Privacy Policy

1. Who is responsible for your data

Natural Hair Culture Ltd (BRN C19163505), Garden Village Shopping Centre, Route du Jardin, Curepipe 74213, Mauritius. Telephone +230 5446 6010, email [email protected].

We are the data controller for the information described here. We process personal data in line with the Mauritius Data Protection Act 2017. Where we serve customers in the European Union, we also apply the standards of the GDPR.

2. What we collect

When you order

• your name, email address and telephone number
• your billing and delivery addresses
• what you ordered, and the payment method you chose

We do NOT hold your card number. Card payments are handled by our payment provider on their own systems; we receive only confirmation that a payment succeeded or failed. For bank transfers we see what your bank shows on the transfer, including your order reference.

When you create an account

Your name, email address, password (stored encrypted, never in a form we can read), your order history, your wishlist and your loyalty points.

When you contact us or post

If you write to us, ask a question on a product page or leave a review, we keep what you sent, along with your name and email address so we can reply and so a review can be attributed.

When you subscribe to the newsletter

Your email address, and whether you opened or clicked our emails, so that we can tell whether they are worth sending.

When you track an order without signing in

We match the order number and email address you enter against an existing order. Nothing new is stored.

Automatically

Our servers keep ordinary technical logs — IP address, browser and device type, pages requested, and the time. Cookies are covered by our Cookie Policy, and analytics or advertising cookies are set only if you agree to them.

3. Why we use it, and on what basis

• To take, deliver and support your order, and to handle returns — because we need it to perform our contract with you.
• To run your account, your wishlist and your loyalty points — to perform our contract with you.
• To answer your questions and publish your reviews — with your consent, and in our legitimate interest in running a shop people can ask questions about.
• To send you the newsletter — with your consent, which you can withdraw at any time.
• To keep the site secure, prevent fraud and fix faults — in our legitimate interest in a shop that works and is not abused.
• To keep accounting and tax records — because the law requires it.
• To measure how the site is used, and to advertise — only with your consent, given through the cookie banner.

4. Who we share it with

We do not sell your personal information. We share it only with:

• our delivery team and couriers — the name, address and telephone number needed to bring you your parcel
• our payment providers — MCB (Juice), our card processor and PayPal — who handle the payment itself
• our email provider, which sends order confirmations and, if you subscribed, the newsletter
• our hosting and infrastructure providers, who store the data on our behalf
• professional advisers, and public authorities where the law requires it

Everyone we engage is required to keep your data confidential and to use it only for the work we have asked them to do.

5. Where your data is held

Our systems are hosted outside Mauritius, in Singapore and the European Union. Where personal data leaves Mauritius we take the steps the Data Protection Act requires to keep it protected to the same standard.

6. How long we keep it

• Order and invoice records: kept as long as tax and company law require.
• Account data: for as long as your account is open. Close it and we delete or anonymise what we are not obliged to keep.
• Newsletter: until you unsubscribe.
• Questions, reviews and correspondence: for as long as they are useful to other customers or to us, and no longer.
• Technical logs: a short period, for security and diagnosis.

7. Your rights

You have the right to:

• be told what we do with your data — which is what this page is for
• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• ask us to erase your data
• ask us to restrict how we use it
• receive your data in a portable form
• object to processing we carry out in our legitimate interests
• not be subject to a decision made solely by automated means

Much of this you can do yourself: sign in and open My Account to see and change your details, or close your account. For anything else, write to [email protected] and we will answer. We may need to confirm who you are first. Some records we must keep for legal, accounting or security reasons even after a deletion request.

If you are not satisfied with how we have handled your data, you may complain to the Data Protection Office of Mauritius.

8. Security

The site is served over an encrypted connection, passwords are stored hashed rather than in readable form, and access to customer data is limited to the people who need it to do their job. No system is perfectly secure, but we take this seriously and act quickly if something goes wrong.

9. Children

This shop is intended for adults. We do not knowingly collect data from children. If you believe a child has given us personal information, write to us and we will remove it.

10. Changes

We may update this policy. The date at the top of the page shows when it last changed, and a significant change will be flagged on the site.