Introduction
Welcome to THE KISS SHOP, accessible at https://www.thekissshop.com.
THE KISS SHOP is a Mauritius-based online skincare and cosmetics retailer operated by DD IMPORT LTD, the exclusive distributor of ROJUKISS products in Mauritius. We also manage THE KISS SHOP and ROJUKISS Mauritius social media pages to promote our products and communicate with customers.
We are committed to protecting the privacy, confidentiality and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, process, store, disclose and protect personal information when you visit our website, create an account, purchase products, participate in promotions or communicate with us.
We process personal information in accordance with the Mauritius Data Protection Act 2017 and other applicable legislation. Where consent is legally required, we will obtain it separately. Simply visiting our website does not constitute consent to optional data processing.

1. Business Identity and Data Controller
For the purposes of applicable data protection legislation, the business responsible for determining how and why personal information is processed is:

• Trading Name: THE KISS SHOP

• Legal Entity: DD IMPORT LTD

• Business Registration Number: C26236812

• Registered Business Address: Lot 31 Montreal 3, Coromandel, Mauritius

• Website: https://www.thekissshop.com

• General Email: [email protected]

• Privacy Email: [email protected]

• Telephone: +230 5909 9888
  DD IMPORT LTD, trading as THE KISS SHOP, is referred to throughout this policy as “THE KISS SHOP”, “we”, “our” or “us”.

2. Scope of This Privacy Policy
This policy applies to personal information collected and processed through:

• THE KISS SHOP website and WooCommerce online store.

• Customer accounts, registrations and shopping carts.

• Product purchases, pre-orders, payments and deliveries.

• Loyalty points, rewards, coupons and promotional activities.

• Contact forms and customer service inquiries.

• Email, telephone and messaging communications.

• THE KISS SHOP and ROJUKISS Mauritius social media accounts.

• Customer reviews, feedback and testimonials.

• Website analytics, cookies and related technologies.

• Other authorised business activities involving customer information.
  External service providers, including payment processors and social media platforms, may also process information under their own privacy policies.

3. Personal Information We Collect
We collect personal information reasonably necessary to provide our products, services and customer support.

3.1 Personal and Contact Information
We may collect full names, billing and delivery addresses, email addresses, telephone numbers, delivery instructions and other information voluntarily provided by customers.

3.2 Customer Account Information
When customers register an account, we may process usernames, email addresses, authentication credentials, saved addresses, purchase history, account preferences, loyalty points and rewards records. Customer passwords are managed through WordPress authentication systems, and we do not need access to original passwords to administer customer accounts.

3.3 Order and Transaction Information
We may collect products and quantities purchased, order numbers, purchase dates, order values, applicable discounts, payment methods, payment confirmation status, billing and delivery details, fulfilment information, and cancellation, return or refund records.

3.4 Payment Information
Payments may be processed through authorised banks, electronic payment gateways and other payment methods offered at checkout. Depending on the selected payment method, payment service providers may collect payment card details, banking information or authentication information.
THE KISS SHOP does not intentionally collect or retain complete payment card numbers, card security codes or online banking passwords in its own customer database. We may retain payment confirmations, receipts and transaction references for order verification, accounting, refunds and legal compliance.

3.5 Website and Technical Information
When you access our website, we may process IP addresses, browser and device information, operating systems, pages visited, dates and times of access, website interactions, referral sources, cookie identifiers and relevant security information.

3.6 Customer Communications
We may retain relevant communications received through website forms, email, telephone, WhatsApp, Facebook Messenger, Instagram or other official channels. This may include inquiries, complaints, payment confirmations, order instructions and related correspondence.

3.7 Loyalty Points and Promotions
Customers participating in our loyalty programme or promotional activities may have their purchase history, points earned, points redeemed, rewards balances, coupon usage and promotional participation records processed. This information is used to administer rewards, maintain accurate records and prevent misuse.

3.8 Reviews and Customer-Submitted Content
When customers submit reviews, feedback, testimonials, photographs or videos, we may process the information voluntarily provided. Public reviews may display the customer’s chosen name and review content. Where legally required, we will obtain additional permission before using identifiable customer photographs, private communications or testimonials in separate advertising campaigns.

3.9 Sensitive Personal Information
THE KISS SHOP does not ordinarily require sensitive personal information to sell cosmetics and skincare products. Customers should avoid sending unnecessary medical records, identity documents or financial credentials through ordinary communication channels. Where sensitive information is processed for a lawful purpose, appropriate additional safeguards will be applied.

4. Sources of Personal Information
We may collect information when customers browse our website, register accounts, add products to shopping carts, place orders, contact customer service, subscribe to promotions, participate in loyalty programmes, interact with our social media pages or submit feedback.
We may also receive limited information from authorised payment providers, delivery partners and technology service providers where necessary to fulfil orders or operate our services.

