C’est dans la boiteBack to the photographs

Privacy Policy

This website is a photography portfolio. It has no visitor accounts, no contact form, no newsletter, no advertising and no analytics. This page explains the little personal data that is handled, and what to do if you appear in a photograph.

Who is responsible

This website is run by Gregory Albert, an individual trading as C’est dans la boite, 453 Lady Barkly Street, Souillac, 1608-03, Mauritius. “We” in this policy means that person, who is the controller of your personal data. You can reach us at gregoryalbert1209@gmail.com.

We handle personal data in line with the Data Protection Act 2017 of Mauritius.

What we handle, and why

When you visit the site

The site is delivered by our hosting provider, Cloudflare. To send you the pages and to protect the site from abuse, Cloudflare processes technical information that every browser sends: your IP address, the type of browser and device, the address of the page requested, and the date and time. We also keep request logs so that we can diagnose errors. We do not use this information to identify you or to follow you across other websites.

Request logs are kept for up to seven days and then deleted.

When you email us

If you write to us, we receive your email address, your name if you give it, and whatever you tell us. We use it to reply and, if you ask, to arrange a commission. We keep enquiries only for as long as we need them for that.

If you commission us

The details needed to carry out and invoice a commission are collected directly from you when you book, not through this website, and are explained in your booking agreement.

If you appear in a photograph

Portraits are made and shown with the agreement of the person photographed. Street and documentary photographs are made in public places. A photograph of you is your personal data. If you appear in a photograph on this site and would like it removed, or want to know more about it, email gregoryalbert1209@gmail.com and tell us which photograph. We will reply within one month.

Cookies

Visitors receive no cookies from this website, and nothing is stored in your browser. The details are in our Cookie Policy.

Who else handles the data

We do not sell personal data and we do not share it with advertisers. If the site links to our Instagram profile, following that link takes you to Instagram, which has its own privacy policy.

Transfers outside Mauritius

Cloudflare operates servers around the world, including in the United States, so the technical information described above is processed outside Mauritius.

Why we are allowed to do this

We process technical information because it is necessary for our legitimate interest in running a secure website. We process your emails because you asked us to reply, and to take steps towards a contract when you ask for a commission.

Your rights

Under the Data Protection Act 2017 you can ask us to:

To use any of these rights, email gregoryalbert1209@gmail.com. We reply within one month and do not charge for it. If you are not satisfied with our answer, you can complain to the Data Protection Commissioner at the Data Protection Office of Mauritius.

Changes to this policy

If what the site does with personal data changes, this page will be updated before the change takes effect, and the date below will change.

Last updated 8 October 2026.