Privacy Policy

Roulé Rodrigues, trading as Roulé Rodrigues, operating from Baie aux Huîtres, Rodrigues Island, Republic of Mauritius, is the controller of the personal data described here. Our full legal identity, including our Business Registration Number, is on our Legal Notice. You can reach us about anything on this page at bookings@roulerodrig.com.

• Booking and order details — your name, phone, email, what you booked or ordered, dates, times, and a delivery or pick-up address where one applies. We need this to perform the booking you asked for.
• Proof of payment — if you pay by bank transfer, the photo or PDF of the transfer slip you upload. It is stored privately and is opened only by us to confirm your payment, or by the business fulfilling your order.
• Payment status — whether an order is paid, and its reference. Card payments are handled by our payment provider; we never see or store your card number.
• Account data — if you create an account, your email and sign-in credentials, held by our authentication provider. We never see your password.
• Identity at handover — for a vehicle rental the operator may check your driving licence and ID in person. We do not store a copy unless you upload one.
• Driver location — if you are a driver working with us, your device reports its position roughly every 20 seconds while you are on an active job, so the customer and dispatch can see the delivery approaching. It is not collected when you are off duty. Customers’ own positions are not tracked: the “find me” button on the map runs in your browser and is not sent to us.
• Messages you send us — what you type to the Ti Roulé assistant, and anything you send us on WhatsApp or by email, so that we can answer you.
• Notifications — if you turn on alerts, the push subscription your browser issues, so we can tell you when an order is confirmed or on its way.
• Technical and usage data — pages viewed and actions taken, plus error reports when something breaks. If you are signed in, this activity is linked to your account identifier, so it is not anonymous. We use it to see what is broken and what people cannot find.

In plain terms, rather than legal labels:

• Because you asked us to — everything needed to take, confirm, deliver and get paid for your booking. Without it there is no booking.
• Because you switched it on — push notifications, and any marketing message. You can turn these off at any time without losing the service.
• Because we have to run a safe service — fraud prevention, error reporting, and keeping enough of a record to resolve a dispute about an order.
• Because the law requires it — accounting and tax records.

We do not sell your data and we do not share it for anyone else’s advertising. It reaches only:

• The business fulfilling your order — the vehicle operator, kitchen, shop, captain, therapist, guide or driver — and only what they need to serve you: your name, phone, what you ordered, and the address if they are delivering.
• Our payment provider, to take and confirm payment.
• Our hosting, database and email providers, who store and transmit the data on our behalf.
• Our analytics and error-reporting providers, for the technical data in section 2. Payment details, passwords and uploaded documents are deliberately kept out of those systems.
• WhatsApp, where you choose to contact us or a driver that way — those messages sit on Meta’s service under their terms, not ours.
• Authorities, where the law obliges us.

Our site, database and uploaded files are hosted by Vercel Inc. and Supabase, Inc. on infrastructure outside Mauritius. Using this site therefore involves your data being stored and processed abroad, by providers who commit to protecting it under their own data-protection terms. Both are named on our Legal Notice.

• Bookings, orders and payment records — kept while the booking is live, then retained for accounting and tax purposes.
• Uploaded transfer receipts — kept with the order they prove, for the same accounting period.
• Driver position history — kept only as long as it is useful to the job and to resolving a dispute about it, then removed.
• Assistant and support messages — kept while they are useful for supporting you.
• Technical and error data — kept for a short period by our providers under their own retention settings.
• Account data — kept until you ask us to close your account.

Exact retention periods are set by the operator in line with Mauritian accounting and tax obligations. Ask us at bookings@roulerodrig.com if you need the current figure for a specific record.

You can ask us to show you the personal data we hold about you, correct it if it is wrong, delete it, or stop using it for something. Write to bookings@roulerodrig.com and say what you want — no particular wording is needed. We will answer, and we may ask you to confirm your identity first so that we do not hand your data to someone else.

Some data we cannot delete on request: once an order has been paid for, the record of that transaction has to be kept for accounting and tax. We will tell you when that applies rather than quietly keeping it.

If you are not satisfied with how we handle your request, you may complain to the Data Protection Office of Mauritius.

The rights in section 7 — access, correction, erasure, objection, restriction, and getting a copy of the data you gave us in a portable form — are available to you at the same address, and we will deal with your request within one month. Where we rely on your consent you can withdraw it at any time, and where we rely on our own legitimate interest you can object and we will re-examine it. Your data is processed outside the EU and UK, as described in section 5.

We use browser storage to keep you signed in, to remember your language, and to hold your basket between pages — the site cannot work without these. We do not run advertising or ad-targeting trackers.

Our analytics tool sets no cookie and stores nothing on your device. It keeps an identifier in memory for the length of your visit and forgets it when you close the tab, which means we cannot tell a returning visitor from a new one — a trade we make on purpose. If you are signed in, it records the same opaque account identifier described in section 2, and nothing else about you. The error-reporting tool is described there too.

This service is intended for adults. We do not knowingly collect data from children. If a child has given us data, write to us and we will remove it.

When the service changes, this page changes with it, and the date at the top is updated. It is worth re-reading if you have not booked with us for a while.