Reading order
- §3 — what TheShop.mu does and does not see when you pay.
- §4 — who is liable for what (the short version).
- §9 — what to do if you see a charge you don't recognise.
1. Who you are paying
2. Who processes your payment
| Payment method | Processed by | Their role |
|---|---|---|
| Visa, Mastercard, Amex, Diners (credit and debit) | Peach Payments (Pty) Ltd ("Peach") | Peach is a PCI DSS Level 1 certified payment service provider. Your card details are entered on Peach's secure checkout page (secure.peachpayments.com) and never reach TheShop.mu. |
| MCB Juice | Peach Payments | Wallet-to-wallet transfer initiated through Peach's gateway. |
| blink by Emtel | Emtel / Peach | Wallet-to-wallet transfer initiated through Peach's gateway. |
| MauCAS (national QR scheme) | Bank of Mauritius MauCAS network / Peach | QR-based bank transfer initiated through Peach's gateway. |
3. What we see, what we don't see
3.1 What we never see, never store, never process
- Your full card number (the 13–19 digit Primary Account Number / PAN).
- Your card's CVV / CVC / CVV2 / CID (the 3 or 4 digit security code).
- Your card's PIN.
- Your card's magnetic-stripe or chip-track data.
- Your 3-D Secure authentication credentials (password / OTP / biometric).
- Your full bank account number, where you pay via MCB Juice or MauCAS.
3.2 What we do see and store
- The result of the payment: success or failure.
- The transaction amount (which we already knew, because it's your order total).
- The currency (MUR).
- The payment method category (e.g., "Visa", "Mastercard", "MCB Juice") — for receipts and customer service.
- The last four digits of your card number, where applicable, for receipts and dispute resolution.
- The transaction reference issued by Peach.
- A timestamp.
- The 3-D Secure authentication outcome (whether your bank's verification succeeded).
3.3 Tokenised "save this card" — what it actually means
- That token (which is useless to anyone outside Peach).
- The card brand (Visa / Mastercard / etc.).
- The last four digits.
- The expiry month and year (so we can show you "Visa ending 1234, expires 12/29").
4. Liability — the short version
| What happened | Who is liable | Why |
|---|---|---|
| A stranger stole your card details from your bag/wallet/phone and used the card on TheShop.mu, and your bank's 3-D Secure verification challenged the transaction | The card's issuing bank, under EMVCo 3-D Secure 2 scheme rules ("liability shift"). | Your bank had the opportunity to verify the cardholder's identity at the moment of transaction. If their verification let an impostor through, the bank carries the loss. |
| A stranger used your card details and the 3-D Secure verification was not challenged | We will always insist that 3-D Secure verification is requested for every card transaction on TheShop.mu. If verification was somehow bypassed, please see §9 — we will refund you and pursue Peach. | We never request 3-D Secure exemptions for our merchant account. |
| A security breach occurred at Peach Payments | Peach Payments, under their PCI DSS Level 1 obligations and their merchant agreement with us. | Peach controls that infrastructure. |
| A security breach occurred at TheShop.mu and your card data was exposed | Structurally impossible. We hold no card data — see §3.1. Nothing about your card can be lost from our systems because nothing is there. | The design of our payment integration removes this risk class entirely. |
| A security breach occurred at TheShop.mu and other personal data was exposed (your name, email, address, order history) | We are responsible. We will notify you and the Mauritius Data Protection Office in line with our Privacy Policy and the Data Protection Act 2017. | We control that data. |
| You bought something, received it in good condition, then disputed the charge with your bank | We will defend the dispute on the merits, using the order record, delivery proof, and 3-D Secure authentication record. If the dispute is upheld against us we accept the chargeback. If the dispute is found to be invalid we may close your account and pursue the funds. See §10. | Standard scheme rule; this is "friendly fraud". |
| The item arrived damaged, defective, missing, or not as described | We are responsible. Contact us and we refund or replace, in line with our Refund Policy and your rights under the Consumer Protection Act 1991. | This is a goods-and-services issue, not a payment issue. |
| Your bank charged a fee for the transaction, or applied a different exchange rate than expected | Between you and your bank. | We do not control the fees or rates your bank applies. |
5. Payment authorisation and the 3-D Secure step
- Receive a one-time password by SMS or in your bank's mobile app, or
- Approve a push notification in your bank's mobile app, or
- Confirm a biometric prompt in your bank's mobile app, or
- (Rarely) be allowed through without a challenge if your bank classifies the transaction as low-risk.
