Privacy Policy

This Privacy Policy explains how Oceana Fisheries Company (Pty) Ltd collects, uses, stores, shares and protects personal information when customers visit or make purchases through our online store at shop.oceanafisheries.com.

By using the Website or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. About Us

The Website is operated by:

Oceana Fisheries Company (Pty) Ltd
Company Number: 390511-2
Fishing Port, Victoria, Mahé, Seychelles
Email: privacy@oceanafisheries.com

Oceana Fisheries Company (Pty) Ltd is responsible for determining how and why personal information collected through the Website is processed.

In this Privacy Policy, “Oceana Fisheries”, “we”, “us” and “our” refer to Oceana Fisheries Company (Pty) Ltd.

2. Application of This Policy

This Privacy Policy applies to personal information collected through:

• the Website;
• customer accounts;
• online orders and payments;
• delivery arrangements;
• telephone calls, emails and customer enquiries;
• complaints, cancellation and refund requests;
• promotional communications; and
• other interactions connected with our online store.

This Policy does not apply to information processed independently by third-party websites or services under their own privacy policies.

3. Personal Information We Collect

Depending on how the Customer uses the Website, we may collect the following information:

3.1 Identity and contact information

• full name;
• email address;
• telephone number;
• billing address;
• delivery address;
• recipient name;
• delivery directions or map location; and
• account username or similar identifiers.

3.2 Order information

• products ordered;
• quantities and prices;
• order date and time;
• delivery instructions;
• order status;
• cancellation, return or refund information;
• customer preferences; and
• communication relating to the order.

3.3 Payment and transaction information

• payment status;
• transaction reference;
• amount paid;
• date and time of payment;
• payment method;
• refund information; and
• limited payment-card information supplied by the payment processor, such as the card type or final digits of the card number, where applicable.

3.4 Account information

Where customer accounts are available, we may collect:

• account login information;
• saved delivery addresses;
• order history;
• communication preferences; and
• account activity.

Passwords are stored in a protected form and are not accessible to Oceana Fisheries staff in plain text.

3.5 Communications

We may retain information provided when a Customer:

• contacts customer service;
• submits a complaint;
• requests a cancellation or refund;
• reports a damaged or unsafe product;
• responds to a survey; or
• otherwise communicates with us.

3.6 Technical and usage information

When the Website is used, certain technical information may be collected automatically, including:

• Internet Protocol address;
• browser type;
• device type;
• operating system;
• pages visited;
• date and time of access;
• referring website;
• Website interactions;
• error and security logs; and
• cookie or similar technology identifiers.

4. Information We Do Not Normally Require

We do not normally require customers to provide identification documents, health information or other sensitive personal information to purchase ordinary products through the Website.

Customers should not provide unnecessary sensitive information through order notes, delivery instructions or customer-service messages.

Where information about an allergy or dietary requirement is voluntarily provided, we will use it only to respond to the Customer’s enquiry or request and will limit its use and retention as reasonably appropriate.

5. How We Collect Information

We may collect personal information:

• directly from the Customer;
• when an account is created;
• when an order is submitted;
• when payment is processed;
• when delivery is arranged;
• through cookies and Website technologies;
• through communications with customer service;
• from the payment-gateway provider;
• from the delivery provider; and
• from service providers involved in operating the Website.

6. How We Use Personal Information

We may use personal information to:

• create and manage customer accounts;
• receive, confirm and prepare orders;
• process and verify payments;
• arrange and complete delivery;
• communicate order and delivery updates;
• provide customer support;
• process cancellations, complaints, replacements and refunds;
• investigate missing, incorrect, damaged or spoiled products;
• prevent fraud, misuse and unauthorised transactions;
• maintain Website security;
• operate, maintain and improve the Website;
• maintain accounting, transaction and business records;
• comply with legal and regulatory obligations;
• establish, exercise or defend legal claims;
• analyse Website performance and customer use;
• communicate promotions where the Customer has agreed to receive them; and
• perform other purposes disclosed when the information is collected.

We will not use personal information for an unrelated purpose unless permitted by law or the Customer is appropriately informed.

