Privacy policy
Last updated: September 2026
How we collect, use and protect the personal data of those who contact us and those who become our clients. In short: we collect the minimum necessary, we sell it to nobody and we delete it when it is no longer needed.
01Who processes your data
The data controller is Otto Prospera, with its operating base in Mauritius. For any question about your personal data you can write to privacy@ottoprospera.com.
02What data we collect
We collect only the data you give us and the technical data strictly needed to run the site.
| Data | Where it comes from |
|---|---|
| Full name, email address, country of residence, consultation format chosen, description of your situation | The booking form, completed by you |
| Content you send us by email or during the consultation (documents, company data, information about your assets) | The communications you start |
| IP address, browser type, date and time of the visit | The hosting provider's technical logs, for security and diagnostics |
We do not use profiling cookies, we do not install advertising tools and we do not track your browsing on other sites.
03Why we process it, and on what basis
- To respond to your request and prepare an offer. Legal basis: pre-contractual measures taken at your request.
- To deliver the consultation and handle the matter. Legal basis: performance of the contract.
- To comply with legal obligations, including accounting and customer due diligence requirements. Legal basis: legal obligation.
- To protect the site from abuse and attacks. Legal basis: our legitimate interest in security.
Providing the form data is optional, but without it we cannot reply to you or send you the booking link.
04Who we share it with
We do not sell your data and we do not pass it to third parties for commercial purposes. We disclose it only to those we need in order to deliver the service:
- the site hosting and form handling provider;
- the payment services provider, limited to the transaction data;
- licensed professionals in the jurisdictions involved, only if you decide to proceed with an engagement and only for the data needed for the matter;
- public authorities, where the law requires it.
05Transfers outside the European Union
Our operating base is in Mauritius and some technical providers are established in the United States. Your data may therefore be processed outside the European Economic Area. In those cases we rely on the standard contractual clauses approved by the European Commission or on other adequate safeguards permitted by European law on data transfers.
06How long we keep it
- Enquiries that do not lead to an engagement: 24 months from the last contact.
- Clients: for the duration of the relationship and afterwards for as long as the applicable accounting, tax and anti-money-laundering obligations require.
- Technical site logs: 12 months maximum.
Once those periods expire the data is deleted or irreversibly anonymised.
07Your rights
To the extent European data protection law applies, you may request access to the data concerning you, its rectification or erasure, restriction of processing, data portability and objection to processing based on legitimate interest. Requests go to privacy@ottoprospera.com and receive a reply within one month. Data we are required to keep for accounting, tax and anti-money-laundering obligations is unaffected.
08Security
We apply technical and organisational measures appropriate to protect the data against unauthorised access, loss and disclosure: an encrypted connection across the whole site, access limited to the people who need to handle the matter, and confidentiality undertakings from the professionals we involve.
09Changes
If we update this notice we publish the new version on this page and change the date at the top.