Privacy Policy

1. Who is responsible for your data

The Association d'Alphabétisation de Fatima (Fatima Literacy Association) is the controller of your personal data under the Mauritius Data Protection Act 2017.

2. What we collect

The "Become a Sponsor" form

We collect your name, your email address and, if you choose to provide them, your phone number and your message. We use this only to answer your sponsorship enquiry and to follow it up.

This form does not send anything to a server. It prepares a message that you send yourself, from your own phone or computer, through WhatsApp or your email software. Your enquiry therefore reaches us as an ordinary message.

Providing this information is voluntary. You are under no obligation to give it to us, but without it we cannot reply to you.

Donations and tax receipts

If you make a bank transfer, your bank passes us your name and the reference of your donation. If you ask for a tax receipt, we collect the information needed to issue it.

Visiting this site

Our hosting provider keeps technical logs (IP address, date and page visited) for security and for the proper running of the site.

This site sets no analytics or advertising cookies of its own and we build no profiles. The Google Maps embed on the Contact page may, however, set Google cookies. We do not sell or rent your data to anyone.

3. Photographs of our pupils

This site publishes photographs of school life. Our pupils are between 11 and 18 years old.

We publish these photographs on the basis of consent (section 28(1)(a) of the Data Protection Act 2017). For a pupil under 16 that consent is given by a parent or guardian, as section 30 requires; from the age of 16 the pupil consents personally. We obtain that consent before publishing a pupil's photograph, and we remove any photograph immediately on request.

A parent, a guardian or the pupil concerned may ask us to remove a photograph at any time and without giving a reason. Write to [email protected] and we will take it off the site.

4. Who has access to your data

• the management team of the association;
• Cloudflare, which hosts this site and keeps the technical logs;
• Microsoft, which hosts the association's email;
• WhatsApp (Meta), if you choose to write to us on WhatsApp;
• Google, which provides the site's fonts and the map shown on the Contact page.

5. Transfers outside Mauritius

The providers listed above (Cloudflare, Microsoft, Meta, Google) host their servers outside Mauritius, mainly in the United States and in Europe, so your data is transferred abroad. Those countries are not the subject of a general equivalence recognition by Mauritius: protection there rests on the contractual data protection commitments these providers give. Such transfers are governed by section 36 of the Data Protection Act 2017 and are limited to what is needed to run this site and to correspond with you. If you would rather avoid these services, you can reach us by phone or by post at the address given above.

6. How long we keep it

• Sponsorship and contact enquiries: for as long as we are in touch, then 3 years after the last contact.
• Donations and tax receipts: for as long as our accounting and tax obligations require.
• Site technical logs: the short period applied by our hosting provider.

After that, the data is destroyed, as required by section 27 of the Data Protection Act 2017.

7. Your rights

You may ask us at any time to:

• access the data we hold about you;
• correct it if it is inaccurate;
• restrict how it is used;
• erase it;
• object to its use;
• withdraw your consent, without affecting what was done before you withdrew it.

Write to [email protected]. We will reply in writing within one month. For access requests that period is set by section 37 of the Data Protection Act 2017; requests to correct, erase or restrict data are dealt with without undue delay, as section 39 requires.

Where the person concerned is a minor, these rights may also be exercised on their behalf by a person who has parental authority over them or who has been appointed their guardian (section 41). A pupil who is old enough to understand what they are asking for may also exercise these rights themselves.

8. Automated decisions

We make no automated decisions about you and we build no profiles.

9. Security

The site is served over HTTPS, and access to the content editing area is limited to authorised people within the association.

10. Complaints

If you believe your data has not been handled properly, please write to us first and we will put right whatever needs putting right. You also have the right to complain directly to the Data Protection Office:

11. Changes

We may update this policy. The date it was last updated is shown at the top of this page.