Legal
Privacy policy
On this page
1. Who is responsible for your data
Bon Manière Ltd, business registration number [REGISTRATION NUMBER], of [STREET ADDRESS], Port Mathurin, Rodrigues, Republic of Mauritius, is the data controller for the personal data described here. Contact us at privacy@bonmaniere.io.
We handle personal data in line with the Data Protection Act 2017 of Mauritius.
2. What we collect
- Account details — name, phone number, email address, and for drivers and merchants, the information needed to verify identity and pay you.
- Order and booking details — what you ordered or booked, from whom, when, the delivery address, and the amount.
- Payment information — confirmation of whether a payment succeeded, and a reference. Card numbers are handled by our payment provider, not by us.
- Location data — for deliveries in progress, so customers and merchants can see where an order is.
- Technical data — device type, app version, and basic logs used to keep the service working and secure.
3. Why we use it
To create and run your account; to pass your order or booking to the merchant, property or organiser so it can be fulfilled; to arrange and track delivery; to process payments and pay drivers; to provide support; to detect fraud and misuse; and to meet our legal, accounting and tax obligations.
4. Who we share it with
- The merchant, property or organiser you are dealing with — only what they need to fulfil your order or booking.
- Drivers — the delivery address and contact number for the order they are delivering, for as long as that delivery is active.
- Payment providers and banks — to take payment and to make payouts.
- Service providers who host and support our systems, under contract and only for that purpose.
- Authorities where the law requires it.
We do not sell personal data.
5. How long we keep it
We keep transaction and invoicing records for the period required by Mauritian tax and accounting law. Other personal data is kept only as long as your account is active or as needed for the purposes above, after which it is deleted or anonymised. [CONFIRM RETENTION PERIODS]
6. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we are not required to keep it, or object to certain uses. Write to privacy@bonmaniere.io and we will respond within the time the law allows.
If you are not satisfied with our response, you can complain to the Data Protection Office of Mauritius.
7. Security
We restrict access to personal data to the people who need it, use encrypted connections, and keep payment credentials off our systems entirely by using licensed payment providers.
8. Changes
If we change this policy we will publish the new version here with the date it changed.