This Privacy Policy explains what personal information Nylex Shoes collects when you visit our website, contact us, shop with us or sign up for our newsletter, and how we look after it.
1. Who we are
This website, www.nylexshoes.com, is operated by Nylex Shoes (also trading as NYLEX and Nylex Footwear), a footwear manufacturing and retail business founded in 2019 and based at 16 J Charle Oliver, Port Louis, Mauritius 11601.
For the purposes of the Mauritius Data Protection Act 2017 (the "DPA"), Nylex Shoes is the controller of the personal data described in this policy.
If you have any question about this policy or about how we handle your information, you can reach us at:
- Email: [email protected] (please write "Privacy" in the subject line)
- Post or in person: Nylex Shoes, 16 J Charle Oliver, Port Louis, Mauritius 11601
- Phone: +230 240 7325, +230 5752 3627 or +230 5496 9415 (Mon–Fri 9:00–17:30, Sat 9:00–13:00)
2. The personal data we collect
We try to collect only what we genuinely need. The type of information depends on how you interact with us. Below we set out what we collect, grouped by where it comes from.
Information you give us directly
- Contact and enquiry form: your name, email address, phone number (optional), the subject of your enquiry and your message. If you ask about a specific product, size or service, we record those details too.
- Newsletter sign-up: your email address and, if you provide it, your first name. We also keep a record of when and how you subscribed so that we can show you gave consent.
- Orders placed by enquiry, phone or at the showroom: your name, phone number, email address, delivery address, the products, sizes and colours you order, and any special instructions for delivery.
- Custom, bespoke and fitting services: foot measurements, shoe size, fit preferences and, where relevant, notes about comfort needs you choose to share with us so we can make or recommend suitable footwear. Please only tell us what you are comfortable sharing; we do not need medical records.
- Business customers: the names, job titles, work email addresses and phone numbers of contacts at retailers, wholesale buyers, corporate clients and private label partners, plus company details, order history and billing information.
Information created when you buy from us
- Transaction records: what you bought, the price, the date, the payment method used (cash, card, PayPal or bank transfer) and invoice or receipt numbers.
- Payment details: when you pay by card or PayPal, your payment is processed by the relevant bank, card terminal provider or PayPal. We do not see or store your full card number. For bank transfers, we see the name of the account holder and the reference you give, as shown on our bank statement.
- Delivery and returns records: delivery status, the courier used, proof of delivery and details of any returns, exchanges or warranty claims.
Information collected automatically on our website
- Server and security logs: like almost every website, our hosting provider automatically records technical information when pages are requested, such as your IP address, browser type, device type, the page requested, the referring page and the date and time. These logs are used to keep the site running securely and to diagnose faults.
- Browser storage (local storage): our website stores a small number of settings in your own browser, such as your cookie consent choice and your wishlist. See our Cookie Policy.
Information from other sources
Occasionally we receive information about you from third parties, for example a delivery courier confirming that a parcel was delivered or could not be delivered, or a payment provider confirming that a payment succeeded or was reversed.
We do not intentionally collect special categories of personal data, such as health data. Any comfort notes you choose to share are used only to fit or make your shoes.
3. Why we use your data and our legal bases
Data protection law requires us to have a valid legal reason, known as a "legal basis", for each way we use your personal data. The table below summarises our main purposes.
| Purpose | Data used | Legal basis |
|---|---|---|
| Replying to enquiries sent through our contact form, email, phone or messaging | Name, contact details, message content | Taking steps at your request before entering into a contract; our legitimate interest in responding to people who contact us |
| Processing and fulfilling orders, including delivery and showroom pickup | Name, contact details, delivery address, order details | Performance of a contract with you |
| Taking payment, issuing invoices and keeping accounting records | Name, transaction and payment records | Performance of a contract; compliance with legal obligations (tax and accounting) |
| Handling returns, exchanges, refunds and warranty claims | Order details, correspondence, photos you send | Performance of a contract; compliance with consumer protection obligations |
| Making custom, bespoke and private label footwear | Measurements, specifications, approvals, correspondence | Performance of a contract; your consent for any sensitive comfort or health notes |
| Sending our newsletter and promotional emails | Email address, first name, subscription record | Your consent, which you can withdraw at any time |
| Managing relationships with wholesale, corporate and private label customers | Business contact details, order history | Performance of a contract; our legitimate interest in running our business |
| Keeping our website secure and working properly | Server logs, IP address, device information | Our legitimate interest in protecting our website and customers |
| Preventing fraud and defending legal claims | Transaction records, correspondence | Our legitimate interest; compliance with legal obligations |
Where we rely on legitimate interests, you have the right to object (see "Your rights" below).
4. Our contact and enquiry form
When you submit the form on our contact page, the information you enter is sent to us so that we can reply. We use it only to deal with your enquiry and any order or service that follows from it. We do not add you to our newsletter simply because you sent an enquiry; the newsletter is a separate, opt-in service.
Please do not include sensitive information, such as card numbers, in the form.
5. Our newsletter
If you sign up for our newsletter, we will send you occasional emails about new collections, seasonal styles, shoe care advice, showroom news and special offers. We only send these emails to people who have actively opted in.
- Every newsletter contains an unsubscribe link, and you can also unsubscribe by emailing [email protected].
- When you unsubscribe, we stop sending marketing emails straight away (allow a few days for any email already scheduled). We keep a minimal record of your email address on a "do not contact" list so we respect your choice in future.
- If we use an email marketing service to send the newsletter, that provider will process your email address on our behalf and under our instructions.
6. Cookies and local storage
Our website uses your browser's local storage to remember a few things for you. In summary:
- Cookie consent choice (nylex_cookie_consent): remembers whether you accepted or declined non-essential storage, so the banner does not appear on every page.
