Legal
Privacy Policy
What personal data we collect, why we hold it, and the rights you have over it.
Last updated 4 September 2026 · Definitive WebHost is a division of Definitive Concept Ltd
Who is responsible for your data
Definitive Concept Ltd, trading as Definitive WebHost, business registration number C16139207, of 15 Issackhan Street, Coromandel, Mauritius, is the controller of the personal data described in this policy. We handle personal data in accordance with the Data Protection Act 2017 of Mauritius.
What we collect
We collect the information you give us when you enquire, order or contact support: your name, your organisation, your email address, your telephone number, your billing address and the details of the services you hold.
We collect technical information generated by using our services: server and application logs, IP addresses, resource usage, and records of support tickets and correspondence.
Our website collects a small amount of analytics data about how pages are used. We do not sell any of it.
Why we use it
We use your data to provide and support the services you have ordered, to invoice you and collect payment, to keep the platform secure and to investigate abuse, to meet our legal and tax obligations, and to tell you about changes to services you hold. Where we send marketing, we do so only with your consent, and every message includes a way to stop it.
Data you host with us
Where the data on your websites, mailboxes or servers includes personal data about other people, you are the controller of that data and we are your processor. We act on your instructions, we restrict access to staff who need it, and we do not use it for our own purposes.
Who we share it with
We share data with the infrastructure and network providers that underpin the services, with payment and accounting providers, and with professional advisers, in each case only so far as necessary. We share it with authorities where the law requires. We do not sell personal data.
Where it is held
Depending on the service you choose, your workloads may run in data centres outside Mauritius. Where personal data is transferred outside Mauritius we take the steps the Data Protection Act requires to keep it protected. You can ask us which locations apply to your services and we will confirm in writing.
How long we keep it
We keep account and billing records for as long as the law requires us to, generally seven years. We keep operational logs for a limited period appropriate to security and troubleshooting. Data you host is kept while your service is live and, after termination, for thirty days unless you ask us to delete it sooner.
Your rights
You have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it erased where the law allows, to restrict or object to how we use it, and to receive it in a portable format. Write to sales@definitiveconcept.com and we will respond within the statutory period. If you are not satisfied you may complain to the Data Protection Office of Mauritius.
Cookies
Our website uses cookies that are necessary for it to work, and a small number that help us understand how the site is used. You can block or delete cookies in your browser; the site will still work, but some conveniences will not.
Security
We protect personal data with access control, encryption in transit, network filtering, patching and monitoring. No system is perfect. If a breach affects your personal data and is likely to cause you harm, we will notify you and the Data Protection Office as the Act requires.
Changes and contact
We will publish any change to this policy on this page. Questions go to sales@definitiveconcept.com or +230 5251 8311.
If anything here is unclear, write to sales@definitiveconcept.com or call +230 5251 8311 and we will explain it in plain terms.