Privacy Policy

Last Updated: January 11, 2026

1. Introduction

This Privacy Policy describes how Bukizi ("we," "our," or "us") collects, uses, and protects your personal information when you use our WhatsApp Business messaging service for booking appointments and managing services.

We are committed to protecting your privacy and ensuring compliance with the Data Protection Act 2017 of Mauritius and applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Phone Number: Your WhatsApp phone number used to communicate with our service
• Messages: All messages you send to our WhatsApp Business account
• Booking Information: Details about appointments, services, dates, and preferences you share with us
• Personal Preferences: Any preferences or requirements you communicate during interactions

2.2 Information Automatically Collected

• Message Metadata: Timestamps, message delivery status, and read receipts
• Interaction Data: Frequency and patterns of your communications with our service
• Device Information: Basic device information provided by WhatsApp (if available)

3. How We Use Your Information

We use the information we collect to:

• Provide Services: Process and manage your appointment bookings and service requests
• Communicate: Send you booking confirmations, reminders, and respond to your inquiries
• Improve Service: Analyze usage patterns to enhance our service quality
• Compliance: Meet legal obligations and respond to lawful requests

4. Legal Basis for Processing (Mauritius DPA 2017)

Under the Data Protection Act 2017 of Mauritius, we process your personal data based on:

• Consent: When you voluntarily provide information through WhatsApp messages
• Legitimate Interest: To provide and improve our booking services
• Contractual Necessity: To fulfill our obligations in providing booking services
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

5.1 Third-Party Services

• Meta/WhatsApp: Your messages and phone number are processed through WhatsApp's platform, subject to Meta's Privacy Policy
• Service Providers: We may share data with trusted service providers who assist in operating our service (under strict confidentiality agreements)

5.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Typically, we retain booking and communication data for a period of 12 months after your last interaction, unless a longer retention period is required by law.

7. Your Rights Under Mauritius Data Protection Act 2017

As a data subject, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the information provided in Section 10.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Secure data storage and backup procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed and stored outside Mauritius, including through WhatsApp's servers. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending a notification through WhatsApp (for significant changes)

Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

Email: cedpoilly@gmail.com

Location: Mauritius

The business owner acts as the Data Protection Officer for Bukizi.

13. Complaints

If you believe we have not handled your personal data in accordance with the Data Protection Act 2017, you have the right to lodge a complaint with:

Data Protection Office

5th Floor, SICOM Tower, Wall Street

Ebene Cybercity, Mauritius

Phone: +230 460 0251

Email: dpo@govmu.org

Website: https://dataprotection.govmu.org

This Privacy Policy is compliant with the Data Protection Act 2017 of Mauritius and Meta WhatsApp Business API requirements.