapis.com and fonts.gstatic.com).
- Google Maps. The Contact page contains a Google map. When it loads, your browser contacts Google directly, and Google can set its own cookies. See section 11.
Google handles this data under its own privacy policy. The Chambers' email is hosted on Google Workspace (see section 5).
11. Cookies
This website sets no cookies of its own. It stores nothing in your browser's local or session storage, and it uses no analytics, advertising or tracking cookies. The tool that counts visits (section 2) sets no cookie and uses no local or session storage.
The Google map on the Contact page is loaded from Google. It loads only when you scroll near it. Google can set or read its own cookies when it loads, for its own purposes and under its own policy. We do not control them. Other pages have no map. You can block third-party cookies in your browser, and the rest of the site will still work.
12. Security
- The website is served over encrypted connections (HTTPS). A request over plain HTTP is redirected to HTTPS. The site sends standard browser security headers.
- The contact form removes line breaks and control characters from anything that goes into the email's headers, so no one can add extra addresses to the email.
- Online Office's security is described in its own notice.
No system is completely secure. Please do not send documents or highly sensitive details through the contact form. We can agree a secure way to exchange them once we have spoken.
13. Changes to this notice
We update this notice when the website, or the way we handle enquiries, changes. We change the date at the top when we do.