Privacy Policy

Last Updated: 11 October 2026

At Ve-Yo Ltd (“Ve-Yo”, “we”, “us” or “our”), we respect your privacy and are committed to protecting and responsibly handling your personal information.

Ve-Yo Ltd is the controller responsible for the processing of personal information described in this Privacy Policy. Ve-Yo Ltd is registered with the Data Protection Office of Mauritius.

This Privacy Policy explains what personal information we may collect when you visit our website, create an account, place an order, make a payment, contact us or otherwise interact with us, how we use that information, when we may share it, how long we retain it and the rights available to you under applicable law. It applies to personal information collected through the Ve-Yo website and through our interactions with customers in connection with our products and services.

Ve-Yo processes personal information in accordance with applicable data protection and privacy laws, including the Mauritius Data Protection Act 2017.

1. Information We Collect

Depending on how you interact with Ve-Yo, we may collect the following categories of personal information:

  • Your name, email address and telephone number;
  • Your billing and delivery address;
  • Details of products you purchase and your order history;
  • Information relating to returns, exchanges, refunds and customer enquiries;
  • Customer account information, where you choose to create an account;
  • Payment transaction information necessary to process and administer your purchase;
  • Information you provide when contacting or communicating with us;
  • Technical information relating to your use of our website, such as your IP address, browser type, device information and website activity;
  • Information collected through cookies and similar technologies; and
  • Other information that you voluntarily provide to us or that is reasonably necessary for us to provide our services and operate our business.

We aim to collect personal information that is adequate, relevant and not excessive for the purposes for which it is processed. Where information is required to fulfill an order or provide a service, failure to provide it may prevent us from processing the transaction or providing the requested service.

2. How We Use Your Information

We may use your personal information to:

  • Process and fulfill your orders;
  • Process payments and arrange delivery;
  • Manage returns, exchanges and refunds;
  • Communicate with you about your orders, payments, deliveries, returns, refunds or enquiries;
  • Provide customer support;
  • Create and manage customer accounts where applicable;
  • Maintain records of transactions and customer interactions;
  • Respond to requests, complaints and other communications;
  • Improve our website, products, services and customer experience;
  • Monitor and maintain the security and proper operation of our website and systems;
  • Prevent fraud, misuse and unauthorized activity;
  • Establish, exercise or defend our legal rights where necessary;
  • Comply with applicable legal, regulatory, accounting and tax obligations;
  • Send marketing communications where permitted by law and where the applicable legal requirements have been satisfied; and
  • Carry out other purposes that are reasonably necessary for the operation of our business and are compatible with applicable law.

We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law.

3. Legal Basis for Processing

Depending on the circumstances, Ve-Yo may process personal information where:

  • Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, including processing and fulfilling an order;
  • Processing is necessary for Ve-Yo to comply with a legal, regulatory, accounting or tax obligation;
  • Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms;
  • You have provided consent where consent is required by applicable law; or
  • Another lawful basis for processing applies under the Mauritius Data Protection Act 2017 or other applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn, nor processing that Ve-Yo is otherwise permitted or required to carry out on another lawful basis.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to enable essential website functions; maintain sessions and security; remember preferences; understand how visitors use our website; measure website performance; and help us improve our website, products and services.

Cookies may be placed by Ve-Yo or by third-party service providers whose services are integrated into our website. You may manage or disable cookies through your browser settings, although disabling certain cookies may affect some website functionality.

Where non-essential cookies are used in circumstances where consent is required, Ve-Yo will seek your consent through a cookie banner or cookie settings on our website.

We use Google Analytics, a web analytics service provided by Google, to understand how visitors use our website (for example, which pages are viewed and how visitors find us) and to measure shop activity such as product views, items added to cart and completed purchases. Google Analytics is only activated if you select “Accept All” on our cookie banner. If you select “Necessary Only”, no analytics cookies are set on your device and only limited, non-identifying technical signals may be sent to Google. You can change your choice at any time by clearing the cookies for our website in your browser, after which the cookie banner will appear again. Google processes this information on our behalf and may transfer it outside Mauritius. For more information, please see Google’s Privacy Policy at policies.google.com/privacy.

5. Marketing Communications

Where permitted by law, Ve-Yo may send you information about new collections, promotions, offers, products and other Ve-Yo updates where you have chosen to receive such communications or where another lawful basis permits the communication.

You may object to or unsubscribe from direct marketing at any time and free of charge by using the unsubscribe option available in your profile, or by contacting us by email on customerservice@veyo.mu.

Unsubscribing will not affect essential communications relating to an existing order, payment, delivery, return, refund, account or other transaction. We may retain limited information necessary to record your marketing preference or objection so that we can respect your request.

6. Sharing Your Personal Information

We may share personal information where it is reasonably necessary to operate our business, provide our services, fulfill your orders, process payments, deliver products or comply with our legal obligations. Depending on the services actually used by Ve-Yo, this may include sharing information with:

  • Payment service providers, for processing online payments and related payment transactions;
  • Delivery and courier providers, for delivering your purchases;
  • Host providers, where applicable, for hosting and related website or systems services;
  • Analytics providers (such as Google Analytics), where you have accepted analytics cookies, to help us understand how our website is used;
  • Other technology, hosting, security, communications or IT service providers that support our website and business operations;
  • Professional advisers, accountants, auditors or other service providers where reasonably necessary;
  • Government authorities, regulators or law-enforcement bodies where required or permitted by law; and
  • Other parties where disclosure is reasonably necessary to protect our legal rights, prevent fraud, investigate misuse, enforce our terms or comply with a legal obligation.