5. How We Use Personal Information

5.1 Order Processing and Fulfilment
We use personal information to confirm orders, verify payments, prepare and dispatch products, arrange collection or delivery, manage pre-orders and process applicable cancellations, returns or refunds.

5.2 Customer Service
We use relevant information to respond to inquiries, provide product information, resolve complaints and assist customers before and after purchases.

5.3 Customer Account Management
We process account information to maintain login access, saved addresses, order histories and related customer services.

5.4 Loyalty Programmes
We use relevant purchase and account information to calculate points, administer rewards, apply discounts and process redemptions.

5.5 Marketing and Promotions
Where permitted by law and, where required, with consent, we may send information concerning ROJUKISS products, new arrivals, product launches, discounts, special offers, loyalty rewards, promotional campaigns and company announcements. Customers may withdraw consent for optional marketing communications at any time.

5.6 Website Analytics and Improvement
We may analyse website activity to understand visitor behaviour, identify popular products, improve website performance and enhance customers’ shopping experiences.

5.7 Security and Fraud Prevention
We may process relevant information to detect suspicious activity, prevent fraud, protect customer accounts and maintain website security.

5.8 Legal and Business Obligations
We may process and retain information for accounting, taxation, financial reporting, regulatory compliance, dispute resolution and other lawful business purposes.

6. Legal Grounds for Processing Personal Information
THE KISS SHOP processes personal information on applicable lawful grounds recognised under the Mauritius Data Protection Act 2017, including consent where legally required, performance of a contract, pre-contractual steps, compliance with legal obligations, legitimate interests where permitted and other lawful grounds recognised by applicable legislation.
Where consent is required, individuals may withdraw it in accordance with applicable law. Withdrawal does not affect processing that was lawful before withdrawal or processing supported by another lawful basis.

7. Cookies and Cookie Consent
THE KISS SHOP uses cookies and similar technologies to support website functionality and online shopping. Cookies are small data files or identifiers that may be stored on a visitor’s device. Our WordPress website includes WPConsent to support cookie management and visitor consent preferences.

7.1 Essential Cookies
Essential cookies support shopping carts, checkout, customer login sessions, account authentication, security and necessary website preferences. These cookies are required for the normal operation of our online store.

7.2 Analytics Cookies
Where enabled, analytics cookies help us understand website traffic, popular pages, visitor interactions and website performance. Non-essential analytics technologies are subject to applicable consent requirements.

7.3 Marketing and Advertising Cookies
Where advertising tools are enabled, cookies or similar identifiers may be used to measure advertising performance and support promotional activities. These technologies will be managed in accordance with applicable privacy and consent requirements.

7.4 Managing Cookie Preferences
Visitors may manage available cookie preferences through our website’s cookie consent controls. Cookies can also be restricted or deleted through browser settings. Disabling essential cookies may affect shopping cart, login or checkout functionality.

8. Google Analytics and Website Measurement
THE KISS SHOP has installed MonsterInsights, a WordPress plugin that can connect our website to Google Analytics 4. We intend to use Google Analytics 4 to understand website traffic, analyse visitor interactions and improve our online store.
Once enabled, Google Analytics may process information including pages visited, approximate geographical location, browser and device information, traffic sources, website interactions and relevant product activity. Google Analytics may use cookies and related technologies, subject to applicable privacy and consent requirements.
Information processed by Google is also subject to its own privacy terms.
Google Privacy Policy: https://policies.google.com/privacy

9. Advertising and Marketing Tracking
THE KISS SHOP may use authorised digital advertising services, including platforms operated by Meta, Google or other providers, to promote products and measure marketing performance.
Where implemented, these technologies may process website visits, product interactions, advertising identifiers, shopping cart activity and conversion events. Optional advertising tracking will be implemented in accordance with applicable legal requirements and consent choices. We will update relevant privacy disclosures when additional advertising technologies are introduced.

10. Official Social Media Pages
THE KISS SHOP operates and manages social media accounts associated with the promotion, distribution and sale of ROJUKISS skincare products in Mauritius.

10.1 THE KISS SHOP
THE KISS SHOP is our primary retail brand, providing product information, promotions, customer service and general business communications.

• Facebook: https://www.facebook.com/thekissshopmauritius

• Instagram: https://www.instagram.com/thekissshopmauritius

• TikTok: https://www.tiktok.com/@thekissshopmauritius

10.2 ROJUKISS Mauritius
ROJUKISS Mauritius is our dedicated social media presence for ROJUKISS products, promotional campaigns, skincare information and customer engagement in Mauritius. It is managed as part of our authorised local distribution activities.