6. The "Pay" button — what your click means
- You confirm that the order summary shown to you on the review page is correct — the items, quantities, delivery address, delivery date and time slot, and total amount.
- You authorise TheShop.mu Ltd to debit your chosen payment method for that amount, via Peach Payments and your card issuer / wallet provider.
- You accept these Checkout & Payment Terms in the version shown on the page at that moment. We record the version, the timestamp, and your IP address against your order as evidence of acceptance.
- You acknowledge that the contract of sale is formed when we send you the order confirmation email or notification, not when you click Pay. Until that confirmation is sent, we may decline the order — for example, if stock has changed, if a price was clearly displayed in error, or if our fraud checks flag the transaction for review.
7. Prices, currency, and amounts
- All prices on TheShop.mu are in Mauritian rupees (MUR), inclusive of VAT where applicable.
- Delivery fees are added at checkout and shown clearly before you click Pay.
- The amount displayed on the "Pay Rs X,XXX" button is the amount that will be charged.
- We bill in MUR. If your card is denominated in a different currency, your card issuer will perform a conversion at their published rate plus any cross-currency fee they may apply. We do not control that rate or that fee, and we have no visibility into either — please check with your card issuer if currency conversion matters to you.
- We do not add surcharges for any specific payment method. The price you see is the price you pay.
8. Receipts and the statement descriptor
- An email order confirmation within 60 seconds (in normal operation), containing: your order number, the statement descriptor we expect to appear on your statement (THESHOP MU), the items purchased, the delivery address and slot, and a "I didn't make this purchase" support link.
- A receipt accessible at any time from My Account → Orders.
- A VAT-compliant invoice for VAT-registered customers on request to admin@theshop.mu.
9. "I see a charge I don't recognise" — please contact us first
- Check whether the descriptor reads THESHOP MU or a near-variant containing THESHOP. If yes, the charge is from us.
- Before contacting your bank to dispute the charge, contact us first at customerservice@theshop.mu or via WhatsApp at +230 5250 6006. Provide: your name, the date and amount of the charge, and the statement descriptor exactly as it appears.
- We will respond within 24 hours (target: 4 hours during business hours) and either (a) identify the transaction and forward you the receipt, (b) identify it as a transaction by a household / corporate co-user of your card, or (c) refund you immediately if neither of the above applies. Our policy is to refund first and investigate after for any "I don't recognise this" report, where the charge is genuinely unexplained.
- If we refund you, the refund is initiated within 48 hours. Card refunds typically appear on your statement within 5–14 business days, depending on your bank and card scheme — this delay is set by the card network and your bank, not by us. We will tell you the date we issued the refund and the Peach Payments refund reference.
- We can resolve almost every "I don't recognise this" report in under an hour. A bank dispute takes 14–90 days.
- A bank dispute (chargeback) costs us a per-dispute fee regardless of who wins. We pass on no part of this fee to you, but disputes also count against our chargeback-ratio quota with the card schemes — too many, and our ability to accept cards is affected for everyone.
- A bank dispute is irreversible once opened. If it turns out to be a misunderstanding (a household co-user, a forgotten subscription, a different store with a similar name), it can take weeks to unwind even after you tell the bank "actually it's fine".
10. Genuinely unauthorised use of your card
- Contact us at customerservice@theshop.mu and notify your card issuer (your bank) to have the card cancelled. Speed matters.
- We will immediately pause any unfulfilled orders linked to the disputed transaction.
- Where the transaction was authenticated through 3-D Secure 2 (see §5), the loss falls on your card's issuing bank under the EMVCo scheme rules. Your bank should refund you and the bank will pursue the loss.
- Where the transaction somehow was not authenticated through 3-D Secure 2 — which should be impossible given our merchant policy in §5 — we will refund you ourselves and pursue Peach Payments for indemnity.
