Rockjumper Birding Ltd (referred to as “Rockjumper”, “we”, “us” or “our”) organises and supplies guided travel experiences. For the processing described in this notice, Rockjumper Birding Ltd is generally the data controller because it decides why and how personal information is used.

Our contact details are: Labourdonnais Village, Mapou, Riviere du Rempart 31803, Mauritius; email: info@rockjumper.com; website: https://www.rockjumperbirding.com/.

Some travel suppliers that receive your information make their own decisions about how they use it and may therefore be independent data controllers. Their privacy notices may also apply.

This notice applies when you visit our website, enquire about or book a tour, travel with us, create an account, subscribe to communications, attend an event or webinar, enter a promotion, supply services to us, apply for work, or otherwise communicate or interact with us. It also applies when another person makes an enquiry or booking on your behalf.

If you provide information about another traveller, emergency contact or family member, you must be authorised to do so and should make this notice available to that person where reasonably possible.

We obtain information directly from you and from people acting for you, including travel agents, family members and lead bookers. We may also receive it from our group companies, payment and booking providers, travel suppliers, guides, publicly available sources, marketing partners, referees, insurers and authorities, where lawful. Our website and security systems collect some technical information automatically.

We use personal information only where we have a lawful basis. The applicable basis depends on the purpose and circumstances. Consent is not our only basis and is generally reserved for activities where a genuine choice is possible, such as certain marketing, optional use of images and some uses of sensitive information.

Where we rely on legitimate interests, we consider the necessity of the processing and balance our interests against the individual’s rights and reasonable expectations. You may contact us for further information about that assessment.

Health, disability and some dietary information may be treated as special-category or sensitive personal information. We ask only for information reasonably needed to evaluate practical suitability, make appropriate arrangements, protect health and safety or respond to an emergency. We normally rely on explicit consent where the law requires an additional condition for this processing. In a genuine emergency, we may process or disclose information to protect your or another person’s vital interests where consent cannot reasonably be obtained.

You may decline to provide optional sensitive information. However, if information is necessary to assess whether a tour is appropriate or to deliver an essential safety or accessibility arrangement, we may be unable to confirm or safely provide some services without it.

We share only the information reasonably required for the relevant purpose. Recipients may include:

• accommodation providers, lodges, camps and rooming coordinators;
• airlines, charter operators, rail, cruise, transfer and vehicle operators;
• destination management companies, ground handlers, local operators, tour leaders and guides;
• activity providers, parks, reserves, permit offices and conservation authorities;
• visa, immigration, customs, border, aviation, health and other government authorities;
• payment gateways, banks, card networks, accountants and fraud-prevention providers;
• IT hosting, cloud, communications, booking, customer-management, analytics and security providers;
• insurers, assistance companies, medical providers and emergency services where necessary;
• our related companies and operational teams supporting the Rockjumper group and its associated travel brands, where they support the booking or shared business operations;
• professional advisers, auditors, regulators, courts, law-enforcement bodies and parties involved in a legal claim;
• a purchaser, investor or successor in connection with a proposed or completed corporate transaction.

Some recipients act on our instructions as processors. Others, particularly airlines, accommodation providers, authorities, insurers and certain local operators, may process information as independent controllers under their own legal duties and privacy notices.

Online card payments are processed through a payment gateway that is expected to maintain applicable Payment Card Industry Data Security Standard (PCI DSS) controls. Complete card numbers and card security codes are submitted to and processed by the payment provider; we do not store those complete details. We may retain limited transaction information such as payer name, billing details, amount, currency, date, payment status, an abbreviated card reference or last digits, and a transaction identifier for booking, accounting, fraud-prevention, refund and legal-compliance purposes.

We may use preferences, previous travel, mobility or fitness information and other practical requirements to assist staff in recommending an appropriate tour. We do not intend to make decisions producing legal or similarly significant effects solely by automated means. A member of our team can review recommendations and discuss your requirements. If this changes, we will provide the information and safeguards required by applicable law.

We operate international tours. Your destination, residence, payment route, suppliers and our service providers may be in countries outside Mauritius and, where applicable, outside the United Kingdom, European Economic Area or South Africa. Those countries may have different data-protection laws.

