- Home
- Privacy policy
Contents
- 1. Who we are
- 2. What personal data we collect
- 3. Why we use your personal data, and our legal basis
- 4. Who we share your personal data with
- 5. Transfers outside Mauritius
- 6. How long we keep your personal data
- 7. How we protect your personal data
- 8. Your rights
- 9. Cookies
- 10. Children
- 11. Links to other websites
- 12. Changes to this policy
- 13. Contact us
Privacy policy
Last updated: 25 October 2026
1. Who we are
Glowtime’s online store, www.glowtime.mu (“Glowtime”, “we”, “us”, “our”), is operated by Maple & Honey Ltd, a company registered in Mauritius (Business Registration Number C19166423, VAT number 27720026). Maple & Honey Ltd is registered as a data controller with the Mauritius Data Protection Office.
We are the controller of the personal data described in this policy under the Data Protection Act 2017 (“the Act”). Our contact details appear in section 13.
For any question about this policy or your personal data, email hello@glowtime.mu with the subject line “Privacy”.
This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what rights you have. It forms part of our Terms & Conditions (glowtime.mu/terms/).
2. What personal data we collect
Information you give us
- Account details when you register: name, surname, email address, telephone number and password (stored as a secure password hash, not as readable text).
- Order details when you buy: billing and delivery address, district, postcode, telephone number, the products you ordered, the delivery and payment method you chose, and any notes you add to your order.
- Messages you send us through the contact form or by email, including your order number if you give it.
- Product reviews you post: your name, your rating and your review. Your email address is kept private.
- Loyalty programme details if you join our rewards programme: your name, email address, points balance, referrals and birthday if you choose to share it.
- Newsletter subscription, if you sign up to hear from us.
Information collected automatically
- Technical data: your IP address, browser type and device, recorded when you place an order and in our website’s security logs.
- Cookies and similar technologies: see section 9.
Payment information
Bank transfers are made from your own bank’s app or online banking to our account. We use payment confirmations and transaction details to reconcile payments and process refunds. Please do not send us your card details, banking passwords or security codes.
We do not knowingly collect sensitive data, such as health information, and we ask you not to include it in messages or reviews.
3. Why we use your personal data, and our legal basis
| Purpose | Legal basis under the Act |
|---|---|
| Creating and managing your account | Performing our contract with you |
| Processing, delivering and supporting your orders, including invoices, delivery updates, returns and refunds | Performing our contract with you |
| Keeping records required by law | Complying with our legal obligations |
| Answering your questions and complaints | Performing our contract with you, or our legitimate interest in helping our customers |
| Running the loyalty programme | Performing our agreement with you under the programme terms. Marketing consent is requested separately. |
| Sending newsletters, offers and promotions | Your consent. You can withdraw it at any time (section 8) |
| Understanding how our website is used so we can improve it | Your consent to analytics cookies |
| Showing relevant advertising on social media | Your consent to marketing cookies |
| Preventing fraud and keeping the website secure | Our legitimate interest in protecting our business and customers |
Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
You may choose not to provide personal data. However, we may be unable to fulfil an order, create an account or provide a requested service without the information needed for that purpose. Newsletter subscriptions and optional cookies are not required to make a purchase.
4. Who we share your personal data with
We only share the information each party needs to do its job, and we don’t sell your personal data. We may share it with:
- Delivery partners: Mauritius Post and our third-party courier, so they can deliver your order (name, address, telephone number).
- Our bank, The Mauritius Commercial Bank (MCB), to receive and confirm your payment.
Service providers who run parts of our website for us:
- website development and maintenance providers;
- our website hosting provider, which stores the website and its database;
- Cloudflare (Turnstile), which checks that forms are sent by people rather than automated bots;
- transactional email providers, which deliver our order and account emails;
- email marketing providers, for our newsletter, if you subscribe;
- loyalty programme providers, if you join;
- Google (Google Analytics and Google Ads), to measure website traffic and our advertising, if you accept analytics and marketing cookies;
- Meta (Facebook Pixel), to measure our advertising, if you accept marketing cookies.
- Public authorities, where disclosure is required by law.
- Professional advisers, such as our accountants and auditors, under confidentiality.
