Privacy policy

This policy explains what personal data the Estrella Mauritius website collects, why, and what you can do about it.

Who we are

Estrella Mauritius is responsible for the personal data described here. This policy covers this website only.

What we collect

We collect only what we need:

  • What you type into the contact form: your name, your email and, if you choose, a phone number and a project type, plus your message. The message may name the slab, finish, size and quantity you are asking about.
  • What any website needs to be delivered: your IP address and basic details of your browser and device, handled by our hosting provider. Our hosting provider keeps request logs for a limited period.
  • Site statistics on every page, and usage analytics only if you switch it on.
  • Technical error reports when something on the site fails.

There are no accounts, no payments and no prices on the site. The site is not aimed at children and we do not knowingly collect their data. Please do not send sensitive personal information in a message.

Your enquiries

We use what you send through the contact form only to answer your enquiry and handle the project that follows. It reaches our mailbox by email through our email delivery provider, Resend, and a short confirmation, without your message, is emailed to the address you gave. The website itself keeps no copy of your enquiry: it lives in our mailbox, and Resend keeps a record of the emails it delivers for a limited period. We do not add you to marketing lists and we never sell your data.

Your IP address is used for a moment to limit how many messages one connection can send, which protects the form from abuse. Before the form sends, Cloudflare Turnstile checks that the request comes from a person and not a bot; it uses your IP address and signals from your browser, and sets no advertising or cross-site tracking cookie. If you write to us by email, phone or WhatsApp instead, we hold what you send there. WhatsApp is run by Meta under its own terms.

Cookies and storage

The site keeps a few essential choices on your device. They are always on:

  • locale: a cookie that remembers the language you choose, for one year.
  • estrella-consent: a cookie that remembers your cookie choice, for 180 days.
  • Your light or dark theme choice, kept in your browser's local storage rather than in a cookie.

Analytics sets a cookie whose name starts with ph_ and keeps a few entries in your browser's local storage, only after you switch analytics on. When you switch it off, analytics stops at once and we remove that cookie and those entries, keeping one small entry that records your refusal. We use no advertising cookies and no cross-site tracking. You can change your choice here at any time:

Site statistics

Cloudflare Web Analytics runs on every page and tells us how many people visit and how fast the pages load. It uses the page address, the site you came from, your country, and your browser and device type. It sets no cookie, stores nothing on your device and does not follow you across other sites. Our legal basis is our legitimate interest in seeing that the site works.

Analytics

PostHog measures how the site is used in more detail. We use PostHog, hosted in the European Union, with requests routed through our own domain. Analytics is off until you accept it in the cookie notice shown on your first visit or switch it on in Cookie preferences, and you can switch it off again at any time, with effect at once. When it is on, it records:

  • The pages you view and leave.
  • Which scenes of the home page film you watch.
  • The catalogue filters you use and the slabs you view.
  • The slab names you search for and the slab you pick. A search that looks like an email address or a phone number is never sent.
  • When you press Enquire, WhatsApp or Copy link on a slab page, and for which slab, finish and size.
  • Changes of language and theme.
  • Technical details: your device, browser, screen size, language and time zone, the site or campaign you came from, and possibly an approximate location derived from your IP address.

It may also record a replay of your visit: what appeared on screen and where you clicked, moved and scrolled. What you type into a form field is masked and never recorded. Analytics is never linked to your name or email address. Our legal basis is your consent.

Error reports

We use Sentry for error monitoring. It runs whether or not analytics is on, because it is how we learn that the site is broken. A report contains the error and where in the code it happened, the page address without its query string, your browser, device, language and time zone, and a short trail of your last actions on the site, such as pages opened and buttons pressed. We configure it not to collect cookies, request headers or anything typed into a form, and it sets no cookie.

It may also count page loads, so we can see what share of visits hit an error, and a small sample of requests, 5%, reports how long the server took. Our legal basis is our legitimate interest in keeping the site working.

Who handles data for us

These providers handle data on our behalf and act on our instructions:

  • Cloudflare: hosting, delivery, security and the bot check on the contact form (Turnstile).
  • Resend: email delivery.
  • Our email provider: the mailbox your enquiry reaches.
  • PostHog: analytics, only with your consent.
  • Sentry: error reports.

We do not sell or rent personal data.

International transfers

These providers may process data outside Mauritius, including in the European Union, the United Kingdom and the United States, under the safeguards they provide.

How long we keep it

Enquiries stay in our mailbox for as long as it takes to handle the enquiry and any project that follows, and we delete them on request. The consent cookie lasts 180 days and the language cookie one year. Resend keeps its delivery records under its own retention settings.

Analytics and error data are kept for a limited period, under those services' retention settings.

Your rights

Under the Mauritius Data Protection Act 2017 and, where it applies, the GDPR, you can:

  • Ask for a copy of your data.
  • Have it corrected.
  • Have it deleted.
  • Object to how we use it, or ask us to restrict it.
  • Withdraw your consent at any time.

Write to us and we will answer within one month. You can also complain to the Data Protection Office of Mauritius or to the data protection authority where you live.

Changes to this policy

We may update this policy as the site changes. The date above shows the current version.

Contact

Questions about your data or this policy? Write to us.

info@estrella.mu