Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains how Soil Plus Ltd (“Soil Plus”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit this website, contact us, request a quote or buy our products. We process personal data in accordance with the Data Protection Act 2017 of the Republic of Mauritius (the “DPA”).

1. Who we are

Soil Plus Ltd is a company registered in Mauritius and is the controller of the personal data described in this policy.

Please use these details for any question about this policy or your personal data.

2. The personal data we collect

Information you give us

  • Contact form: your full name, email address and the content of your message.
  • Enquiries and quotes by email, phone, WhatsApp or in person: your name, company, phone number, email address, delivery address and any details you include about your project or order.
  • Customers and suppliers: contact details of the people we deal with, order, delivery and invoicing information, and our correspondence.

Information collected automatically

  • Technical data such as your IP address, browser and device type, the pages you request and the date and time of your visit. This is recorded in our hosting provider’s server logs and by our security service (Cloudflare) to keep the website secure and working.

We do not ask for special categories of personal data (such as health information). Please do not include them in your messages.

3. How we use your personal data

We only use personal data where the DPA allows it. In particular we use it to:

  • Answer your enquiries and prepare quotes: to take steps at your request before entering into a contract, and in our legitimate interest in responding to people who contact us.
  • Supply our products, arrange delivery or collection, invoice and provide after-sales support: to perform our contract with you.
  • Keep accounting and tax records: to comply with our legal obligations.
  • Run, secure and improve this website and prevent misuse or fraud: in our legitimate interests.
  • Send you news or offers about our products: only if you have agreed to receive them. You can withdraw your consent at any time.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

4. Cookies and embedded content

This website does not use advertising or analytics cookies. It currently uses:

  • Cloudflare security cookie (__cf_bm): strictly necessary. It helps distinguish genuine visitors from automated traffic and expires after 30 minutes.
  • Embedded content from Google: the map on our Contact page (Google Maps) and the video on our home page (YouTube, in privacy-enhanced mode, loaded only when you press play). Google may set cookies or collect data when this content loads or when you interact with it. This is governed by Google’s Privacy Policy.

You can block or delete cookies in your browser settings. If we introduce analytics or marketing cookies in the future, we will update this policy and ask for your consent where required.

5. Who we share your personal data with

We share personal data only where necessary, with:

  • Service providers who act on our behalf, such as our website hosting provider, Cloudflare (security and content delivery), email providers and IT support. They may only use the data on our instructions.
  • Delivery and transport partners, to deliver your order.
  • Professional advisers such as accountants, auditors and lawyers.
  • Public authorities, courts and regulators in Mauritius, where the law requires it.

6. Transfers outside Mauritius

Some of our service providers (for example hosting, email, Cloudflare and Google) may store or process personal data outside Mauritius. Where this happens, we only transfer personal data in line with section 36 of the DPA. For example, the recipient provides appropriate safeguards, the transfer is necessary to perform a contract with you, or you have given your consent.

7. How long we keep your personal data

  • Enquiries and contact-form messages: up to 2 years after our last contact, unless you become a customer.
  • Customer, supplier and accounting records: for as long as Mauritian law requires (for accounting records, generally at least 7 years).
  • Website logs and security data: for a limited period, only as long as needed for security and troubleshooting.

When personal data is no longer needed, we delete it or anonymise it.

8. How we protect your personal data

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include encrypted (HTTPS) connections, access limited to authorised staff, security monitoring and regular updates. If a personal data breach occurs, we will notify the Data Protection Commissioner where required, without undue delay and where feasible within 72 hours. We will also inform you where the breach is likely to put your rights and freedoms at high risk.

9. Your rights

Under the DPA you have the right to:

  • Access the personal data we hold about you and receive a copy, free of charge.
  • Rectify personal data that is inaccurate or incomplete.
  • Erase your personal data, or restrict how we use it, in the circumstances set out in the DPA.
  • Object to our use of your personal data, including at any time to direct marketing.
  • Not be subject to a decision based solely on automated processing that significantly affects you.
  • Withdraw your consent at any time, where we rely on consent. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, email admin@soilplusltd.com. We may ask you to confirm your identity. We will reply within one month.

10. Complaints

If you have a concern about how we handle your personal data, please contact us first and we will do our best to resolve it. You also have the right to lodge a complaint with the Data Protection Commissioner:

  • Data Protection Office, 5th Floor, SICOM Tower, Wall Street, Ebène, Mauritius
  • Phone: +230 460 0251
  • Website: dataprotection.govmu.org

11. Children

Our website and products are intended for adults and businesses. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. If you believe a child has sent us personal data, please contact us and we will delete it.

12. Other websites

Our website links to other sites, including our social media pages (LinkedIn, Instagram, Facebook and WhatsApp). These sites have their own privacy policies, and we are not responsible for how they process personal data.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. We will highlight significant changes on this website.