Privacy Policy
We respect your privacy and aim to handle personal information responsibly, securely, and transparently. This Privacy Policy explains what information we collect, how we use it, who we may share it with, how long we may retain it, and the choices available to you. In this Policy, “Basisa”, “we”, “us”, and “our” refer to Basisa. “You” and “your” refer to the person whose personal information we process.
Who We Are
Effective date: [TO BE FILLED] Business name: Basisa Business Registration No.: SP34662021 Registered Address: Blue Heaven, Dh. Bandidhoo, Maldives Telephone: +960 7333755 General/privacy enquiries: hello@basisa.online Customer/account support: support@basisa.online
Scope of this Policy
This Policy applies when you: • browse our website; • create or use a customer account; • use guest checkout; • place an order; • make a purchase; • arrange delivery, Boat Delivery, or Pickup; • upload payment evidence; • communicate with us; • request support; • request a return or refund; or • otherwise interact with us in connection with a customer transaction.
Information We Collect
The information we collect depends on how you interact with us. Account and contact information This may include: • full name; • email address; • telephone number; • account identifier; • authentication-related information; • customer/account status; and • account preferences. Customer accounts are intended for persons aged 16 or older. Order and transaction information This may include: • products purchased; • product variants; • quantities; • prices; • discounts; • delivery charges; • payment method; • payment status; • order number; • transaction history; • order status; • fulfilment status; and • other information necessary to manage the sale. Delivery information For address delivery, we may process information such as: • recipient name; • telephone number; • delivery location; • delivery address; • landmark or location details; and • delivery instructions. Boat Delivery information Where Boat Delivery is selected, information may include: • boat name; • boat contact person; • telephone number; • boat location or jetty; • destination island; and • departure information where provided. Pickup information For Pickup orders, we may process: • the selected pickup location; • customer/contact details; and • information required to identify and release the order. Payment information For Bank Transfer orders, we may receive information contained in an uploaded payment receipt, such as: • sender name; • bank or transfer information visible on the receipt; • amount; • transaction reference; • transfer date; and • other information appearing on the uploaded evidence. Please avoid uploading unrelated bank statements or unnecessary financial information. We do not ask you to disclose online banking passwords, banking verification codes, or other credentials that we do not need. Customer support information When you contact us, we may retain: • your message; • contact information; • order information; • product information; • photographs or documents you choose to provide; and • information needed to investigate the enquiry. Returns and defective-product information Where you request a return, refund, or defective-product inspection, we may retain relevant information about: • the product; • proof of purchase; • reported issue; • inspection findings; • remedy; • refund or replacement; and • communications relating to the request. Technical and security information Our website and supporting systems may receive information such as: • IP address; • browser type; • device information; • request timestamps; • authentication activity; • security events; • error information; and • technical logs needed to operate and secure the service. Legal acceptance and preference information We may record: • the version of the Terms of Service accepted; • the version of this Privacy Policy acknowledged; • date and time of acceptance; • associated customer or order; • guest or authenticated context where relevant; • notification preferences; and • marketing consent or withdrawal records.
How We Collect Information
We receive information: • directly from you; • through your customer account; • through checkout; • from payment evidence you upload; • through customer-support communications; • through transactions made with us; and • automatically through technical systems necessary to operate and protect our website. Where relevant, we may also receive limited transaction information from a bank or payment-related service used in connection with a payment. If you provide personal information about another person, such as a delivery recipient or nominated boat contact, you should ensure that you are authorised to provide the information and that the person understands why it is being provided.
How We Use Personal Information
We may use personal information to: • create and maintain customer accounts; • authenticate customers; • operate our website; • maintain shopping-cart and account functionality; • process orders; • verify payments; • provide delivery; • arrange Boat Delivery; • provide Pickup; • communicate about orders; • issue receipts and transaction records; • provide customer support; • process cancellation requests; • inspect returns or defective products; • process refunds or replacements; • maintain accounting and transaction records; • prevent fraud and abuse; • secure our systems; • investigate technical problems; • resolve disputes; • enforce legitimate contractual rights; • comply with legal or regulatory requirements; and • maintain required business records. Where you have separately opted in, we may also use your contact information for permitted marketing communications.
Marketing Communications
Marketing is optional. We send promotional or marketing emails only to customers who have explicitly opted in. Marketing consent is separate from: • creating an account; • placing an order; • accepting the Terms of Service; and • acknowledging this Privacy Policy. Marketing communications will provide an appropriate unsubscribe option. You may withdraw marketing consent at any time. Unsubscribing from marketing does not prevent us from sending necessary transactional or service communications relating to: • orders; • payments; • account security; • returns; • refunds; • support requests; or • other necessary customer-service matters. We may retain a limited suppression or preference record after you unsubscribe so that we can continue to respect your preference.
