Our Privacy Policy Madafocus SARL

1. Who We Are

Madafocus acts as the data controller for the personal information collected through our
website, email communication, and booking process.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Full name
• Date of birth
• Nationality
• Passport details (when required for flights or permits)
• Contact details (email address, phone number, postal address)
• Travel preferences and itinerary information
• Emergency contact details
• Payment-related information (invoices, transaction confirmations)
• Any information voluntarily shared with us during communication

We only collect data that is necessary to organize and operate your journey.

3. Why We Process Your Data

We process your personal data for the following purposes:

• To prepare and send travel proposals
• To confirm and manage bookings
• To arrange accommodation, transport, domestic flights, park permits, and other services
• To comply with local legal requirements
• To communicate with you before, during, and after your trip
• To send relevant travel information or updates
• To improve our services

We process your data on the legal basis of:

• Contract performance (to organize your trip)
• Legal obligation (where required by law)
• Legitimate interest (service improvement, operational communication)
• Consent (where applicable, such as newsletters)

4. Data Sharing

To deliver your travel experience, we may share necessary personal data with carefully selected
third-party service providers, including:

• Hotels and lodges
• Local guides and drivers
• Domestic airlines
• National parks and local authorities
• Transfer or boat operators

We only share information that is strictly necessary for the execution of your travel services.

Where required, we ensure that our partners handle personal data with appropriate
confidentiality and security measures.

5. International Transfers

As Madafocus SARLU is based in Madagascar, personal data may be processed outside the European
Economic Area (EEA). We take reasonable steps to ensure that such transfers are handled securely
and in accordance with GDPR principles.

6. Data Retention

We retain personal data only for as long as necessary:

• For the duration of the booking and travel
• To comply with accounting and legal obligations
• To resolve potential disputes

After this period, personal data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your data against
unauthorized access, loss, misuse, or alteration.

While no digital system is entirely risk-free, we take reasonable steps to ensure your
information is handled responsibly.

8. Your Rights Under GDPR

If you are located in the European Union, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where legally possible)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at
frank@madafocus.mg.

9. Cookies

Our website may use cookies to improve user experience and analyze website traffic. You can
manage cookie preferences via your browser settings.

10. Updates

We may update this Privacy Policy from time to time. The most recent version will always be
available on our website.