Privacy Policy

1. Introduction

Codeblix Ltd ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our Electronic Billing System (EBS) platform.

2. Data Controller

3. Data We Collect

Account Information

Business name, Business Registration Number (BRN), VAT number, contact details, and billing address.

Invoice Data

Customer information, invoice amounts, dates, items, and transaction history required by the Mauritius Revenue Authority (MRA).

Technical Data

IP addresses, browser type, device information, and usage logs necessary for security and operational monitoring.

4. Legal Basis for Processing

We process your data under the Data Protection Act 2017 (Mauritius) based on:

• Contractual necessity: For providing our core invoicing services to you.
• Legal obligations: To comply with MRA EBS requirements and tax laws.
• Legitimate interests: To maintain platform security and structural improvements.

5. How We Use Your Data

• Generate and fiscalize invoices directly with the MRA.
• Maintain mandated audit trails as required by MRA regulations.
• Provide customer and technical support.
• Send service and system notifications.
• Comply with strict legal and accounting obligations.

6. Data Sharing

Your data is kept confidential and is only shared with:

• Mauritius Revenue Authority: Mandatory data transmissions as required by EBS regulations.
• Payment Processors: Necessary data points for billing purposes.
• Accounting Partners: For approved support services, where applicable.

7. Data Retention

• Invoice data: Retained for 7 years (tax law requirement).
• Account data: Retained for 2 years after account closure.
• Technical logs: Purged on a rolling 12-month basis.

8. Your Rights

Under the Data Protection Act 2017, you have the right to request access to your personal data, request rectification of inaccurate data, request erasure where legally permissible, object to processing, and request data portability in a machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer.

9. Data Security

We implement strict security measures to prevent unauthorized access, disclosure, alteration, or destruction of your data. These include SSL/TLS encryption for all data in transit, secure cloud hosting, access controls, and regular security audits.