Cookies and Similar Technologies
We may use cookies, local browser storage, and similar technologies where reasonably necessary for functions such as: • authentication; • secure sessions; • shopping-cart state; • account functions; • security; • fraud prevention; and • website preferences such as appearance or theme. We do not currently use non-essential advertising or behavioural tracking technologies such as Google Analytics, Meta Pixel, TikTok Pixel, or similar advertising trackers. If we later introduce non-essential analytics, advertising, or marketing tracking technologies, we will update this Policy and any required consent controls before using them where appropriate. You can manage cookies and locally stored website data through your browser, although disabling essential technologies may prevent parts of our website from functioning correctly.
Notifications on Your Device
If you turn on notifications, we store a notification address for that device so we can send you order and support updates. You can turn them off at any time, and signing out also turns them off on that device.
Who We May Share Information With
We do not sell or rent your personal information to advertisers, data brokers, or other third parties. We may share information only where reasonably necessary to operate our business, complete a service you requested, protect legitimate interests, or comply with law. Technology service providers We may use trusted service providers for categories of services such as: • website hosting; • cloud infrastructure; • database services; • authentication; • file storage; • cybersecurity and website protection; • email delivery; and • related technical infrastructure. We describe service-provider categories rather than naming individual providers because providers may change over time. Service providers acting on our behalf should receive only the information reasonably necessary for the service they provide. Delivery Regular delivery is handled through our own delivery arrangements. Relevant authorised staff may access the delivery information necessary to fulfil your order. Boat Delivery Where you choose Boat Delivery, necessary information may be provided to or used in communications with your nominated boat or authorised boat contact so that the handover can take place. Banks and payment-related parties Information may be exchanged with a bank or payment-related party where reasonably necessary to verify, reconcile, investigate, or refund a transaction. Professional advisers and authorities We may disclose information where reasonably necessary to: • obtain legal or professional advice; • respond to a lawful request; • comply with a court or regulatory requirement; • investigate suspected fraud or unlawful activity; • enforce legal rights; or • protect customers, staff, or our systems.
International Processing
Some service providers we use may process, store, or access personal information from locations outside the Maldives. Where this occurs, we take reasonable steps to use reputable providers and appropriate technical, organisational, and contractual safeguards suitable for the nature of the information and service. The fact that information may be processed outside the Maldives does not mean that we sell your personal information.
How Long We Retain Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by applicable law. Order, payment, receipt, and accounting records may be retained for the period required or permitted by Maldives law and for any additional lawful period reasonably necessary for disputes, fraud prevention, claims, accounting, or compliance. Bank Transfer receipts are retained only for as long as reasonably necessary for payment verification, accounting or legal requirements, dispute handling, and fraud prevention, after which they may be deleted. Customer-support, return, refund, defective-product, and dispute records may be retained for as long as reasonably necessary to manage the matter and any related legal or business obligations. Where you have opted in to marketing, we may retain consent and unsubscribe or suppression records as reasonably necessary to demonstrate and respect your communication preferences.
Information Security
We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse. No website, internet transmission, or electronic storage system can be guaranteed to be completely secure. You should protect your account credentials and contact us if you believe your account or personal information may have been compromised. If we become aware of a significant security incident affecting personal information, we will investigate it and make notifications where required by applicable law.
Access to Your Information
You may request access to or a copy of personal information we hold about you, subject to reasonable identity verification and any applicable legal limitations. We may need to withhold or limit information where disclosure would affect another person's rights, compromise security, reveal confidential information, or where the law permits or requires us to do so. For privacy access requests, contact hello@basisa.online.
Correcting Your Information
You can update supported account and profile information through My Account. Saved addresses can be added, updated, or removed using the available account features. If information cannot be corrected through your account, contact support@basisa.online. We may take reasonable steps to verify your identity and the accuracy of the requested change before updating certain information.
Account Deletion
You may request closure or deletion of your customer account. Where a self-service account-deletion option is not available, contact support@basisa.online. Deleting or closing an account does not necessarily require us to erase every record connected with it. We may retain information that is reasonably required or permitted for purposes such as: • completed orders; • payment and accounting records; • fraud prevention and security; • returns and refunds; • disputes and claims; and • legal or regulatory compliance. Where information is no longer reasonably required, it may be deleted or anonymised in accordance with our retention practices.
Customers Under 16
Customer accounts are intended for people aged 16 or older. Guest checkout does not ordinarily require us to collect a date of birth or identification document merely to verify age. A person making a purchase must have the legal capacity required under applicable Maldives law. Where a person does not have the required legal capacity, the purchase should be made or authorised by a parent, legal guardian, or other person legally authorised to act for them. We do not intentionally seek unnecessary personal information about children.
Third-Party Websites and Services
Our website may contain links to manufacturers, banks, social networks, payment services, or other third-party websites and services. We do not control those third parties' privacy practices. Information you provide directly to another website or service is handled according to that third party's own terms and privacy practices. You should review the relevant third party's privacy information before providing personal information to them.