Privacy Policy

1. Who we are

This Privacy Policy explains how MOENA.ONLINE (“MoEna”, “we”, “us”) processes personal data on the MoEna Platform.

Address: MORCELLEMENT RAFFRAY SAINT-PIERRE, Republic of Mauritius. Email: support@moena.online. Telephone: +230 55321004.

This Policy is intended to comply with the Data Protection Act 2017 of Mauritius, as amended. It is not a statement that MoEna is registered under any scheme we have not published, and it does not invent a Data Protection Officer name or registration number.

2. Information we collect

Depending on how you use MoEna, we may collect: name; email; telephone; Account information; password and security credentials (stored in protected form); delivery address; delivery instructions; Order information; transaction and payment-status or payment-reference information (we do not ask you to send full card numbers to MoEna support); membership information; Merchant business information, including BRN where you provide it; KYC and identity-verification information; customer-support information; fraud and security information; IP address; device, browser and application information; login and security logs; location information where needed for delivery; and proof-of-delivery information such as photos or scan events.

We also collect information you submit in reviews, questions, tickets and similar messages.

3. Purposes

We process personal data to: manage Accounts; process Orders; take and reconcile payments; arrange delivery or pickup; provide customer support; verify Merchants; carry out KYC; prevent fraud and abuse; keep the Platform secure; handle refunds and disputes; administer memberships; improve the Platform; perform analytics; meet legal and regulatory duties; and protect users and MoEna.

4. Legal basis

We rely on the lawful bases available under applicable Mauritius data-protection law. These may include: performance of a contract (for example Account, Order and delivery); a legal obligation (for example tax, accounting or a lawful request); consent (for example optional marketing or optional cookies); legitimate interests that are not overridden by your rights (for example securing the Platform and preventing fraud); and protection of vital interests in rare safety situations.

We do not claim that consent is required for every processing activity.

5. Sharing

We share only what is needed for the relevant purpose, which may include: Merchants (to fulfil your Order); Delivery Partners; payment and banking or settlement providers; hosting and technology providers; customer-support and communications providers; analytics providers where enabled; fraud-prevention providers; professional advisers; regulators; and law enforcement where legally permitted or required.

We do not sell personal data.

6. International transfers

Some service providers may process information outside Mauritius (for example hosting, email or payment infrastructure). Where required, we use appropriate safeguards such as contractual protections and careful provider selection.

7. Security

We use technical and organisational measures appropriate to the risk, including access controls, encrypted transport, staff permissions and monitoring. We do not publish internal security playbooks in this Policy.

8. Data breaches

If a personal-data breach occurs that is likely to affect you, we will investigate, contain and remediate it, and notify the Data Protection Commissioner and affected individuals where the Data Protection Act 2017 requires that notification.

9. Retention

We keep personal data only as long as reasonably necessary for the purposes above, or as required or permitted by law (including accounting, dispute and fraud-prevention periods). Marketing consent records and legal-acceptance records are kept to demonstrate what was agreed.

10. Your rights

Subject to the Data Protection Act 2017, you may request access to your personal data, correction or updating, deletion, restriction of processing, or to object to certain processing. Where processing is based on consent, you may withdraw consent without affecting processing that already took place.

You may also complain to the Data Protection Commissioner of Mauritius.

To exercise rights, contact support@moena.online. We may need to verify your identity before acting on a request.

11. Marketing

Promotional emails and similar marketing are sent only if you have given separate marketing consent or another lawful basis applies. You can change marketing preferences in your Account notification settings.

Agreeing to the Terms is not the same as agreeing to marketing.

12. Cookies

Cookies and similar technologies are described in the Cookie Policy. Strictly necessary cookies are used to operate the Platform. Optional analytics and marketing technologies are used only with an appropriate choice where consent is required.

13. Children

The Platform is intended for adults who can form a binding contract in Mauritius. We do not knowingly create Accounts for children.

14. Changes

We may update this Policy. The version and dates on this page show the current text. Material changes will be notified where reasonably practicable.

15. Contact

MOENA.ONLINE, MORCELLEMENT RAFFRAY SAINT-PIERRE, Republic of Mauritius. support@moena.online. +230 55321004.