• Facebook: https://www.facebook.com/rojukissmauritius/

• Instagram: https://www.instagram.com/rojukissmauritius

• TikTok: https://www.tiktok.com/@rojukissmauritius

10.3 Information Collected Through Social Media
When individuals interact with either brand, we may process information voluntarily provided to respond to inquiries, assist with purchases, handle complaints, administer promotions and provide customer support.
Personal information received through these accounts may be processed by DD IMPORT LTD, trading as THE KISS SHOP, in accordance with this Privacy Policy.

10.4 Third-Party Social Media Platforms
Facebook, Instagram, TikTok and other social media providers may independently collect and process personal information according to their own privacy policies. Customers should review the privacy policies and available settings of the relevant platforms.
We will obtain any permission required by law before using identifiable private customer messages, photographs or testimonials in separate advertising materials.

11. Sharing and Disclosure of Personal Information
THE KISS SHOP does not sell customers’ personal information. We may share limited personal information with authorised third parties where reasonably necessary for business operations, order fulfilment or legal compliance.

11.1 Payment Providers
Banks and authorised payment processors may receive relevant information to process payments, verify transactions and manage refunds.

11.2 Delivery and Logistics Providers
Postal services, couriers and delivery partners may receive customer names, contact numbers, delivery addresses and relevant order instructions.

11.3 Website and Technology Providers
Hosting companies, ecommerce providers, security services and authorised technical support providers may process information necessary for website operation and maintenance.

11.4 Marketing and Analytics Providers
Where enabled and lawfully used, authorised analytics, advertising and communication providers may process information necessary to provide their services.

11.5 ROJUKISS Manufacturer and Business Partners
As the exclusive distributor of ROJUKISS in Mauritius, we may communicate with the manufacturer, suppliers and authorised partners regarding product authenticity, quality, safety, customer support and commercial matters. Personal customer information will only be disclosed where reasonably necessary and supported by an appropriate lawful basis.

11.6 Professional Advisers and Authorities
Information may be disclosed to accountants, auditors, legal advisers, regulators, courts or government authorities where legally required or otherwise lawfully justified. We expect service providers handling personal information on our behalf to maintain appropriate confidentiality and security safeguards.

12. International Transfers of Personal Information
Some website services, hosting systems, payment providers, analytics tools and business partners may operate outside Mauritius. As a result, personal information may be stored, accessed or processed in other countries.
Where international transfers occur, THE KISS SHOP will take appropriate steps to comply with the Mauritius Data Protection Act 2017, including applicable safeguards and lawful transfer mechanisms.

13. Personal Data Security and Breach Management
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure, misuse and destruction. These measures may include secure website connections, password-protected administration, restricted access to customer records, security updates, website monitoring, appropriate payment processing arrangements and confidentiality safeguards for service providers.
Although we take reasonable precautions, no electronic storage system or internet transmission can be guaranteed completely secure. Customers should protect their account credentials and contact us if they suspect unauthorised access.

13.1 Personal Data Breaches
If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the incident. Where required by the Mauritius Data Protection Act 2017, we will notify the Data Protection Commissioner without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to affected individuals, we will notify those individuals as required by applicable law.

14. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy or to comply with applicable legal obligations.

14.1 Customer Accounts
Account information may be retained while an account remains active or for a further period where necessary for lawful business purposes.

14.2 Orders and Financial Records
Invoices, payment records and transaction information are retained for applicable accounting, taxation, auditing and legal retention periods.

14.3 Customer Communications
Customer service communications may be retained as reasonably necessary to manage inquiries, complaints and disputes.

14.4 Marketing Information
Marketing information may be retained while an appropriate lawful basis applies, subject to withdrawal of consent and other applicable rights.

14.5 Loyalty Records
Loyalty and rewards information may be retained as necessary to administer points, redemptions and customer benefits.

14.6 Website and Security Records
Technical and security information may be retained for periods reasonably necessary for maintenance, troubleshooting, fraud prevention and security.

14.7 Deletion of Information
Where personal information is no longer necessary and continued retention is not legally required, we will take appropriate steps to delete, anonymise or securely dispose of it.

15. Rights of Individuals
Under the Mauritius Data Protection Act 2017, individuals have rights concerning their personal information, subject to applicable conditions and exceptions. These may include:

• Right to information about personal data processing.

• Right to access personal information.

• Right to request correction of inaccurate information.

• Right to request erasure in qualifying circumstances.

• Right to request restriction of processing.

• Right to object to certain processing activities.

• Right to withdraw consent where applicable.

• Applicable rights to data portability.

• Applicable protections concerning automated decision-making.

• Right to lodge a complaint with the Mauritius Data Protection Commissioner.

