Cookie Policy

commerce.mu

Last updated: 23 May 2026

1. What Cookies Are

Cookies are small text files placed on your device by websites you visit. We also use similar technologies (local storage, pixels, SDKs). They allow a website to recognise your device, remember preferences, measure performance and deliver relevant content.

2. Categories Used on commerce.mu

Essential cookies

Necessary for the website to function: session identifiers, security tokens (CSRF), load-balancing and the storage of your cookie-consent choices. These do not require consent and cannot be disabled through the banner. Retention: session to 12 months.

Preference cookies

Remember non-essential choices such as interface language and previously viewed content. Loaded only after consent. Retention: up to 12 months.

Analytics cookies

We use two web-analytics services — Yandex.Metrica (Yandex LLC) and Google Analytics 4 (Google LLC, United States) — to understand aggregate visitor behaviour (pages viewed, session duration, traffic sources, conversion events). Both run on page load on the basis of our legitimate interest, not consent. Where technically possible, IP addresses are truncated and form fields containing personal data are masked from session recording. You may object and opt out as described in section 4. Retention: Yandex.Metrica up to 26 months; Google Analytics 4 up to 14 months.

Marketing cookies

Currently none are deployed. Should we introduce advertising or retargeting pixels in future, they will appear in this category and will load only after a separate, affirmative consent.

CategoryPurposeRetention
Essential Core site functionality, security, cookie-consent storage. Cannot be disabled. Session – 12 months
Preferences Remember interface language and other non-essential user choices. Up to 12 months
Analytics Yandex.Metrica and Google Analytics.

Yandex.Metrica (Yandex LLC), including the "Webvisor" tool. Runs on page load on the basis of our legitimate interest. Data collected: session and device identifiers, pages and sections viewed, traffic source and campaign parameters (UTM), scroll depth, time on page, clicks and hovers on interactive elements, focus on form fields (without storing the values entered), pointer movement. Excluded from recording by native masking: values typed into form fields (name, phone, email, comments).

Google Analytics 4 (Google LLC, United States). Runs on page load on the basis of our legitimate interest, in the same way as Yandex.Metrica. Cookies: _ga (pseudonymous browser identifier, 24 months), _ga_3FJ2DY4CC6 (per-property session state, 24 months). Data collected: pseudonymous browser identifier (client_id), pages viewed, traffic source and campaign parameters (UTM), device and browser characteristics, approximate location. IP addresses are truncated (anonymize_ip); Google Signals and advertising personalisation are disabled and no Google Ads linking is used. Data is transferred to Google LLC (United States) — see our Privacy Notice, section 7. You can opt out via the Google Analytics Opt-out Browser Add-on.

Google Tag Manager (Google LLC, USA). The Site uses Google Tag Manager, a tag-management service that loads and executes the Site's analytics configuration. Google Tag Manager itself does not collect personal data, does not set analytics or advertising cookies, and does not build user profiles; it only manages which analytics tags run on the Site. The tags managed through the container are limited to the website-performance analytics described above (Google Analytics 4 and Yandex.Metrica); no advertising, remarketing, Google Ads conversion, Floodlight or Google Signals tags are deployed. Advertising storage is set to "denied" at the tag-manager level (Consent Mode: ad_storage / ad_user_data / ad_personalization = denied). Loading occurs on page load on the basis of our legitimate interest, identically to Google Analytics 4. Data processed by Google Tag Manager (technical request data) is transferred to Google LLC (United States) — see the cross-border transfer section. Google's privacy policy: policies.google.com/privacy.		 Yandex.Metrica up to 26 months; Google Analytics up to 14 months
Marketing None currently deployed. Any future retargeting or advertising pixel will require a separate, affirmative consent. —

3. Legal Basis

Essential cookies and the analytics services described above are placed and run on the basis of our legitimate interest (Article 6(1)(f) GDPR) in operating, securing and measuring the website; for the analytics services you have the right to object and to opt out as described in section 4. Preference and marketing cookies are placed only with your prior, informed and freely given consent (Articles 6(1)(a) and 7 GDPR). Under the Mauritius Data Protection Act 2017, the same processing is justified under Section 28(b) consent and Section 28(f) legitimate interest.

4. How to Manage Cookies

On your first visit you are presented with a cookie banner allowing you to accept all, accept only essential, or open settings to choose by category. You can change your choice at any time via the "Cookie settings" link in the footer.

You may also configure your browser to refuse or delete cookies. Note that disabling essential cookies may impair the functioning of the site.

To opt out of Yandex.Metrica, use the Yandex opt-out instructions. To opt out of Google Analytics across all browsers, install the Google Analytics Opt-out Browser Add-on.

Manage consent

Open the cookie panel to choose which categories to allow, or to withdraw a consent you have previously given.

5. Third-Party Cookies

Our analytics providers may set cookies on their own domains when their scripts run on our site, each with its own data-processing policy:

We do not currently embed third-party advertising networks, social-media widgets or video players that set cookies. If this changes, this section will be updated and your prior consent will be sought before any such cookie is set.

6. Contact

Questions about this Cookie Policy: privacy@commerce.mu.