Privacy policy

Last updated: 8 October 2026

This policy explains what personal data Definitive Market collects through definitivemarket.com and in the course of selling to you, why we collect it, who we share it with and what rights you have. It is written to meet the Data Protection Act 2017 of Mauritius.

1. Who is responsible for your data

The controller is Definitive Concept Ltd, trading as Definitive Market (Company No. 139207, Business Registration No. C16139207), 15 Issackhan Street, Coromandel, Mauritius. Definitive Concept Ltd is registered as a controller with the Data Protection Office of Mauritius.

For any privacy question or request, contact us at legal@definitiveconcept.com or on +230 5500 1880, or write to the address above marked "Data protection".

2. The data we collect

When	What we collect
You create an account or sign in	Name, email address, password (stored in encrypted form), phone number
You request a quotation or place an order	Billing and delivery name and address, company name, phone, email, products requested, notes, purchase order number, and whether you opted in to marketing
You pay by bank transfer	The payer name and reference shown on our bank statement. We do not collect or store card details
You send a message	Name, company, email, phone and the content of your message
You apply for a business account	Company name, business registration and VAT numbers, registered address, the names and contact details of authorised buyers and accounts staff, and trade or bank references you give us
We deliver, install or service equipment	Site address, on-site contact, serial numbers, service history and warranty claims
You browse the website	IP address, browser and device type, pages viewed, date and time, and how you reached the site. See the Cookie Policy

We do not ask for special categories of personal data, such as health or biometric data, and ask you not to send any.

If you give us data about other people, such as colleagues, you confirm that you are entitled to do so and that they know how we will use it.

3. Why we use your data and our legal basis

Purpose	Legal basis
Creating and managing your account	Performance of a contract with you
Preparing quotations, processing orders, invoicing, taking payment, delivering, installing and servicing	Performance of a contract, or steps taken at your request before a contract
Handling warranty claims and returns with manufacturers and suppliers	Performance of a contract
Assessing business account applications and managing credit	Our legitimate interest in managing credit risk
Accounting, VAT and tax records	Compliance with a legal obligation
Answering enquiries and complaints	Our legitimate interest in serving customers
Keeping the website secure, preventing fraud and misuse	Our legitimate interest in protecting our business and customers
Understanding how visitors reach and use the website, and improving it	Your consent, given on the cookie banner
Sending marketing emails	Your consent, which you can withdraw at any time
Establishing, exercising or defending legal claims	Our legitimate interest, and compliance with legal obligations

Where we need data to enter into or perform a contract and you do not provide it, we may not be able to supply you.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Marketing

We would like to email you about products, offers and news from Definitive Market. We do this only if you have opted in, for example by ticking the box when you register or request a quotation. Every message tells you how to unsubscribe, and you can also ask us to stop at any time using the contact details in section 1. Messages about your quotation, order, account or warranty are not marketing and are sent regardless.

We do not sell your personal data.

5. Who we share your data with

We share personal data only where needed, and only the minimum required.

Recipient	Why
Other divisions and staff of Definitive Concept Ltd	To deliver the products and services you ask for, and for administration and accounting
Manufacturers, distributors and authorised service centres	To source products ordered for you, register warranties and handle warranty claims
Delivery and installation partners	To deliver and install your order
Our website hosting and content delivery provider	To run the website and store its data
Providers of our email, accounting and customer-management software	To communicate with you and keep our records
Our bank, auditors, insurers and professional advisers	To receive payments and meet our business and legal duties
The Mauritius Revenue Authority, courts, police and other public authorities	Where the law requires it or to protect our legal rights
A buyer or successor of our business	If all or part of the business is sold or reorganised, under the same protections

Service providers who process data for us act on our instructions and are required to keep it secure and confidential.

6. Transfers outside Mauritius

Some of our providers store or process data outside Mauritius. In particular, the website is hosted on servers in the United Kingdom, and fonts are served by Google. Manufacturers handling a warranty claim may also be located abroad.

Where personal data is transferred outside Mauritius, we do so as the Data Protection Act 2017 allows: because the transfer is necessary to perform our contract with you, because you have consented, or with appropriate safeguards in place with the recipient.

7. How long we keep your data

Data	How long
Quotations, orders, invoices, payment and tax records	7 years after the end of the financial year concerned
Account profile	For as long as the account is open, and up to 2 years after your last activity or your request to close it, unless records above must be kept longer
Enquiries and quotation requests that do not lead to an order	2 years
Business account applications and credit information	For the life of the account and 7 years after it closes. Unsuccessful applications: 1 year
Warranty and service records	For the warranty period and 3 years after
Marketing preferences	Until you withdraw consent, then a record of your opt-out is kept so we respect it
Website logs	Up to 12 months

We may keep data longer where needed for a legal claim or where the law requires. After these periods data is deleted or made anonymous.

8. How we protect your data

We use technical and organisational measures appropriate to the risk. These include encrypted connections (HTTPS), passwords stored in hashed form, access limited to staff who need it, regular software updates and backups.

No website or transmission over the internet is completely secure. You are responsible for keeping your password confidential and for telling us promptly if you believe your account has been compromised.

If a personal data breach occurs that is likely to put your rights at risk, we will notify the Data Protection Commissioner and, where required, you, as the law provides.

9. Your rights

Under the Data Protection Act 2017 you have the right to:

• Access the personal data we hold about you and receive a copy, free of charge;
• Rectification of data that is inaccurate or incomplete;
• Erasure of data we no longer have a lawful reason to keep;
• Restriction of processing in certain cases, for example while accuracy is being checked;
• Object to processing, including at any time to processing for direct marketing;
• Withdraw consent at any time where we rely on consent, without affecting what was done before;
• Not be subject to a decision based solely on automated processing that significantly affects you.

To exercise a right, contact us using the details in section 1. We may need to verify your identity. We will respond within one month, and will tell you if the law allows more time or if an exemption applies. You can also view and edit most account data yourself under Your account.

10. Complaints

If you are not satisfied with how we handle your data, please tell us first. You also have the right to complain to the Data Protection Commissioner:

Data Protection Office
5th Floor, SICOM Tower, Wall Street, Ebène, Mauritius
Telephone: 460 0251 · Email: dpo@govmu.org · Website: dataprotection.govmu.org

11. Children

The website is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

12. Other websites

The website links to other websites, such as manufacturer pages and datasheets. This policy does not cover them. Please read their own privacy policies.

13. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date it was last updated. If a change is significant, we will draw attention to it on the website or by email.