Who controls your information
Mauritian Groceries operates the Mauritian Groceries online shop and is the controller of the customer information described here. Our business address is Unit 6, Arden Press Way, Letchworth Garden City, Hertfordshire, UK SG6 1LH. For privacy questions, email orders@mauritiangroceries.co.uk.
Information we collect
We collect details needed for accounts and orders, including your name, email address, telephone number, delivery address, basket and purchase history. We also record encrypted or hashed authentication information, temporary failed-login counters, customer-service correspondence, optional marketing choices and security or technical information needed to protect the service.
Stripe handles payment card information. We receive payment references, payment status, transaction amounts and limited billing information, but do not store your complete payment card number or security code.
Why we use it and our legal bases
We use personal information to administer accounts, process orders and payments, deliver groceries, answer customer enquiries, prevent fraud, protect customer accounts and maintain business records.
- Contract: account administration, order fulfilment, payment, delivery and order support.
- Legal obligation: accounting, tax, consumer protection and food-safety responsibilities.
- Legitimate interests: service security, fraud prevention, operational diagnostics and resolving disputes.
- Consent: optional marketing and non-essential analytics or marketing cookies, where required.
Service providers and recipients
We share information only as necessary with Stripe for payments; Vercel for website hosting; Amazon Web Services for application infrastructure, databases and product-image delivery; selected delivery or fulfilment providers; and professional advisers or authorities when required by law. Providers may act as processors or independent controllers depending on the service.
International transfers
Some technology providers may process or access information outside the UK. When that happens, we use applicable safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK addendum to approved contractual clauses, together with any supplementary protections required.
How long information is kept
We keep account information while your account remains active or while it is needed for customer support, security or legal claims. Order, payment and accounting records are retained for the period required by tax, accounting and consumer-protection obligations, normally up to six years where applicable. Security records are reviewed and deleted when no longer necessary; temporary account locks expire automatically after their published lockout period.
Your rights and choices
You may request access, correction, deletion, restriction, portability, objection or withdrawal of consent where the relevant right applies. Some records must be retained where the law requires this. Contact us using the details above, and we will respond within the applicable statutory period.
You can change optional cookie preferences on our cookie page. You can withdraw marketing consent using an unsubscribe option or by contacting us.
Cookies and account security
Strictly necessary cookies and storage support your basket, authenticated session and saved privacy choices. Optional analytics or marketing technologies require the relevant consent. Customer accounts are temporarily locked after three unsuccessful sign-in attempts to reduce unauthorised access.
Complaints and changes
Contact us first if you have a concern. You also have the right to complain to the UK Information Commissioner's Office. We update this notice when our services, providers or legal duties change.