We transfer only information reasonably needed to arrange and deliver services, protect travellers, process payments or meet legal requirements. Depending on the circumstances and applicable law, we rely on an adequacy decision, approved contractual protections, another recognised safeguard, transfer necessary to perform or conclude a travel contract requested in your interests, legal claims, important public-interest grounds, vital interests, or your explicit consent after explaining relevant risks. You may contact us for information about the safeguard relevant to a particular transfer, subject to lawful confidentiality restrictions.

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, safety, insurance and claims requirements. The periods below are our standard targets and may be extended where a complaint, claim, investigation, legal hold or statutory requirement applies, or shortened where the information is no longer needed.

When a period expires, we delete, securely destroy or anonymise information unless continued retention is lawful and necessary. Backup copies are isolated from ordinary use and removed in accordance with backup cycles.

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure. Measures may include access controls, authentication, encryption in transit or at rest where appropriate, secure payment processing, staff confidentiality and training, supplier controls, backups, monitoring and incident-response procedures. No system is completely secure, and you should use secure channels and protect your account credentials.

Our website may use cookies, pixels, local storage and similar technologies. These may be:

• strictly necessary technologies required for security, network management, login, forms, booking functions and user-requested services;
• preference technologies that remember choices and settings;
• analytics technologies that help us understand use, performance and errors; and
• marketing technologies that help measure campaigns or tailor advertising, where used.

Where required, non-essential technologies are used only after you make a choice through our cookie controls. You can change available choices through those controls and may also manage cookies in your browser. Blocking necessary technologies may prevent parts of the website from working. Our cookie banner or cookie notice should identify current technologies, providers, purposes and durations; it forms part of this notice.

We may send information about tours, events, content and offers where you have consented or where applicable law otherwise permits it. You can unsubscribe through the link in an email or contact us at any time. We may retain a minimal suppression record so that we do not contact you again through that channel. Service messages about an enquiry or booking are not marketing and may still be sent where necessary.

We may invite you to provide a testimonial, image or trip content, or ask permission to use identifiable photographs or recordings for editorial or promotional purposes. Where consent is the appropriate basis, participation is voluntary and you may withdraw consent for future use. Withdrawal does not make prior lawful use unlawful and may not allow us to recall printed material or content already shared by others. We will provide more specific information where a particular shoot, event or campaign requires it.

Children may travel on some tours. A parent, guardian or authorised adult must provide information for a child and make booking and privacy choices on the child’s behalf where required. We use a child’s information only as reasonably necessary to assess suitability, make travel and safety arrangements, comply with law and deliver the tour. We do not knowingly use children’s information for direct marketing without appropriate authorisation.

Depending on the law applicable to you and the circumstances, you may have the right to:

• be informed about how your personal information is used;
• request access to your personal information and a copy of it;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information where there is no lawful reason to keep it;
• ask us to restrict processing in specified circumstances;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain information in a structured, commonly used, machine-readable format or ask for it to be transferred, where the right to portability applies;
• withdraw consent at any time for future consent-based processing; and
• request human intervention and challenge a qualifying decision made solely by automated means.

To exercise a right, email info@rockjumper.com. Please describe your request and the information concerned. We may ask for information reasonably needed to verify your identity or authority. Rights can be subject to legal conditions and exemptions; if we cannot fulfil a request, we will explain why where the law requires. We do not ordinarily charge a fee, but applicable law may permit one for manifestly unfounded, excessive or repeated requests.

You may also complain to the Data Protection Office of Mauritius (dataprotection.govmu.org). If another data-protection law applies, you may have the right to complain to the supervisory authority in your country or region. We encourage you to contact us first so we can try to resolve the matter.

Some information is required to enter into or perform a booking, comply with law or protect traveller safety. We will indicate where information is mandatory when this is not obvious. If you do not provide required information, we may be unable to issue a quotation, confirm a booking, arrange a service or safely accept participation. Optional information can be withheld without affecting unrelated services.

Our websites and communications may link to services that we do not control. Their privacy practices are governed by their own notices. A link does not mean that we are responsible for the other service’s processing.

We may update this notice to reflect changes in our activities, systems or legal obligations. The current version will be posted on our website with its revision date. Where a change materially affects how we use existing information, we will provide additional notice where reasonably practicable or legally required.

Questions, rights requests and privacy complaints may be sent to info@rockjumper.com or by post to Rockjumper Birding Ltd, Labourdonnais Village, Mapou, Riviere du Rempart 31803, Mauritius. Please mark correspondence “Privacy”.

This notice should be read together with any more specific privacy information provided at the point of collection, our cookie information and the terms applicable to your booking or use of our services.