Privacy policy

Your account: your mobile number, your name and, if you give it, your email address. Your PIN or password is only stored as a one-way hash, never in a form anyone can read.

Your bookings: the business, the service, the time, any note you add and what happened to the booking (for example confirmed, completed or cancelled).

What you add: reviews you write, messages you send to a business and the businesses you save as favourites.

Ratings from businesses: after a visit, a business can rate you as a customer. Businesses you book with can see your average rating.

If you run a business: your business details, opening hours, services and prices, staff names, the photos you upload and the clients you add.

Technical data: like any website, our server receives your IP address and browser details when you load a page. We use them to deliver the page and to stop abuse, for example by limiting repeated sign-in attempts.

To run your account and your bookings, and to show businesses the bookings made with them.

To send sign-in codes, booking confirmations and reminders by SMS or email.

To keep Fixe safe: preventing fraud, abuse and fake reviews.

To see which pages are useful, using visit totals that contain no personal data (see below).

To meet our legal obligations.

The business you book with sees your name, phone number, the booking details and any note you add.

Anyone visiting a business page can read the reviews on it, with the name on the booking.

Companies that help us run Fixe, such as hosting, SMS and email delivery, handle data only on our behalf and only for that purpose.

We don't sell your data and we don't use advertising trackers.

We share information with authorities only when the law requires it.

Fixe only stores what it needs to work: a sign-in token in your browser's storage so you stay signed in, a cookie that remembers your language (kept for one year), your light or dark theme, and whether you've closed the cookie notice.

We don't use advertising cookies, and we don't use cookies to count visits.

We count page visits to learn what's useful. Each visit is added to a daily total for that page, with where it came from, for example a QR poster or another website.

We don't set a cookie for this, and we store no IP address or identifier with the totals, so they can't be linked back to you.

If your browser sends a Do Not Track or Global Privacy Control signal, we don't count your visit at all.

Account details: while your account is open, and afterwards only as long as needed for the purposes above or as the law requires.

Sign-in codes expire after a few minutes. A sign-in lasts up to 30 days if you choose to stay signed in.

Records of SMS and emails sent: we keep only the most recent ones and delete older records automatically.

Visit totals contain no personal data.

You can ask to see the data we hold about you, to correct it, to delete it or to object to how we use it. You can change your name and email yourself in your account settings; for anything else, contact us.

If you're not happy with our answer, you can complain to the Data Protection Office of Mauritius.

PINs and passwords are hashed, connections to the live site are encrypted, provider keys are stored encrypted, and only a small number of administrators can access the admin tools. No system is perfectly secure, and we'll tell you if a breach affects your data.

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by message.