Privacy Policy

The Brandhouse Ltd

1. Who we are?

THE BRANDHOUSE LTD (TBH) is a privately owned company which owns and manages the brands Galaxy, JMG and JMGSC. TBH is duly registered under the laws of Mauritius with its registered office situated at Industrial Park 1, Riche Terre.

2. Why the Privacy Policy?

The Data Protection Act 2017 is designed to strengthen the controls and personal autonomy of individuals over their personal data, in line with current relevant international standards. The Privacy Policy adopted by TBH describes how TBH collects and uses Personal Data of individuals during the period in which we are engaging with them on a business-to-business basis as well as on our websites.

3. What is personal data?

Personal data refers to any information relating to an individual that the latter has provided in the context of his personal needs. These include for e.g., his name, address, contact details, etc.

4. When does TBH process your personal data?

The Privacy Policy explains when TBH processes your personal data in the performance of its obligations, which includes:

  • a. When you shop in our physical stores and online (www.galaxy.mu)
  • b. When you enter your personally identifiable information on our websites(www.thebrandhouse.mu, www.galaxy.mu),
  • c. When you participate in marketing programs or events
  • d. When you register for our catalogues, emails, etc
  • e. When you wish to avail the repair, services provided by TBH
  • f. When you provide your information in any other way.

When you visit our websites, the web servers automatically collect anonymous information such as log data, browser files, IP addresses, current location, referring/exit pages etc. Our websites use cookies to make your browsing experience more enjoyable.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes
  • if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by letting us know using our Contact Us information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please email us this request using our Contact Us information.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

List of cookies we collect

The table below lists the cookies we collect and what information they store.

Cookie NameCookie Description
FORM_KEYStores randomly generated key used to prevent forged requests.
PHPSESSIDYour session ID on the server.
GUEST-VIEWAllows guests to view and edit their orders.
PERSISTENT_SHOPPING_CARTA link to information about your cart and viewing history, if you have asked for this.
STFInformation on products you have emailed to friends.
STOREThe store view or language you have selected.
USER_ALLOWED_SAVE_COOKIEIndicates whether a customer allowed to use cookies.
MAGE-CACHE-SESSIDFacilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGEFacilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE-SECTION-INVALIDATIONFacilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-TIMEOUTFacilitates caching of content on the browser to make pages load faster.
SECTION-DATA-IDSFacilitates caching of content on the browser to make pages load faster.
PRIVATE_CONTENT_VERSIONFacilitates caching of content on the browser to make pages load faster.
X-MAGENTO-VARYFacilitates caching of content on the server to make pages load faster.
MAGE-TRANSLATION-FILE-VERSIONFacilitates translation of content to other languages.
MAGE-TRANSLATION-STORAGEFacilitates translation of content to other languages.

The Brandhouse Ltd

  1. Who we are

    The Brandhouse Ltd (“TBH”) is a privately owned company which owns and manages theGalaxy stores, Samsung Brand stores and the JMG Service Centre. TBH is a Data Controller
    and is duly registered under the laws of Mauritius, with the head office at Industrial Park 1, Riche Terre. 

  2. Purpose of this Policy

    This Privacy Policy explains how TBH collects, uses, stores, and protects the personal data of individuals we engage with, in line with the Data Protection Act 2017 and International Standards.
    It applies to clients, customers, employees, suppliers and other individuals whose personal data we process.

  3. Personal Data we collect 

    Personal data is any information that identifies you. We may collect and process:

    ·       Identity & Contact Information such as name, address, phone number, email

    ·       Identification & Legal Documentation such as national ID, passport, character certificate, TAN

    ·       Financial information such as bank account details

    ·       Employment & HR Information

    ·       Special categories of data such as medical information, biometric data, photographs, criminal records

    ·       Site plan or location information

    ·       Other information relevant to our business relationship Data may be collected electronically or on paper.

  4. Why we process your data 

    We process personal data to:

    ·       Fulfil contractual obligations (e.g., sales, services, payments)

    ·       Comply with legal obligations (e.g., tax, regulatory reporting)

    We ensure that data collected is adequate, relevant, and limited to the purpose for which it is collected.

    Data may only be shared with third parties if it is necessary to meet these purposes.

  5. Legal basis we use to collect / process personal data 

    We collect and / or process your personal data in accordance with the legal requirements, and on the following basis:

    ·       Performance of a Contract

    ·       Consent

    ·       Compliance to a legal obligation

    ·       Legitimate Interest

  6. Marketing Communications 

    We may use your data to send information about relevant products and offers if you have consented.
    You may opt out at any time by notifying us in writing. We may also ask you to update your data or preferences periodically. 

  7. Cookies 

    Our websites use cookies and similar technologies to improve your experience. Types of cookies:

    ·       Technical: Essential cookies for session management, security, and site performance (e.g., login sessions, cross-site protection, etc).

    ·       Functional: Cookies that store your preferences, shopping cart contents, and recently viewed products.

    ·       Analytics: Google Analytics (GA4) and Google Tag Manager to understand website usage and improve performance.

    ·       Third-party: Services such as Cloudflare, LiveChat (customer support), and Facebook (social integration)

    You can disable cookies via your browser settings.

  8. Data Sharing 

    We may share your personal data:

    ·       With service providers in Mauritius or abroad (IT, payroll, suppliers)

    ·       With professional advisers (lawyers, auditors, bankers)

    ·       With regulatory authorities (MRA, regulators)

    All third parties are required to respect confidentiality and process data only for specified purposes. Access is restricted to those with a legitimate need.

  9. Data Retention 

    We keep personal data:

    ·       Only as long as necessary for the purpose it was collected

    ·       In accordance with the legal obligations in Mauritius

    We have a retention schedule defining the retention timeframe and disposal methods.

  10. Consent and Acceptance 

    By providing your personal data for a specific purpose, you agree that TBH may process it in accordance with that specific purpose.
    You may withdraw consent at any time in writing. Withdrawal may affect our ability to provide certain services. Data may still be processed to fulfil legal obligations.

  11. Data Security 

    We implement technical and organizational measures to protect your data from loss, misuse, or unauthorized access, through information security policies.
    All employees have a legal duty of confidentiality, and third-party processors are contractually bound to secure your data. 

  12. Your Rights 

    You have the following rights under the Data Protection Act 2017:

    ·       Access: Request a copy of the data we hold about you

    ·       Rectification: Correct inaccurate or incomplete data

    ·       Erasure: Delete personal data in certain circumstances

    ·       Restriction: Temporarily limit processing

    ·       Objection: Object to processing on grounds of personal rights or direct marketing

    ·       Withdrawal of Consent: Revoke the permission previously granted for the processing of personal data

    Requests will be handled free of charge unless clearly unfounded or excessive. Additional verification may be requested to locate your data.

  13. External Links
    Our website may contain links to other websites. By clicking on such link, you will be leaving our website and entering a site with a different policy. We urge you to review the privacy policy of the other website since we are not responsible for their privacy practices.
  14.  Requests, enquiries and complaints 

    You may contact our Data Protection Officer for any related request, enquiry or complaint:

              o   Name:                 Anuradha Haulkory

              o   Office Address:     Industrial Park 1, Riche Terre

              o   Email Address:     [email protected]

    You also have the right to contact the Data Protection Commissioner of Mauritius.

  15. Updates to this Policy
    We may update this Privacy Policy periodically. The latest version will be available on our website.
  16. Ownership and approval 
    This Privacy Policy is owned by The Brandhouse Ltd and has been approved by the Board of Directors on 14/05/26.