Service providers processing personal data on our behalf must do so under appropriate contractual obligations. Other recipients, such as banks and public authorities, may process data independently under their own legal responsibilities.
5. Transfers outside Mauritius
Some of our email, loyalty, analytics, advertising and website security providers store or process data outside Mauritius, including in the United States and the European Union. When your data is transferred outside Mauritius, we make sure appropriate safeguards are in place as required by the Act, including appropriate contractual safeguards where applicable. You can ask us for more information about these safeguards.
6. How long we keep your personal data
| Data | How long |
|---|---|
| Orders, invoices and payment records | For the period required by applicable accounting and tax laws, and longer where necessary to resolve an outstanding dispute or legal claim |
| Customer account | While your account remains active or is needed to provide our services. When it is closed, we delete or anonymise data no longer needed, apart from records retained for legal obligations or claims |
| Messages and complaints | For as long as needed to resolve your enquiry or complaint and deal with related disputes or legal claims |
| Newsletter subscription | Until you unsubscribe. We may retain a minimal record of your opt-out to ensure you are not contacted again |
| Loyalty programme records | While you participate and for as long as necessary to administer rewards, resolve disputes and meet legal obligations |
| Product reviews | For as long as the product is listed, unless you ask us to remove your review |
| Security logs | For as long as necessary to investigate security incidents, prevent misuse and protect the website |
We consider the purpose of the information, applicable legal requirements and any outstanding disputes when determining retention periods. Data no longer needed is deleted or anonymised. Backup copies are removed through the applicable backup retention cycle.
7. How we protect your personal data
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include encrypted connections (HTTPS), secure password hashing, limited staff access to customer data and regular backups. If a personal data breach occurs, we will notify the Data Protection Office and, where required, affected individuals in accordance with the Act.
You are responsible for keeping your account password safe and not sharing it. Please don’t use the “remember me” option on shared devices.
8. Your rights
Under the Data Protection Act 2017 you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct personal data that is inaccurate or incomplete. You can update most details yourself under My Account;
- ask us to delete your personal data, subject to applicable legal exceptions, including where we must retain records by law;
- ask us to restrict how we use your data in certain cases;
- object to our use of your data, including at any time to direct marketing;
- withdraw your consent at any time where we rely on it;
- not be subject to a decision based solely on automated processing that significantly affects you. We don’t make such decisions.
To use any of these rights, email hello@glowtime.mu with the subject line “Privacy”. We may need to confirm your identity first. We will reply within one month of your request.
To stop marketing emails, click the “unsubscribe” link at the bottom of any newsletter, or email us.
If you have any questions or concerns about your personal data, please contact hello@glowtime.mu so we can help. You also have the right to lodge a complaint with the Mauritius Data Protection Commissioner.
9. Cookies
Cookies are small text files stored on your computer or phone when you visit a website. We use:
| Type | What it does | Can you refuse it? |
|---|---|---|
| Essential | Keeps items in your basket, keeps you logged in, remembers your cookie choice and protects the website | These are necessary for essential functions. Blocking them may prevent parts of the shop from working. |
| Analytics | Google Analytics: counts visits and shows us which pages are popular | Yes |
| Marketing | Google Ads and Meta advertising technologies: measure advertising and help show relevant adverts | Yes |
When you first visit, we ask whether you accept analytics and marketing cookies. These are only set if you agree. You can change your choice at any time through the cookie settings link at the bottom of every page. You can also manage or delete cookies in your browser settings, although deleting cookies does not necessarily withdraw consent already given. Blocking essential cookies may prevent the basket, checkout or other essential features from working.
10. Children
We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian where required by law. If you believe a child has provided personal data without the necessary consent, please contact us so we can review and address the matter.
11. Links to other websites
Our website may link to other websites, such as brand websites or social media. We aren’t responsible for their privacy practices, so please read their privacy policies.
12. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated. If we make important changes, we will tell you by email or with a notice on the website.
13. Contact us
Maple & Honey Ltd (Glowtime)
F13, Manhattan Shopping Centre, Rue Lees, Curepipe, Mauritius
Email: hello@glowtime.mu