Privacy Policy

1. Introduction

This Privacy Policy explains how RAW Global Consulting Limited and its global affiliates ("we", "us", "our") collect, use, disclose and protect your personal information when you visit our website or interact with our services.

We are committed to protecting your privacy and handling your personal information in a manner that complies with:

• The General Data Protection Regulation (GDPR) (EU) 2016/679;
• The Protection of Personal Information Act, 2013 (POPIA) (South Africa); and
• The Data Protection Act 2017 (DPA) (Mauritius).

Please read this policy carefully to understand our practices regarding your personal data.

2. Who We Are

Data Controller: RAW Global Consulting Limited

For the purposes of GDPR, we are the data controller in respect of personal data processed through our website. For POPIA purposes, we are a "responsible party". For Mauritius DPA purposes, we are a "data controller".

Our contact details are set out in section 16 below.

3. Personal Information We Collect

We may collect the following categories of personal information:

3.1 Information You Provide to Us

• Contact details (name, email address, telephone number, postal address);
• Professional information (job title, company name, practice area);
• Communication preferences;
• Correspondence sent to us (including emails and messages);
• Information provided when you complete forms on our website (including contact forms, newsletter sign-ups, and event registrations).

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical information (IP address, browser type and version, operating system);
• Usage data (pages visited, time spent on pages, clickstream data);
• Device information (device type, unique device identifiers);
• Referral sources (how you arrived at our website).

3.3 Special Categories of Data

We do not ordinarily collect sensitive personal information (such as health data, biometric data, or information relating to criminal convictions). Should it become necessary to process such data, we will obtain your explicit consent where required by applicable law.

4. Legal Bases for Processing

We process your personal information only when we have a lawful basis to do so:

For POPIA purposes, we rely on the lawful processing grounds set out in section 11 of POPIA.

5. How We Use Your Information

We use your personal information for the following purposes:

• To provide consulting services and respond to your enquiries;
• To administer and improve our website;
• To communicate with you about our services, events and updates (where you have consented or where we have a legitimate interest);
• To comply with our legal and regulatory obligations;
• To establish, exercise or defend legal claims;
• To monitor and analyse website usage and trends (using analytics tools);
• To detect and prevent fraud or other unlawful activities.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences and understand how you interact with our site.

6.2 Types of Cookies We Use

6.3 Cookie Consent

For non-essential cookies, we obtain your explicit consent before placing them on your device. You can manage your cookie preferences at any time through our cookie banner or by adjusting your browser settings.

Under POPIA, direct marketing via electronic communications requires opt-in consent, which cannot be inferred from silence or pre-ticked boxes.

6.4 Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages (e.g. analytics providers). We do not control these cookies. Please refer to the relevant third-party privacy policies for more information.

7. Data Subject Rights

You have specific rights regarding your personal information under applicable laws, including the right of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time where processing is based on consent.

7.1 Exercising Your Rights

To exercise any of these rights, please contact us using the button below. We will respond within the statutory timeframe (generally 30 days, or one month under GDPR). We may need to verify your identity before processing your request.

Email Us

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction or damage, including:

• Encryption of data in transit (HTTPS / SSL/TLS);
• Firewalls and intrusion detection systems;
• Access controls and authentication protocols;
• Regular security audits and vulnerability assessments;
• Staff training on data protection.

Under GDPR Article 32 and POPIA section 19, we are required to ensure a level of security appropriate to the risk.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements.

After the retention period expires, your data will be securely deleted or anonymised.

10. International Data Transfers

As a global practice with clients in Mauritius and abroad, we may transfer your personal information between jurisdictions.

10.1 Cross-Border Transfer Safeguards

• Within Mauritius: Data remains subject to the DPA.
• To the EU/EEA: Data receives the protection of GDPR.
• To other countries: We only transfer data where:
  • The country has adequate data protection laws (as recognised by the European Commission or the Mauritian Data Protection Commissioner);
  • We have implemented appropriate safeguards (e.g. Standard Contractual Clauses, Binding Corporate Rules);
  • You have provided explicit consent; or
  • The transfer is necessary for the performance of a contract.

Under the Mauritius DPA, cross-border transfers require either adequacy decisions, appropriate safeguards, or explicit consent.

11. Third-Party Disclosures

We may share your personal information with:

• Service providers: IT hosting, email services, analytics providers;
• Professional advisors: Legal counsel, accountants, insurers;
• Regulatory authorities: Where required by law;
• Courts and tribunals: In connection with legal proceedings.

We require all third parties to respect your privacy and to process your data only on our documented instructions. We have Data Processing Agreements in place with all material third-party processors, as required by GDPR Article 28 and POPIA section 21.

12. Direct Marketing

We may use your contact details to send you updates, event invitations and marketing communications where:

• You have given your explicit consent (as required by POPIA for electronic communications); or
• We have a legitimate interest (under GDPR) and you have not objected.

You may opt out at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.

Under POPIA, direct marketing consent must be freely given, specific, informed and unambiguous (no pre-ticked boxes).

13. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us. Under POPIA, a competent person (parent or guardian) must consent to the processing of a child's personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of material changes by posting the updated policy on our website with a revised "Effective Date". We encourage you to review this policy periodically.

15. Supervisory Authorities

You have the right to lodge a complaint with the relevant data protection authority:

We encourage you to contact us first so that we may attempt to resolve your concerns.

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

Email Us