MoEna
Privacy Policy
Version 1.1 · Effective 13 October 2026 · Last updated 13 October 2026
Nothing in this policy is intended to exclude or restrict any mandatory right or remedy available to you under applicable Mauritius law.
1. Who we are
This Privacy Policy explains how MoEna Ltd (“MoEna”, “we”, “us”) processes personal data on the MoEna Platform.
Address: MORCELLEMENT RAFFRAY SAINT-PIERRE, Republic of Mauritius. Email: support@moena.online. Telephone: +230 55321004.
This Policy is intended to comply with the Data Protection Act 2017 of Mauritius, as amended. It is not a statement that MoEna is registered under any scheme we have not published, and it does not invent a Data Protection Officer name or registration number.
2. Information we collect
Depending on how you use MoEna, we may collect: name; email; telephone; Account information; password and security credentials (stored in protected form); delivery address; delivery instructions; Order information; transaction and payment-status or payment-reference information (we do not ask you to send full card numbers to MoEna support); membership information; Merchant business information, including BRN where you provide it; KYC and identity-verification information; customer-support information; fraud and security information; IP address; device, browser and application information; login and security logs; location information where needed for delivery; and proof-of-delivery information such as photos or scan events.
We also collect information you submit in reviews, questions, tickets and similar messages.
3. Purposes
We process personal data to: manage Accounts; process Orders; take and reconcile payments; arrange delivery or pickup; provide customer support; verify Merchants; carry out KYC; prevent fraud and abuse; keep the Platform secure; handle refunds and disputes; administer memberships; improve the Platform; perform analytics; meet legal and regulatory duties; and protect users and MoEna.
4. Legal basis
We rely on the lawful bases available under applicable Mauritius data-protection law. These may include: performance of a contract (for example Account, Order and delivery); a legal obligation (for example tax, accounting or a lawful request); consent (for example optional marketing or optional cookies); legitimate interests that are not overridden by your rights (for example securing the Platform and preventing fraud); and protection of vital interests in rare safety situations.
We do not claim that consent is required for every processing activity.
6. International transfers
Some service providers may process information outside Mauritius (for example hosting, email or payment infrastructure). Where required, we use appropriate safeguards such as contractual protections and careful provider selection.
7. Security
We use technical and organisational measures appropriate to the risk, including access controls, encrypted transport, staff permissions and monitoring. We do not publish internal security playbooks in this Policy.
8. Data breaches
If a personal-data breach occurs that is likely to affect you, we will investigate, contain and remediate it, and notify the Data Protection Commissioner and affected individuals where the Data Protection Act 2017 requires that notification.
9. Retention
We keep personal data only as long as reasonably necessary for the purposes above, or as required or permitted by law (including accounting, dispute and fraud-prevention periods). Marketing consent records and legal-acceptance records are kept to demonstrate what was agreed.
Specific periods we apply today: when a customer deletes their account, personal details are removed or anonymised straight away and Order records are kept in reduced form for 90 days; identity-document files uploaded for Merchant verification are deleted 90 days after upload. Other periods are being finalised and will be added to this Policy.
10. Your rights
Subject to the Data Protection Act 2017, you may request access to your personal data, correction or updating, deletion, restriction of processing, or to object to certain processing. Where processing is based on consent, you may withdraw consent without affecting processing that already took place.
You may also complain to the Data Protection Commissioner of Mauritius.
You can submit a request from your Account under Privacy requests (signed-in customers can also download their data there), or contact support@moena.online. We may need to verify your identity before acting on a request, and some requests (for example deletion) are subject to records we must keep by law.
We track each request with a reference number and aim to reply within 30 days. This is an internal target; your statutory rights are those given by the Data Protection Act 2017.
11. Marketing
Promotional emails and similar marketing are sent only if you have given separate marketing consent or another lawful basis applies. You can change marketing preferences in your Account notification settings, and every marketing email will include an unsubscribe link. Withdrawing consent is recorded with the date.
Agreeing to the Terms is not the same as agreeing to marketing.
13. Children
The Platform is intended for adults who can form a binding contract in Mauritius. We do not knowingly create Accounts for children.
14. Changes
We may update this Policy. The version and dates on this page show the current text. Material changes will be notified where reasonably practicable.
15. Contact
MoEna Ltd, BRN C26239829, MORCELLEMENT RAFFRAY SAINT-PIERRE, Republic of Mauritius. support@moena.online. +230 55321004.
MoEna Ltd
BRN C26239829
MORCELLEMENT RAFFRAY SAINT-PIERRE
Republic of Mauritius