Privacy Policy

Maison Versatile website (the "Site"), including its payment pages at payment.maisonversatile.com

This policy explains what information the Site uses, why, and what you can do about it. The short version:

• Browsing is anonymous. We have no accounts, ads, analytics or trackers.
• Your cart stays in your browser. We only receive your details when you place an order.
• We never sell your information or share it for marketing. Only the providers that host the Site and send our emails handle it, on our behalf.

1. Who we are

The Site is published by Maison Versatile Ltd, Salamut Khan Chady, Beau Bassin, Mauritius ("we", "us"). Contact: [email protected].

We are the controller of the personal data described in this policy, within the meaning of the Mauritius Data Protection Act 2017 and, where it applies, the EU General Data Protection Regulation (GDPR).

2. What stays in your browser

To keep your cart while you browse, the Site stores the following in your browser only, in its local storage:

• the games in your cart and their quantities;
• a random identifier for your cart;
• the link to your last order, so you can find it again.

We never receive this information until you choose to check out (see section 3). It stays in your browser until you empty your cart or clear your browser's data for the Site.

Cookies. The Site sets only two cookies, both needed for it to work, so they don't require your consent:

• NEXT_LOCALE — Remembers the language you chose · Until you close your browser
• mv-checkout-id — A random code that makes sure your checkout link is yours and nobody else's. Set only when you check out. · 180 days

No tracking. The Site uses no analytics, advertising or social media tools. Its fonts and images are served by the Site itself. Links to Instagram only take you there when you click them.

3. Orders

When you tap "Checkout", the Site sends our payment pages only the contents of your cart and your language. The payment pages then ask you for:

• Your name, email address and phone number — To confirm your order, contact you about it and hand it over to you.
• Your delivery choice and, for postal delivery, your address — To get your order to you.
• Your payment reference and the proof of payment you upload — To match your bank transfer to your order.

We keep with the order what you bought, its price, its status and the dates it changed. We never see or store your bank or card details: you pay by bank transfer from your own banking app.

Finding an order again. If you enter your email address on the "Find my order" page, we email the links to the orders placed with that address to that address. The page never shows whether an address matched.

4. Technical logs

Like any website, our servers and the network equipment in front of them record technical logs of requests (date and time, the page or file requested, your IP address and browser type). We use them only to keep the Site running and secure and to prevent abuse, for example limiting how many requests can be sent per minute. Logs are deleted after 30 days.

Cloudflare, which delivers the Site (see section 6), also processes your IP address to protect the Site against attacks.

5. Why we can use this information (legal bases)

• Your order details: to perform the contract you enter into when you order (and the steps before it).
• Keeping order records: our legal obligation to keep accounting and tax records.
• Technical logs and security: our legitimate interest in running and securing the Site.

We don't use your information for advertising or profiling, we don't send you marketing, and we don't make automated decisions about you.

6. Who can see it

• Who reads it: only the Maison Versatile team handling orders.
• Who handles it for us, under contract and only on our instructions:
  • Hetzner Online GmbH (Germany) stores the Site, orders and logs on servers in the European Union.
  • Cloudflare, Inc. (United States) delivers the Site and protects it against attacks. It sees your IP address and the pages you request. Where this means a transfer outside Mauritius or the EU, it is covered by Cloudflare's data processing terms, which include the European Commission's standard contractual clauses.
  • Google Business Suite sends our order emails and hosts our mailbox.
• No one else: we never sell, rent or share your information with advertisers, analytics or data companies. The only exception would be a legal obligation, such as an order from a court or authority.

7. How long we keep it

• Your cart in your browser — Until you empty it or clear your browser's data (you are in control)
• mv-checkout-id cookie — 180 days
• Orders (including your contact details and proof of payment) — As long as Mauritian accounting and tax law requires, 7 years after the order
• Technical logs (IP addresses) — 30 days

8. Security

• Everything the Site sends travels over an encrypted connection (HTTPS).
• Orders are stored in a private system that only our team can access, and every time an order is viewed it is logged.
• The Site asks for as little information as possible: no accounts, no passwords and no bank or card details.

9. Your rights

Depending on where you live, you have the right to:

• Access: ask what information we hold about you, and get a copy.
• Correction: ask us to correct information that's wrong.
• Erasure: ask us to delete it, unless the law requires us to keep it (for example, order records).
• Objection and restriction: object to or limit how we use it.
• Portability: where it applies.

To use these rights, write to [email protected]. Because we don't have accounts, tell us the email address you ordered with, or your order reference, so we can find it. We answer within one month.

You can also complain to a data protection authority:

• Mauritius: the Data Protection Office (dataprotection.govmu.org);
• France and Réunion: the CNIL (www.cnil.fr);
• elsewhere in the EU: the authority of your country.

10. Children

Orders must be placed by an adult. If you believe a child sent us personal information without permission, contact us and we'll delete it.

11. Changes to this policy

If we change this policy, we'll update the date at the top and, for important changes, tell you on the Site.

12. Contact

Maison Versatile Ltd, Salamut Khan Chady, Beau Bassin, Mauritius, [email protected].