7. Grounds for Processing

Depending on the purpose and applicable law, we process personal information where:

• it is necessary to take steps requested by the Customer or fulfil an order;
• it is necessary to comply with a legal obligation;
• it is necessary for legitimate business purposes, provided those interests do not improperly override the Customer’s rights;
• the Customer has provided consent;
• it is necessary to prevent or investigate fraud or security incidents;
• it is necessary to establish, exercise or defend a legal claim; or
• another lawful ground applies.

Where processing is based on consent, the Customer may withdraw that consent, subject to any processing already carried out lawfully before withdrawal.

8. Card Payments

Card payments are processed through the online payment gateway provided by The Mauritius Commercial Bank (Seychelles) Limited, in partnership with Mastercard Payment Gateway Services (MPGS).

Payment information may be entered directly into the payment gateway or securely transmitted to the payment processor through the Website, depending on the technical payment setup.

The payment processor may collect and process payment-card information under its own terms and privacy practices.

Oceana Fisheries uses payment information only as necessary to:

• process and confirm payment;
• prevent fraud;
• reconcile transactions;
• issue refunds;
• investigate payment disputes; and
• maintain legally required records.

Oceana Fisheries does not store complete card numbers or card verification codes on its systems. We may retain transaction references and limited payment details received from the payment processor for accounting, support and refund purposes.

Customers should not send complete payment-card details by email, telephone message or delivery instructions.

9. Delivery Provider

Deliveries are performed by an independent third-party delivery provider appointed by Oceana Fisheries.

To arrange and complete delivery, we may provide the delivery company with information including:

• the Customer’s or recipient’s name;
• telephone number;
• delivery address;
• map location;
• directions and access instructions;
• order reference;
• number or type of packages;
• requested delivery time; and
• other information reasonably necessary to complete delivery.

The delivery provider should use this information only for delivery, delivery support, proof of delivery and related operational purposes.

Payment-card details will not be provided to the delivery company.

The delivery provider may return delivery updates, proof of delivery, recipient details and information about failed or delayed deliveries to Oceana Fisheries.

10. Other Parties with Whom We May Share Information

We may share personal information, where reasonably necessary, with:

• the Bank and payment-gateway provider;
• the appointed delivery provider;
• Website developers, administrators and hosting providers;
• cloud-storage and data-backup providers;
• email, telephone and customer-communication providers;
• accounting, audit, legal and professional advisers;
• fraud-prevention and information-security providers;
• insurers;
• government authorities, regulators, courts and law-enforcement bodies where legally required; and
• a purchaser, successor or adviser in connection with a proposed sale, restructuring or transfer of all or part of our business.

We do not sell or rent customer personal information to third parties.

Service providers are expected to process personal information only for the authorised service and to apply appropriate confidentiality and security protections.

11. International Data Transfers

Some Website, hosting, payment, communication, cloud or technical service providers may operate or store information outside Seychelles.

Where personal information is transferred outside Seychelles, we will take reasonable steps to ensure that the transfer complies with applicable data-protection requirements and that the information receives an appropriate or comparable level of protection.

This may include contractual protections, technical safeguards, assessment of the recipient’s protections or another legally permitted transfer mechanism.

12. Cookies and Similar Technologies

The Website may use cookies and similar technologies.

Cookies are small files or identifiers stored on or associated with a device when the Website is visited.

We may use:

12.1 Essential cookies

These are necessary for the Website to operate and may be used for:

• shopping-cart functions;
• checkout;
• account login;
• payment processing;
• security;
• fraud prevention; and
• remembering basic Website settings.

Disabling essential cookies may prevent parts of the Website from working correctly.

12.2 Analytics and performance cookies

Where used, these cookies help us understand:

• how the Website is used;
• which pages are visited;
• whether errors occur;
• how customers move through checkout; and
• how Website performance may be improved.

12.3 Preference cookies

These may remember choices such as language, location or account preferences.

12.4 Marketing cookies

Marketing cookies will be used only where enabled on the Website and where any required consent has been obtained.

Customers may manage non-essential cookies through the Website cookie controls, where available, or through their browser settings.

13. Marketing Communications

We may send marketing emails or messages where:

• the Customer has requested them;
• the Customer has consented to receive them; or
• another lawful basis permits the communication.

Customers may unsubscribe at any time by:

• using the unsubscribe option in the communication;
• changing their account preferences; or
• contacting us using the details in this Policy.

