Privacy Policy

Introduction

Babies Corner Ltd ("Babies Corner", "we", "us", or "our") operates the website at babiescorner.mu and our physical showroom at Dechartres Street, Port Louis, Mauritius. We are committed to protecting the personal information of the parents, caregivers, and families who shop with us.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have under the Data Protection Act 2017 of Mauritius. By using our website or placing an order, you agree to the practices described in this document.

Placeholder: This section should be reviewed by your legal counsel to confirm compliance with the Data Protection Act 2017 and any applicable sector guidance issued by the Data Protection Office of Mauritius.

Data we collect

We collect information from you in the following ways:

Information you provide directly:

• Name, email address, and phone number when you place an order or contact us
• Delivery address and district for islandwide orders
• Personalisation details (names, dates, messages) for made-to-order items
• Payment information: processed securely by our payment provider (see below); we do not store card numbers or CVV codes on our servers
• Any WhatsApp messages or emails you send us

Information collected automatically:

• IP address, browser type, and device information
• Pages visited and time spent on each page
• Referring website or search term that brought you to our site
• Cookie identifiers (see the Cookies section below)

We do not knowingly collect data from children under the age of 18.

How we use your data

We use your personal information for the following purposes:

• Fulfilling your order: processing payment, preparing your items, arranging delivery or notifying you when your pickup order is ready
• Customer communication: sending order confirmations, delivery updates, and responding to your enquiries via email or WhatsApp
• Personalised items: using the name, date, or message you provide solely to produce the item you ordered
• Improving our service: analysing website usage to understand what works and what doesn't, and to fix technical issues
• Legal obligations: retaining records as required by Mauritian tax and commercial law
• Marketing: only with your explicit consent; you can withdraw this at any time by emailing us or clicking "unsubscribe" in any marketing email

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

Cookies

Our website uses cookies (small text files stored on your device) to make the site work properly and to help us understand how visitors use it.

• Essential cookies: required for the website to function (shopping cart, session management). You cannot opt out of these.
• Analytics cookies: used to count visits and understand which pages are most useful. We use anonymised data only. You can decline these via our cookie banner.
• Marketing cookies: used to show you relevant content on other websites. We only set these with your explicit consent.

You can manage or delete cookies at any time through your browser settings. Disabling essential cookies may prevent you from completing a purchase.

Payment processing

All card payments are processed by MIPS (Mauritius Informatics Private Ltd), a PCI-DSS certified payment gateway operated in Mauritius. MCB Juice payments are processed by Mauritius Commercial Bank Ltd. We do not receive or store your full card details.

When you choose cash on delivery, no payment data is transmitted online. When you choose bank transfer, your bank's privacy policy governs how your transaction data is handled.

Placeholder: Confirm the correct legal names of payment processors and verify current PCI-DSS certification before publication.

Data sharing

We do not sell your personal data. We share it only as necessary to operate our business:

• Delivery partners: your name, phone number, and delivery address are shared with our logistics provider solely for the purpose of delivering your order
• Payment processors: as described above
• Technology providers: our website hosting, email, and analytics providers, each bound by data processing agreements
• Legal requirements: we may disclose data to the Mauritius Revenue Authority or law enforcement when required by law

We do not transfer personal data outside of Mauritius except where necessary to operate our website (e.g. cloud hosting). In such cases we apply appropriate safeguards.

Data retention

We keep your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by Mauritian law:

• Order records (name, address, items purchased, payment reference): 7 years, as required by the Mauritius Income Tax Act
• Personalisation details for made-to-order items: deleted within 90 days of delivery, unless you ask us to keep a record for a repeat order
• Marketing consent records: until you withdraw consent plus 1 year
• Website analytics data: anonymised and aggregated after 26 months

When data is no longer needed, we securely delete or anonymise it.

Your rights

Under the Data Protection Act 2017, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (where no legal obligation requires us to keep it)
• Object to us using your data for marketing
• Lodge a complaint with the Data Protection Office of Mauritius

To exercise any of these rights, email us at babiescornermru@gmail.com. We will respond within 21 days.

Changes to this policy

We may update this policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of our website after a change is posted constitutes acceptance of the updated policy.

Placeholder: Consider whether a more active notification mechanism (e.g. a banner or email notification) is appropriate given the nature of any changes.