Introduction

Respecting and protecting your privacy and personal data is very important to FlyingFox Creative. It is a fundamental right and a key aspect of our business practices. In line with the Mauritius Data Protection Act 2017, we accept responsibility for managing your personal data responsibly, collect only what is necessary, use it solely for essential service-related purposes, avoid sharing it unless required for service delivery or by law, ensure accuracy, maintain transparency, safeguard your data, and retain it only as long as necessary. By providing your personal data, you agree to this Policy and authorize us to process it as described. We take appropriate technical and organizational measures to secure the integrity and confidentiality of your data and prevent unauthorized access or processing.

Reasons for Processing Personal Data

We collect, use, and retain your personal data to provide our photography, videography, and drone services; respond to inquiries and booking requests; verify your identity; comply with legal or regulatory requirements; fulfill contractual obligations such as invoicing, communication, file delivery, and payments; send marketing updates with your consent; support operational needs; and comply with requirements from regulatory authorities, legal proceedings, or court orders.

Business Activities for Which Personal Data Is Processed

We process personal data to deliver photography, videography, and drone services; administer and develop our business; communicate regarding bookings, project updates, and marketing materials (with consent); and comply with the Data Protection Act 2017 and relevant regulatory bodies.

Sharing or Transfer of Personal Data

We generally do not share your personal data with third parties unless legally justified. We may share data with trusted service providers such as secure cloud storage or payment processors, strictly as necessary and in compliance with the Act. International transfers may occur when using overseas tools or servers, and we implement safeguards to ensure equivalent protection. We may also disclose data when required by law, to protect our rights, in legal proceedings, to professional advisers, or to regulatory authorities. We do not sell your personal data.

Information Security

We are legally obliged to protect the personal data we hold and prevent unauthorized access or use. We maintain strong security controls, including encryption, access restrictions, and regular testing. Third parties we engage are required to uphold strict confidentiality and security standards. In the event of a high-risk data breach, we will notify the Data Protection Commissioner within 72 hours and inform affected individuals unless the risk has been mitigated.

Retention of Personal Data

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, data is deleted after the project ends plus a reasonable retention period (e.g., up to 2 years). After this, data is securely destroyed or anonymized.

Your Rights Under the Data Protection Act 2017

You have the right to access your personal data, request rectification, request erasure, restrict processing, object to processing, request data portability, and avoid automated decision-making. You may request confirmation of processing, obtain a copy of your data, correct inaccuracies, request deletion where applicable, restrict or object to processing, or transfer your data to another controller where technically feasible. Requests may require proof of identity and will be answered within one month.

Amendments to Your Information

You may request updates, corrections, or deletions to your personal data at any time. Please provide sufficient information for us to identify and process your request. We encourage you to keep your information accurate and notify us of any changes.

How to Contact Us

If you have questions about this Policy, wish to withdraw consent, exercise your rights, or access/correct your personal data, contact our Data Protection Officer: Jason Glanville, FlyingFox Creative — Email: jason@flyingfoxcreative.mu | Phone: +230 5 482-1595. We are registered with the Data Protection Office of Mauritius. For further concerns, you may contact the Data Protection Commissioner at dataprotection.govmu.org or dpo@govmu.org.

Definition of Personal Data

Under the Data Protection Act 2017, personal data refers to any information relating to an identified or identifiable living individual, including name, identification number, location data, online identifiers, or factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity.