Privacy Notice

Last updated: 11 July 2026

DJ 360 Degree Car Wash Ltd, trading as CAR360° Car Wash ("we", "us", "our"), operates the car wash at Victoria Urban Terminal, Port Louis, and the booking and loyalty services available at car360.mu. We are the data controller for the personal data described in this notice, and we handle it in accordance with the Data Protection Act 2017 of the Republic of Mauritius.

This notice explains what personal data we collect, why, how we protect it, who we share it with, and the rights you have. If anything here is unclear, please contact us using the details at the end.

The personal data we collect

We only collect what we need to run the wash, your bookings, and — if you choose to join — the loyalty programme.

When you make or request a booking, we collect your title and name, your mobile and, where you provide it, WhatsApp number and email address, together with your vehicle registration, type, and any model or colour details you give, the wash and add-ons you want, your preferred date and time, and any notes you add to your request.

When you enrol in the loyalty programme, we collect your name, mobile number, and vehicle registration, and we keep a record of the stamps you earn and rewards you receive, along with the consent you give at enrolment.

When you pay, we record the services purchased, the amount, and the method of payment (cash, Juice, or card). We do not store card numbers; card and Juice payments are handled by the payment provider.

When you use the website, we collect standard technical information such as your device and connection details and basic security logs, which help us keep the service running safely.

How we use your data, and our legal basis

Consent and marketing

We keep three things separate, so you are always in control:

An operational notice at booking — this is how we tell you your booking is being handled; it is not marketing.

A loyalty consent given only if you enrol, covering the running of your loyalty card.

A separate marketing opt-in — we will only send you offers or promotions if you have actively ticked to allow it. You can withdraw this at any time, and we will stop, without affecting your bookings or your loyalty card.

Who we share your data with

We do not sell your data. We share it only where necessary:

With our technology providers who host the service on our behalf — our database is hosted by Supabase and our website by Vercel, both acting under our instructions.

With a partner business at Victoria Urban Terminal, but only where you have used a voucher issued by that business, and only to the extent needed to validate the voucher and settle the claim.

With our payment providers, who process card and Juice payments under their own terms.

With our professional advisers, and with public authorities or regulators where we are required to do so by law.

Where your data is stored

Our systems store data on servers located in the European Union (Frankfurt, Germany). This means some of your data is transferred outside Mauritius. The European Union maintains a high standard of data protection, and we rely on that protection, together with our providers' security commitments, to safeguard your data during and after transfer.

How long we keep it

We keep booking and transaction records for as long as we need them to run the business and to meet our tax and accounting obligations under Mauritian law — generally up to [5] years. Loyalty data is kept while your card is active and for up to [12] months after it becomes inactive, after which the card balance is cleared. Marketing consent is kept until you withdraw it. When data is no longer needed, we delete it or render it anonymous.

How we protect your data

We take security seriously. Access to customer data is restricted to authorised roles and enforced at the database level; our connections are encrypted; administrative access to our systems is protected by two-factor authentication; and we take regular backups. We keep these measures under review as the service grows.

Your rights

Under the Data Protection Act 2017 you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to erase your data where there is no lawful reason for us to keep it;
• ask us to restrict how we use your data;
• object to our use of your data, including for direct marketing — if you object to marketing, we will stop;
• receive your data in a portable format where that applies; and
• withdraw any consent you have given, at any time.

To exercise any of these rights, contact us at car360carwashvut@gmail.com. We will respond within the time the law allows, normally one month.

Complaints

If you are not satisfied with how we have handled your data, you can lodge a complaint with the Data Protection Office of Mauritius:

We would appreciate the chance to resolve your concern first, so please contact us before approaching the Office.

Changes to this notice

We may update this notice from time to time. The current version is always the one published on this page, with the date shown at the top.

Contact us