- We cooperate fully with police investigations under Mauritian law and with the Mauritius Financial Intelligence Unit's anti-money-laundering procedures where applicable.
11. Refunds
- Refunds to a card go back to the same card used for payment. Card scheme rules do not allow us to refund a different card.
- Refunds to a wallet (MCB Juice, blink, MauCAS) go back to the same wallet account.
- Refund initiation happens within 48 hours of approval.
- Card refund appearance on your statement takes 5–14 business days. This delay is set by the card networks and your bank and is outside our control. We will give you the Peach refund reference if you ask, which you can quote to your bank if needed.
- Wallet refunds typically appear within 24 hours.
- Refunds are issued in MUR. Any currency conversion to your card's billing currency happens at your card issuer's rate at the time of refund (not at the time of original payment) — this means a small foreign-exchange difference is possible and is not within our control.
12. Disputes, jurisdiction, and what stays consumer-protected
- These payment terms are governed by the laws of Mauritius.
- Any dispute between you and TheShop.mu Ltd will be resolved in the courts of Mauritius, save that nothing in these terms prevents you from approaching the Consumer Protection Unit of the Ministry of Commerce, or the Mauritius Data Protection Office, in respect of matters within their remit.
- Your statutory rights under the Consumer Protection Act 1991 (including the right to refund for defective goods), the Sale of Goods Act, the Data Protection Act 2017, the Electronic Transactions Act 2000 and any other applicable Mauritian law are not affected by anything in this document. Where any clause of this document is in conflict with those rights, the statutory rights prevail.
- We do not exclude or limit our liability for: (a) personal injury or death caused by our negligence; (b) fraud or fraudulent misrepresentation by us; (c) any other liability that cannot be excluded under Mauritian law. Subject to that, our total contractual liability to you in respect of any single order is limited to the total amount you paid for that order (excluding delivery fees where the delivery fee is not in dispute).
13. Changes to these terms
- We may amend these terms from time to time. The current version is always at https://theshop.mu/checkout/terms, with the effective date in the header.
- Material changes (changes that affect your rights — for example, changes to the dispute process or the refund timing) will be notified to you by email at least 14 days before they take effect, and you will be asked to accept the new version at your next checkout.
- Non-material changes (e.g., typographical corrections, clarifications, processor address updates) take effect immediately on publication.
- The version of these terms you accepted at the moment of your order continues to govern that order. A later version does not retroactively change a completed order.
14. Contact
- Customer service: customerservice@theshop.mu — WhatsApp +230 5250 6006 — Landline +230 253 7611.
- Refunds and cancellations: refunds@theshop.mu.
- Disputes / "I don't recognise this charge": customerservice@theshop.mu with subject line "Payment dispute".
- Data protection requests: contact@theshop.mu with subject line "DPA Request".
- External regulators:
- Consumer Protection Unit, Ministry of Commerce and Consumer Protection, Mauritius.
- Mauritius Data Protection Office — dpo@govmu.org — dataprotection.govmu.org.
- Financial Intelligence Unit, Mauritius (for suspected payment fraud) — fiumauritius.org.
Acceptance record
TheShop.mu — operated by TheShop.mu Ltd ("we", "us", "our")
Roma Lane, Riche Terre 11701, Mauritius
Registered in Mauritius — company details on the Mauritius Companies Division registry and in the Site footer
Customer service: customerservice@theshop.mu | Refunds: refunds@theshop.mu
WhatsApp / Mobile: +230 5250 6006 | Landline: +230 253 7611
Effective date: 1 May 2026
Last updated: 27 May 2026
Version: 1.2
If you only have 60 seconds:
The rest is the detail behind those three.
When you complete a purchase on TheShop.mu, you are entering into a contract of sale with TheShop.mu Ltd, at the address and contact details set out at the top of this document. TheShop.mu Ltd is the merchant of record for the transaction. The charge that appears on your card or bank statement will read `THESHOP MU`. If a different name appears on your statement, please contact us at customerservice@theshop.mu before contacting your bank — see §9.
We do not process card or wallet payments ourselves. We use the following regulated payment providers:
The acquiring bank for our merchant account is a licensed Mauritian commercial bank. Settlement is in Mauritian rupees (MUR), into a TheShop.mu Ltd-held account at that bank.