15.1 Exercising Your Rights
To submit a privacy request, contact [email protected]. Please clearly describe your request and provide sufficient information to identify the relevant records. We may request reasonable identity verification before responding. We will review and respond to requests within applicable legal timeframes.
Certain information may need to be retained despite a deletion request where required by law or another applicable lawful basis.

15.2 Complaints
Customers may contact THE KISS SHOP regarding concerns about how their personal information is handled. They may also lodge complaints with the Mauritius Data Protection Office.
Official Website: https://dataprotection.govmu.org/

16. Children and Minors
THE KISS SHOP recognises the importance of protecting children’s personal information. In accordance with the Mauritius Data Protection Act 2017, where consent is required for processing the personal information of a child under 16 years of age, appropriate consent must be obtained from the person holding parental responsibility.
We do not knowingly collect or process children’s personal information in circumstances prohibited by applicable law. Customers under 18 years of age should seek permission or assistance from a parent or legal guardian before making purchases, registering accounts or submitting personal information.
If we become aware that information has been collected unlawfully from a child, we will take appropriate steps to address the situation.

17. Product Images, Artificial Intelligence and Marketing Materials
THE KISS SHOP uses product photographs, promotional graphics, illustrations, digitally enhanced images, videos and other visual materials to present and advertise ROJUKISS skincare products.
Certain promotional materials may include digitally enhanced photographs, edited backgrounds, artistic compositions, computer-generated illustrations, artificial intelligence-generated images, simulated product arrangements and illustrative skincare results or application scenes.
Some promotional visuals may therefore differ from the exact physical appearance, size, colour, texture, proportions, packaging or surrounding environment of products offered for sale. These materials are used for advertising, presentation and illustrative marketing purposes.
We aim to provide accurate information about product identity, net contents, ingredients, descriptions and application instructions. Customers should refer to relevant product descriptions and actual packaging for further information. Product packaging, labels and formulations may change following manufacturer updates.
Illustrated skincare results should not be interpreted as guaranteed individual results. Marketing materials are not intended to misrepresent the identity, quantity, nature or material characteristics of products. Nothing in this section excludes or restricts customer rights under applicable Mauritius consumer protection legislation.

18. Product Information and Skincare Guidance
Product descriptions, skincare recommendations, ingredient explanations and promotional information on THE KISS SHOP website are provided for general cosmetic and product information purposes.
Individual skincare results may vary depending on skin type, sensitivity, product compatibility and application. Our product information is not intended to replace medical advice, diagnosis or treatment.
Customers should review product ingredient lists, follow application instructions, observe precautions and seek professional advice where appropriate.

19. Third-Party Websites and Services
Our website may contain links to external websites, payment services, social media platforms or other third-party services. These providers may operate under their own privacy policies and terms.
THE KISS SHOP does not control the independent privacy practices of third-party websites. However, we remain responsible for meeting legal obligations applicable to our own collection, use and disclosure of personal information.
Customers are encouraged to review relevant third-party privacy policies.

20. Marketing Preferences and Communications
THE KISS SHOP may send promotional communications where there is an appropriate lawful basis and any required consent has been obtained.
Customers may stop receiving optional marketing communications through available unsubscribe options or by contacting [email protected]. We will process marketing opt-out requests in accordance with applicable law.
Customers who unsubscribe may continue to receive necessary transactional communications, including order confirmations, payment notifications, delivery updates and account security messages.

21. Changes to This Privacy Policy
THE KISS SHOP may update this Privacy Policy to reflect changes in business operations, website functions, technology, services or legal requirements.
Updated versions will be published at https://www.thekissshop.com, and the date at the beginning of the policy will indicate when it was last updated.
Where required by law, we will provide additional notification or obtain consent for relevant changes. We encourage customers to review this policy periodically.

22. Contact Information
For privacy inquiries, general questions, complaints or requests relating to personal information, please contact:
THE KISS SHOP
Exclusive Distributor of ROJUKISS in Mauritius

• Operated By: DD IMPORT LTD

• Business Registration Number: C26236812

• Registered Address: Lot 31 Montreal 3, Coromandel, Mauritius

• Website: https://www.thekissshop.com

• General Inquiries: [email protected]

• Privacy and Data Protection: [email protected]

• Telephone: +230 5909 9888

Official Social Media: Refer to Section 10 for THE KISS SHOP and ROJUKISS Mauritius Facebook, Instagram and TikTok accounts.
We will review privacy-related requests and complaints in accordance with applicable legislation. Individuals may also contact the Mauritius Data Protection Office regarding their rights under the Data Protection Act 2017.
Mauritius Data Protection Office: https://dataprotection.govmu.org/