Where we use service providers to process personal information on our behalf, we take reasonable steps to ensure that the processing is carried out in accordance with applicable data protection requirements. We do not sell your personal information. We only disclose personal information where reasonably necessary for the relevant purpose and in accordance with our legal obligations.

7. Payments

Online payments made through our website are processed through Peach Payments. Depending on the payment method and integration used, payment card or other payment information will be processed directly by Peach Payments. Peach Payments processes this information under its own privacy policy, which we encourage you to read. Ve-Yo may retain limited payment-related information such as payment status, transaction references, payment confirmations, refund information and other information reasonably necessary for order processing, reconciliation, accounting, customer support and fraud prevention. Ve-Yo does not store payment-card details where those details are processed directly by the payment service provider.

8. Hosting, Security and International Processing

Our website and related systems are hosted or supported by third-party service providers.

We take reasonable technical and organizational measures appropriate to the nature of the personal information and the risks involved to protect personal information against unauthorized access, loss, misuse, alteration, destruction or unauthorized disclosure. Access to personal information is limited to Ve-Yo personals and service providers who reasonably need access for legitimate business purposes.

No method of transmission or electronic storage can be guaranteed to be completely secure. However, Ve-Yo takes reasonable measures appropriate to the nature of the information and the risks involved.

9. Personal Data Breaches

If a personal data breach occurs, Ve-Yo will take appropriate steps to investigate, contain, assess and address the breach.

Where required by law, Ve-Yo will notify the Data Protection Commissioner without undue delay and, where feasible, not later than 72 hours after becoming aware of the breach, and will communicate the breach to affected individuals without undue delay. Ve-Yo may maintain records of data-security incidents and breaches for compliance, investigation, remediation, risk management and legal purposes.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, taking into account legal, regulatory, accounting, tax, contractual and legitimate business requirements. Retention periods may depend on the nature and purpose of the information, whether an active customer relationship exists, whether the information is needed to complete a transaction, legal requirements, the need to resolve disputes or complaints, fraud prevention and security requirements, and the establishment, exercise or defence of legal claims.

For example:

  • Order and transaction records are retained for the period required by Mauritian accounting, tax and company law (currently 5 years);
  • Customer account information is generally retained while the account remains active and thereafter for as long as reasonably necessary or legally required;
  • Customer enquiries may be retained for a reasonable period after the enquiry has been resolved;
  • Marketing preferences and objections are retained for as long as necessary to respect those preferences; and
  • Security and fraud-prevention records may be retained for an appropriate period based on the nature of the incident and applicable requirements.

When personal information is no longer required, we will take reasonable steps to delete, anonymise or otherwise securely dispose of it, subject to any legal or legitimate requirement to retain it.

11. Your Privacy Rights

Under the Mauritius Data Protection Act 2017, you may have certain rights in relation to your personal information, subject to applicable conditions, limitations and exceptions. Depending on the circumstances, these may include the right to:

  • Request access to the personal information we hold about you, and information about how it is processed, the categories of information and recipients, and applicable retention periods or the criteria used to determine them;
  • Request correction of inaccurate or incomplete personal information;
  • Request erasure of personal information where permitted by law;
  • Request restriction of processing where applicable;
  • Object to certain processing of your personal information, including direct marketing;
  • Withdraw consent where processing is based on consent; and
  • Exercise any other rights available to you under applicable data protection law, including rights relating to automated processing or profiling that produces a significant effect on you.

To exercise a privacy right or ask a question about how we handle your personal information, please contact us using the details in Section 15. We may need to verify your identity before processing certain requests. Some rights may be subject to legal limitations, exemptions or conditions.

You also have the right to lodge a complaint with the Data Protection Commissioner of Mauritius if you believe that your personal information has been processed in breach of applicable data protection law. We would, however, appreciate the chance to address your concern first.

12. Automated Decision-Making

Ve-Yo does not currently use automated decision-making or profiling that produces legal or similarly significant effects on customers. If this changes, Ve-Yo will update this Privacy Policy and provide the information required by law.

13. Children

Our website is intended for general retail customers and is not directed at children. Customers under 16 should not place orders or provide personal information without the consent of a parent or guardian. We do not knowingly collect personal information from children without the consent required by law. If you believe a child has provided us with personal information without the required consent, please contact us and we will take appropriate steps to delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or applicable legal requirements. The latest version will be published on our website and will show the applicable “Last Updated” date. Where appropriate, we may notify customers of material changes through the website, email or other suitable means.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a privacy right or have a concern about how your personal information is handled, please contact our Privacy Team:

Company: Ve-Yo Ltd

Business Registration Number (BRN): C26238699

Email: dpo@veyo.mu

Address: Ramchandar Road, Riche Mare, Central Flacq, Mauritius

Ve-Yo will endeavour to respond to privacy-related enquiries within the timeframe required by applicable law.