Back to order

Privacy notice

Who is responsible for your data

This website is the online ticket office of L'Aventure du Sucre, a museum in the former Beau Plan sugar factory at Pamplemousses, Mauritius.

The organisation responsible for your personal data (the "controller") is:

  • Sugarworld Ltd
  • Beau Plan, 21001, Pamplemousses, Mauritius
  • Email: dpo@terra.co.mu

For any question about your data or this notice, write to us at that address.

What we collect and why

When you book tickets

To prepare and send your tickets, the booking form asks for:

  • your name
  • your email address, to send your confirmation and tickets
  • your phone number, to reach you about your visit if needed
  • the date of your visit
  • the tickets you choose, at resident or non-resident rates
  • a voucher code, only if you have one (optional)

We also record the language you use on the site, so we can write to you in that language.

Each order is saved with these details. The museum's ticketing and accounting system issues your tickets, and we email you a confirmation with your tickets.

When you pay

You pay by card on the secure payment page of the Mauritius Commercial Bank (MCB). You type your card details directly on the bank's page. We never see or store your card number. We only receive the result of the payment, which tells us whether it succeeded.

Checking that you are a human

To protect our forms from spam and abuse, we use Cloudflare Turnstile. It checks that a real person is filling in the form. It does not use a tracking cookie.

Audience measurement and advertising (only if you accept)

If you accept cookies in the banner, and only then, we also load:

  • Google Analytics 4, which helps us understand how visitors use the site, for example which pages they view.
  • Google Tag Manager, which loads Google Ads conversion tracking. When an order is paid, Google receives the amount, currency and order reference. This lets us measure how well our ads work.
  • The Meta pixel (Facebook, Instagram), which measures the pages you view. When an order is paid, Meta receives the amount, currency, tickets and order reference.

If you refuse, none of these tools are loaded.

Legal basis

We use your data on the following grounds:

  • Performing your booking (contract): your booking details and the payment result, to issue and send your tickets.
  • Legal obligation: keeping orders as accounting records, as the law requires.
  • Legitimate interest: protecting the site and its forms against abuse with Cloudflare Turnstile, and using the cookies needed for the site to work.
  • Your consent: Google Analytics, Google Tag Manager, Google Ads and the Meta pixel. You can withdraw your consent at any time (see "Cookies" below).

How long we keep your data

  • Orders (name, email, phone, visit date, tickets, voucher code, language and payment result) are kept as accounting records, for the period required by accounting and tax law.
  • Google Analytics data is kept for 14 months.
  • Your cookie choice is kept for 6 months.
  • Session and anti-forgery cookies are only used while you browse the site.

Who receives your data

Your data is seen only by the museum's staff who need it, and by these service providers acting on our behalf:

  • Hetzner Online, which hosts the website on servers in the European Union
  • Samurai Web Experts (Mauritius), which manages the website and its hosting
  • Resend (United States), which sends our emails, including your confirmation and tickets
  • Mauritius Commercial Bank (MCB), which processes your card payment
  • Cloudflare, which provides the Turnstile human check
  • Google, for Google Analytics, Google Tag Manager and Google Ads, only if you accept cookies
  • Meta (Facebook, Instagram), for the Meta pixel, only if you accept cookies

We do not sell your personal data.

Transfers outside the European Union

The website is hosted in the European Union, but L'Aventure du Sucre is based in Mauritius, so your data is also handled there, by the museum, by Samurai Web Experts and by MCB.

Some providers are in the United States or may process data there: Resend, Cloudflare, Google and Meta. Where data leaves the EU or Mauritius, we rely on safeguards recognised by data protection law. These may include the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. You can ask us for more information about these safeguards.

Your rights

Under the GDPR and the Mauritius Data Protection Act 2017, you have the right to:

  • access the data we hold about you and get a copy
  • correct data that is wrong or incomplete
  • erase your data, unless we must keep it, for example as accounting records
  • restrict how we use your data in some cases
  • object to how we use your data when we rely on our legitimate interest
  • receive the data you gave us in a common, machine-readable format (data portability)
  • withdraw your consent at any time, without affecting what was done before

To use any of these rights, write to dpo@terra.co.mu. We may ask you to confirm your identity. We will reply within one month.

Making a complaint

If you think we have not respected your rights, you can complain to a data protection authority:

  • in Mauritius, the Data Protection Office (dataprotection.govmu.org)
  • if you live in the European Union, the data protection authority of your country

Cookies

Cookies are small files stored by your browser.

Always used, because the site needs them to work:

  • a session cookie, which keeps your booking in progress while you browse
  • an anti-forgery cookie, which protects the forms against fraudulent submissions
  • cookie_consent, which remembers your cookie choice for 6 months

Used only if you accept them in the banner:

  • cookies from Google Analytics, Google Tag Manager / Google Ads and the Meta pixel, as described above

Changing your choice: click the "Cookie settings" link at the bottom of every page. You can accept or refuse at any time. Your choice is kept for 6 months, after which we will ask you again. You can also delete cookies in your browser settings.