Unsubscribing from marketing will not prevent necessary communications concerning active orders, payments, delivery, recalls, security or customer-service requests.

We do not provide customer contact information to unrelated third parties for their independent marketing without appropriate permission.

14. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Retention periods may depend on:

• whether a customer account remains active;
• whether an order or refund remains outstanding;
• accounting, taxation and record-keeping requirements;
• payment and chargeback periods;
• product-safety or recall requirements;
• complaints or disputes;
• fraud-prevention and security needs;
• applicable limitation periods; and
• legal or regulatory obligations.

When personal information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

Certain information may be retained where necessary to demonstrate a transaction, comply with legal requirements or establish, exercise or defend a legal claim.

15. Security

We take reasonable administrative, technical and organisational measures to protect personal information against:

• unauthorised access;
• unlawful use or disclosure;
• accidental loss;
• alteration;
• destruction;
• malware;
• account compromise; and
• other security threats.

Measures may include:

• access restrictions;
• passwords and authentication controls;
• encryption where appropriate;
• secure connections;
• software updates;
• backups;
• monitoring and logging;
• staff confidentiality requirements; and
• controls over service providers.

No internet transmission or electronic-storage system is completely secure. We therefore cannot guarantee absolute security, but we will take reasonable steps to protect the information under our control.

Customers are responsible for keeping account passwords and devices secure and should notify us promptly of suspected unauthorised account use.

16. Personal Data Breaches

Where we become aware of a personal-data breach, we will investigate it and take reasonable steps to:

• contain the incident;
• reduce potential harm;
• restore security;
• preserve relevant evidence;
• determine what information was affected; and
• comply with any applicable notification or reporting requirements.

Where appropriate or required, affected individuals and the Information Commission may be notified.

17. Customer Rights

Subject to applicable law and any lawful exceptions, an individual may have the right to:

• know whether we hold personal information about them;
• request access to their personal information;
• request correction of inaccurate or incomplete information;
• request deletion of information in applicable circumstances;
• request restriction of processing in applicable circumstances;
• object to or prevent certain processing;
• withdraw consent where processing is based on consent;
• receive information about how their data is used and shared; and
• complain to the Information Commission.

These rights are not absolute. We may retain or continue processing information where permitted or required by law, including for accounting, fraud prevention, dispute resolution or legal claims.

18. Exercising Your Rights

A request relating to personal information should be sent to:

Oceana Fisheries Company (Pty) Ltd
Fishing Port, Victoria, Mahé, Seychelles
Email: privacy@oceanafisheries.com

The request should clearly describe the information or action being requested.

We may request reasonable information to confirm the requester’s identity and protect personal information against unauthorised disclosure.

We will respond within the period required by applicable law.

A request may be refused or limited where permitted by law. Where appropriate, we will explain the reason.

19. Information Relating to Other People

Customers who provide another person’s name, telephone number, address or delivery instructions must have reasonable authority to provide that information.

The Customer should inform the recipient that their information will be used for delivery and related order purposes.

20. Children’s Information

The Website and online payment service are not intended to knowingly collect personal information from children without appropriate authority.

A person placing an order must be legally authorised to use the selected payment card.

Where we become aware that personal information relating to a child was collected without appropriate authority, we will take reasonable steps to delete or appropriately restrict that information.

21. Third-Party Websites

The Website may contain links to third-party websites or services.

Oceana Fisheries is not responsible for the privacy, security or content practices of third parties operating independently from us.

Customers should review the privacy policy of a third-party website before providing information to it.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• our Website;
• products and services;
• payment arrangements;
• delivery arrangements;
• technology;
• service providers; or
• legal and regulatory requirements.

The current version will be published on the Website with its effective date.

Where appropriate, material changes may also be communicated through the Website, email or another reasonable method.

23. Complaints

Customers should first contact Oceana Fisheries using the details below so that we can investigate and attempt to resolve the concern:

Oceana Fisheries Company (Pty) Ltd
Fishing Port, Victoria, Mahé, Seychelles
Email: privacy@oceanafisheries.com

An individual may also submit a complaint to the Seychelles Information Commission regarding the processing of personal data.

24. Governing Law

This Privacy Policy is governed by the laws of the Republic of Seychelles, including applicable data-protection legislation.

Nothing in this Policy limits any right or remedy that cannot lawfully be excluded.