NotaryPrivacy notice
Version 1.0 · Last updated 21 July 2026 · Items marked operator to complete are completed by the operator before public launch.
Who we are
The data controller and processor is Atlentra Ltd, a company incorporated in Mauritius (Business Registration Number C23196770), registered office 41 Etienne Pellereau Street, Port-Louis, Mauritius, which operates notary.mu under a technology and intellectual-property licence from AI Telemetrics Ltd (United Kingdom), the owner of the platform technology. Atlentra Ltd is registered as a controller under the Mauritius Data Protection Act 2017 (registration reference: operator to complete — DPA registration, to be advised). AI Telemetrics Ltd acts as a processor / sub-processor only to the extent it processes personal data on Atlentra Ltd’s behalf (for example, hosting and technical support), under a written data-processing agreement. Contact for data-protection matters, including the Data Protection Officer: operator to complete (e.g. [email protected]).
What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account data (name, email, mobile, password hash) | Operating your account; security | Contract; legitimate interests (security) |
| Identity-verification data | Verifying who you are before sensitive features are enabled | Legal obligation; contract |
| Dossier contents (documents you upload, checklist items, messages) | Preparing your notarial matter for the appointed notary | Contract; the notary’s legal obligations |
| Verification/screening queries and results | Sanctions, PEP and due-diligence checks requested under a declared lawful purpose | Legal obligation (AML framework); legitimate interests |
| Civil-status request data | Assisting applications to the Civil Status Division | Contract; consent where required |
| Credit-file contributions and queries | Consent-based credit information exchanged between institutions you authorised | Consent; legal obligation of the institutions |
| Payment and mandate data (masked) | Subscriptions and service fees via the payment gateway | Contract |
| Technical logs and audit trails | Security, accountability, evidence of professional acts | Legitimate interests; legal obligation |
What we deliberately do not do
We never store your government-portal passwords. Where you choose to connect your Registrar-General (MERP) access, you enter your MERP credentials only to open your session: we use them once to sign you in and never store them. Your MERP session is held only in memory while it is live and is never written to our storage; it ends when you log off MERP, when it expires, or when our service restarts, after which you sign in again. We never store MauPass or other portal passwords. Screening ledgers store name hashes, not names. Restricted civil-status events (for example adoption annotations) are never disclosed through platform reports. Search engines are instructed not to index personal areas.
Who is responsible for what
The platform has two sides, so responsibility for personal data is split rather than held in one place. Broadly: the platform answers for the account and the infrastructure, and your chosen professional answers for the professional dossier once they have accepted it. The allocation below reflects Atlentra Ltd’s position as confirmed with Mauritian data-protection counsel; “the platform operator” means Atlentra Ltd.
| Processing activity | Principal responsibility |
|---|---|
| Public website analytics | Platform operator |
| User account creation and management | Platform operator |
| Professional onboarding and verification | Platform operator |
| Subscriptions, seats and billing | Platform operator |
| A preliminary request, before a professional is chosen | Platform operator, for the declared purpose only |
| An accepted professional dossier | The participating professional, as professional controller |
| Technical hosting of an accepted dossier | Platform, as processor for that professional |
| Platform security and audit logs | Platform operator |
| Professional AML/CFT decisions | The participating professional |
| Notarial advice and deed preparation | The participating professional |
| Platform-level fraud prevention | Platform operator |
The practical consequence: for anything in a dossier a notary has accepted, that notary’s étude is the right place to send a request about your data, and the platform will act on their instructions. For your account, your billing or your login, write to the platform. If you are not sure which, ask either and you will be pointed to the right one — you will not be sent in a circle.
Who sees your data
Your appointed notary and their authorised staff; participating professionals only where you are party to their matter; the payment gateway for payments; public authorities where the law requires. Credit-file access is logged and the full access log is visible to you.
Your rights
Under the Data Protection Act 2017 you may request access, rectification, erasure (subject to legal retention duties), restriction and objection, and you may complain to the Data Protection Office, Mauritius. Automated screening results are inputs to human professional review — decisions with legal effect on you are not taken solely by automated means. To exercise rights, contact operator to complete.
International transfers
The platform is operated from Mauritius by Atlentra Ltd. Certain technical and hosting services are provided by AI Telemetrics Ltd in the United Kingdom under the data-processing agreement; where personal data is transferred to the United Kingdom for those purposes, Atlentra Ltd remains the controller and the transfer is made under appropriate safeguards. operator to complete: confirm hosting location(s) and the transfer mechanism with counsel.
Retention and security
Retention periods are published in the retention schedule. Data is protected by encryption in transit, hashed credentials, role-separated access enforced server-side, and audit logging.