Privacy Policy
Last updated: 8 August 2026. This policy is provided for review and must be validated by Excelsior Pro Builders — including confirmation of any applicable registration with the Mauritius Data Protection Office — before the site goes live.
1. Introduction
This Privacy Policy explains how Excelsior Pro Builders ("we", "us", "our") collects, uses, stores and protects personal data submitted through the quote request form on this website (the "Site"). It applies to visitors and prospective customers who choose to contact us through the Site. By submitting the form, you acknowledge that you have read and understood this policy.
2. Who is responsible for your data
Excelsior Pro Builders, a construction company based in Pointe aux Sables, Black River, Mauritius, is the data controller responsible for the personal data described in this policy. For any question relating to this policy or to your data, contact us at [email protected] (placeholder address).
3. Information we collect
We only collect information that you choose to provide when submitting a quote request. We do not require you to create an account, and the form does not collect payment information.
a) Contact and project information
Name, requestor type (individual, business, or government), email address, phone number, the service you are enquiring about, project location, project description, and any budget or timeline notes you choose to add.
b) Files you choose to upload
You may optionally attach up to five files (PDF, Word documents, or photographs) to illustrate your project — for example, site photographs or plans. Uploading files is entirely optional and is never required to submit a request. Do not upload a file if it contains information you do not wish to share with us, and please avoid including personal data about third parties (such as other people visible in photographs) unless necessary for your request.
c) Information collected for security purposes
To protect the form from automated abuse, we use Cloudflare Turnstile, a bot-detection service. Turnstile may process limited technical information (such as your IP address and device signals) to verify that a submission is genuine. This processing is governed by Cloudflare's own privacy policy. We do not otherwise use cookies or trackers to profile visitors — see section 11.
4. Why we use this information
We use the information you submit to: review and assess your project request; contact you about it; prepare and follow up on a quote; and, where a project proceeds, deliver the agreed work. We do not use your information for unrelated marketing without your separate consent, and we do not carry out automated decision-making or profiling based on your data.
The legal basis for this processing is your consent, given by ticking the consent box when submitting the form, and — for the anti-spam checks described in section 3(c) — our legitimate interest in keeping the Site secure and free of abuse.
5. Who we share it with
Submitted requests, including any attached files, are reviewed by the Excelsior Pro Builders team responsible for handling quote requests. We do not sell your information, and we do not share it with third parties for their own marketing purposes.
We use the following service providers ("processors") to operate the form and store your data on our behalf. Each only accesses data as needed to provide its service to us:
- Supabase — hosts the database and the private file storage used to record and store quote requests and any uploaded files.
- Cloudflare — hosts the website and provides the Turnstile anti-spam check described in section 3(c).
- Resend — delivers the internal email notification that alerts our team to a new request.
6. Where your data is stored
Structured request details (such as your name and message) are stored in a database, and any uploaded files are stored separately in a private file storage bucket that is never publicly accessible — files can only be opened by an authenticated member of the Excelsior Pro Builders team, using a time-limited access link generated on request. As our service providers operate international infrastructure, your data may be processed on servers located outside Mauritius; where this occurs, we rely on our providers' contractual and technical safeguards to protect your data to a standard consistent with this policy.
7. How long we keep it
Quote request details and any attached files are kept only as long as needed to assess your request and, where a project proceeds, for the duration of the business relationship and any period required to meet our legal or accounting obligations afterwards. Where a request does not lead to a project, we aim to delete the associated files and request details within 12 months of the request being closed. You may ask us to delete your information earlier at any time — see section 9.
8. How we protect your information
Form submissions are transmitted over an encrypted (HTTPS) connection. Uploaded files are stored in a private location that is not directly reachable from the browser and is never publicly listed or indexed; only an authenticated member of our team can generate a short-lived link to view a specific file. Structured request data is likewise restricted to authenticated team access. No method of transmission or storage is completely infallible, but we take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse.
9. Your rights
Subject to applicable law, including the Mauritius Data Protection Act 2017, you may ask us at any time to:
- confirm whether we hold information about you, and access a copy of it;
- correct information that is inaccurate or incomplete;
- delete your information, including any uploaded files;
- restrict or object to our processing of your information; and
- withdraw your consent for us to contact you about a request.
To exercise any of these rights, email [email protected] (placeholder address). We will respond within a reasonable timeframe. If you are not satisfied with our response, you may lodge a complaint with the Mauritius Data Protection Office.
10. Children's privacy
The Site and its quote request form are intended for use by adults seeking construction services and are not directed at children. We do not knowingly collect personal data from children.
11. Cookies and tracking
This Site does not currently use non-essential cookies or third-party analytics. If tracking tools such as privacy-respecting analytics are added in the future, this policy and a consent notice will be updated accordingly before they are activated.
12. Changes to this policy
We may update this policy from time to time, for example to reflect changes to the form or to our service providers. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be reflected on this page before they take effect.
13. Contact us
Questions about this policy, or requests relating to your data, can be sent to [email protected] (placeholder address).