- Wishlist (nylex_wishlist): remembers the products you have saved to your wishlist. It stays on your device and is not sent to us.
- Newsletter status (nylex_newsletter): remembers that you have already signed up or dismissed the sign-up prompt.
We do not currently use third-party advertising cookies, retargeting pixels or social media tracking tools. If in future we introduce privacy-friendly analytics to understand how visitors use the site, we will update this policy and our Cookie Policy, and we will ask for your consent where the law requires it.
7. Who we share your data with
We do not sell, rent or trade your personal data. We only share it where necessary, with organisations that help us run our business, and only as much as they need. These include:
- Delivery couriers and transport providers: your name, phone number and delivery address, so they can deliver your order in Mauritius, to Rodrigues or overseas.
- Payment processors and banks: card terminal providers, card networks, PayPal and our bank process payments and refunds. They act under their own terms and privacy policies as well as their legal obligations.
- IT, website hosting and email providers: companies that host our website, provide our business email, store our files and provide any newsletter service. They process data on our behalf and may not use it for their own purposes.
- Professional advisers: accountants, auditors, lawyers and insurers, where needed for them to advise us or for us to meet legal obligations.
- Public authorities: tax authorities, police, courts or regulators, where the law requires it or to protect our legal rights.
8. International transfers
We keep our core business records in Mauritius, but some providers, such as email, hosting and payment services, may process data on servers abroad, for example in the European Union or the United States.
When personal data is transferred outside Mauritius, we take steps required by section 36 of the Data Protection Act 2017 to ensure it is protected. This may include relying on countries with adequate protection or on contractual safeguards such as standard data protection clauses. For visitors from the EU and EEA, transfers of your data to Mauritius and onward are handled in line with the GDPR's requirements for international transfers. You may contact us for more information about the safeguards in place.
9. How long we keep your data
We keep personal data only for as long as we need it for the purposes described in this policy, including to meet legal, accounting and reporting requirements. When it is no longer needed, we delete it or anonymise it.
| Type of data | How long we keep it |
|---|---|
| Enquiries that do not lead to an order | Up to 12 months after our last contact |
| Order, invoice, payment and accounting records | At least 7 years from the end of the financial year, or longer if required by Mauritian tax law |
| Returns, exchanges and warranty claims | For the life of the warranty plus 2 years |
| Custom and bespoke measurements and specifications | Up to 3 years after your last order, so we can remake your shoes, unless you ask us to delete them sooner |
| Newsletter subscriber data | Until you unsubscribe; a suppression record is kept afterwards so we do not email you again |
| Business customer contact details | For the duration of the business relationship and up to 3 years after it ends |
| Website server and security logs | Typically up to 90 days, depending on our hosting provider's settings |
| Browser local storage (consent, wishlist, newsletter status) | Stays on your device until you clear it; see our Cookie Policy |
10. How we protect your data
We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. These include:
- serving our website over an encrypted HTTPS connection;
- using password-protected accounts, with access limited to staff who need it for their work;
- choosing reputable service providers that offer appropriate security;
- not storing full card numbers; card payments are handled by the payment provider.
No website or email system can be guaranteed 100% secure. If we become aware of a personal data breach that is likely to put your rights at risk, we will notify the Data Protection Office and, where required, you, as set out in the DPA.
11. Your rights
Under the Mauritius Data Protection Act 2017, and the GDPR where it applies, you have the following rights over your personal data:
- Right of access: to ask whether we hold personal data about you and to receive a copy of it, along with information about how we use it.
- Right to rectification: to ask us to correct inaccurate data or complete incomplete data, for example if your delivery address or phone number changes.
- Right to erasure: to ask us to delete your personal data where there is no good reason for us to keep it. We may need to keep certain records, such as invoices, to meet legal obligations.
- Right to restriction: to ask us to pause using your data, for example while we check whether it is accurate.
- Right to object: to object to our use of your data based on legitimate interests, and to object at any time to direct marketing.
- Right to data portability: where the GDPR applies, to receive data you gave us in a structured, commonly used, machine-readable format, or to have it sent to another organisation where technically feasible.
- Right to withdraw consent: where we rely on your consent, such as for the newsletter, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
How to exercise your rights
- Email [email protected] with the subject "Privacy request", or write to us at our Port Louis address.
- Tell us which right you want to exercise and give enough detail for us to find your information, such as the name, email or phone number you used.
- We may ask you to confirm your identity before we act, to protect your data from being released to someone else.
- We will reply within one month. If your request is complex, we may need longer and will tell you why.
Complaining to the Data Protection Office
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to lodge a complaint with the Data Protection Office of Mauritius, the supervisory authority responsible for enforcing the Data Protection Act 2017. If you live in the EU or EEA, you may also complain to the data protection authority in your country of residence.
12. Children
We sell footwear for adults, and our website, newsletter and enquiry form are not directed at children. We do not knowingly collect personal data from anyone under 16 without the consent of a parent or guardian. If you believe a child has given us personal data without appropriate consent, please contact us and we will delete it.
13. Links to other websites
Our website may link to other websites, such as social media, maps or payment providers. We are not responsible for their content or privacy practices, so please read their privacy policies.
14. Changes to this policy
We may update this Privacy Policy from time to time, for example if we introduce new services, begin using analytics, change our service providers or if the law changes. The "last updated" date at the top of this page shows when it was last revised. Significant changes will be highlighted on our website.
15. Contact us
For any question, request or concern about your personal data, please contact:
Nylex Shoes
16 J Charle Oliver, Port Louis, Mauritius 11601
Email: [email protected]
Phone: +230 240 7325 / +230 5752 3627 / +230 5496 9415
You can also use the form on our contact page. Related policies: Cookie Policy, Terms and Conditions and Shipping and Returns Policy.