By proceeding through checkout you accept that, for the purposes of card and wallet payments, you are also subject to the terms of the relevant processor (Peach Payments' terms are at https://www.peachpayments.com/legal). To the extent of any conflict between this document and the processor's terms in respect of the processor's own service, the processor's terms govern that processor's service; this document governs your relationship with TheShop.mu Ltd.
This is the core technical fact that drives every other clause in this document. Please read it in full.
We do not at any time access, see, store, transmit, or otherwise process the following:
When you click "Pay" at the end of your order, your browser is redirected to Peach Payments' secure checkout page. You enter your card or wallet details on Peach's infrastructure, not on TheShop.mu. Peach completes the transaction with your card's issuing bank, and you are redirected back to TheShop.mu with only an opaque transaction reference. Peach also notifies us, in the background, that the payment succeeded or failed.
We see and store only:
This information is held against your order in our database for the periods stated in our Privacy Policy.
If you opt to save a card for faster checkout next time, the card itself is not saved with us. Peach Payments stores an encrypted token (a registrationId) that represents your card inside Peach's environment. We store only:
To charge a saved card on a future order, we ask Peach to charge the token; we still do not see the card number. If you want to delete a saved card, go to My Account → Payment Methods → Delete; we remove our token reference and instruct Peach to delete the card on their side.
We have organised this section as a table because the question "who pays when something goes wrong" is the question customers most reasonably want answered.
The detail behind each of these is in §§5–11.
When you click "Pay" on TheShop.mu and choose to pay by card, your bank will challenge the transaction through 3-D Secure 2 (3DS 2). This typically means you will:
3-D Secure is a service provided by your bank to verify that you, the cardholder, are the person making the transaction. It is not provided by TheShop.mu or by Peach Payments. We do not see your password, OTP, or biometric data.
Our policy: we require 3-D Secure authentication on every card transaction on TheShop.mu. We do not opt out of 3-D Secure for any customer or any order size. If a 3-D Secure challenge is not completed, the transaction will be declined and your order will not be created.
By proceeding to pay you agree that completing the 3-D Secure verification is your authorisation of the payment. The verification record produced by your bank is binding evidence that the transaction was authorised by you.
When you click the "Pay Rs X,XXX" button:
If we decline your order after a successful card authorisation, the authorised amount will be released by your bank within 1–10 business days (we have no control over this — your bank releases the hold). No funds are settled to us in this case.
After a successful payment you will receive:
The charge on your bank or card statement will read `THESHOP MU` (or, depending on your bank's display, may include up to a 25-character version such as THESHOP MU LTD). If you see a different name, please contact us first — see §9 — rather than disputing with the bank, because we can usually identify the transaction in under an hour.
This section is the single most important practical clause in this document. Please read it.
If you see a charge on your card or bank statement that you do not recognise:
Why we ask you to contact us first:
By proceeding to pay, you agree to make a reasonable effort to contact us before opening a card-network dispute, unless you have a specific reason to believe the transaction is genuinely fraudulent (see §10).
This obligation does not prevent you from exercising any statutory right you have under Mauritian law, including under the Consumer Protection Act 1991. It does not affect your right to chargeback under your card scheme's rules. It is a request for first-line contact, supported by the chargeback-prevention reasoning above.
If your card details have been stolen and used on TheShop.mu without your knowledge:
Important distinction. If the card was used by a member of your household, a relative, an employee, or anyone with access to your card with or without your permission, this is not unauthorised use in the legal sense — the card scheme's term is "first-party fraud" or "friendly fraud", and your bank is unlikely to refund you. Please raise this with the person who used the card. If a delivery has already been made we cannot reverse the supply of perishable goods, but we are happy to discuss in good faith.
The detail of refunds is in our Refund and Cancellation Policy. For payment purposes only:
When you click "Pay" we record, against the order: the version of this document, the timestamp, your IP address at the moment of click, the session reference, and the amount and currency authorised. This record is retained for 7 years (per the Mauritius Income Tax Act retention requirement applied to commercial records) and is the evidence we present in any dispute representment to a card scheme.
End of document.