Privacy Policy

Last updated: 8 September 2026

1. Who we are

UNG Mobility Services Ltd (“UNG”, “we”, “us”, “our”) is a transport and event-logistics company incorporated in the Republic of Mauritius. We provide passenger transport, shuttle services, event logistics, equipment supply, fleet management, venue and site coordination, and staff events.

For the purposes of the Data Protection Act 2017 of Mauritius, UNG Mobility Services Ltd is the controller of the personal data described in this policy, except where we act as a processor on behalf of a corporate client — for example when an employer supplies us with a staff shuttle list, or an event organiser supplies a guest transport manifest. In those cases the client remains the controller and their own privacy notice governs the data; we process it only on their documented instructions.

Registered office: [insert registered office address], Republic of Mauritius
Business Registration Number: [insert BRN]
Email: info@ungmobility.com
Telephone: +230 5256 6250 · +230 5940 8403

2. Scope of this policy

This policy covers personal data we handle when you:

• visit this website or contact us through it;
• enquire about, request a quotation for, or contract our services;
• travel with us as a passenger, guest or event attendee;
• attend, organise or work on an event we service;
• supply goods or services to us, or act for one of our suppliers or subcontractors.

Employees, drivers, crew and job applicants receive a separate internal privacy notice covering employment data; this policy does not replace it.

3. Personal data we collect

Website visitors and enquiries

• Name, company, email address and telephone number you provide in an enquiry or contact form.
• The content of your message and any correspondence that follows.
• Technical data automatically recorded by our web host: IP address, browser type and version, device type, pages viewed, date and time of access, and referring page.

Clients and prospective clients

• Contact details of the individuals who act for a client organisation — name, job title, work email, work telephone.
• Details of the assignment: dates, locations, requirements, quotations, contracts and correspondence.
• Billing and payment information, and records needed for accounting and tax purposes.

Passengers, guests and event attendees

• Name and, where the assignment requires it, employer, department or booking reference.
• Pick-up and drop-off points, scheduled times and travel dates.
• Contact telephone number, where needed to coordinate a pick-up or notify a delay.
• Accessibility or assistance requirements you or your organiser tell us about, so we can allocate a suitable vehicle and crew.
• Attendance and boarding records where a client requires reconciliation of a shuttle or transfer.

Operational and vehicle data

• Journey records: routes operated, timings, vehicle and driver allocated, mileage.
• Vehicle telematics and GPS location data from vehicles in service, used for scheduling, route management, safety and maintenance.
• On-board CCTV footage, where a vehicle is fitted with a camera system, for the safety and security of passengers, crew and property.
• Incident, accident, damage and complaint records, including statements and photographs where relevant.

Vehicle tracking is directed at the vehicle and the assignment, not at monitoring individual passengers. Where CCTV is fitted, signage is displayed in the vehicle.

Suppliers, subcontractors and site partners

• Contact details of individuals at supplier, subcontracted operator, venue and security organisations.
• Documents required to verify a subcontractor, such as licences, insurance certificates and driver credentials.

4. Where we get it from

Most personal data reaches us in one of three ways: you give it to us directly; your employer, event organiser or travel agent gives it to us so that a service can be delivered to you; or it is generated automatically by our vehicles and systems in the course of an assignment. Where a client passes us passenger or attendee data, that client is responsible for having a lawful basis to do so and for informing the individuals concerned.

5. How and why we use it

We use personal data only where the Data Protection Act 2017 allows it. In practice we rely on the following bases:

• Performance of a contract — to quote for, plan, operate and invoice a transport, shuttle, event or equipment assignment, and to communicate with you about it.
• Legitimate interests — to run and improve our operations, allocate vehicles and crew, keep passengers, staff and equipment safe, maintain our fleet, deal with incidents, complaints and insurance matters, protect against fraud and damage, and maintain business records. We balance these interests against your rights and freedoms.
• Legal obligation — to meet transport, licensing, road safety, health and safety, accounting, tax and other statutory requirements, and to respond to lawful requests from authorities.
• Consent — where we ask for it, for example before sending marketing communications or using photographs in which an individual is identifiable. Consent can be withdrawn at any time.
• Vital interests — in an emergency, to protect someone’s life or physical safety.

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

6. Who we share it with

We share personal data only where it is necessary to deliver the service or where we are required to. Recipients may include:

• the client organisation that engaged us, for reconciliation and reporting on an assignment;
• subcontracted transport operators, crew and equipment suppliers engaged on an assignment, limited to what they need to perform it;
• venue operators, event organisers and site security, where access control or accreditation requires it;
• insurers, brokers, loss adjusters and legal advisers in connection with a claim or dispute;
• the Police, regulators and other public authorities where we are legally required or permitted to disclose;
• IT, hosting, email and accounting service providers who process data on our behalf under contract.

We require our processors to protect personal data, to act only on our instructions, and to return or delete it when their work for us ends.

7. Transfers outside Mauritius

Our operations are based in Mauritius and personal data is normally held here. Some of the software we use — email, website hosting and cloud storage — may store data on servers outside Mauritius. Where personal data is transferred abroad, we take steps required by the Data Protection Act 2017 to ensure it remains protected, including appropriate contractual safeguards with the provider.

8. How long we keep it

We keep personal data only as long as it is needed for the purpose it was collected for, and for any period required by law:

• Enquiries that do not become assignments — up to 12 months.
• Client and assignment records, contracts and invoices — for the period required by Mauritian accounting, tax and company law.
• Passenger manifests and shuttle lists — for the duration of the assignment and a short period afterwards for reconciliation and dispute handling, unless the client instructs otherwise.
• Vehicle tracking and journey records — a limited operational period, then aggregated or deleted.
• CCTV footage — overwritten on a short cycle, unless retained for a specific incident, claim or lawful request.
• Incident, accident and insurance records — for as long as a claim may be brought.

9. How we protect it

We apply organisational and technical measures appropriate to the data we hold: access is limited to the people who need it to do their job; devices and accounts are password protected; manifests and operational lists are shared only with the crew assigned to the job; paper records are stored securely and disposed of properly; and our directors are directly involved in decisions about data. No system is completely secure, but if a breach occurs that is likely to result in a risk to individuals, we will notify the Data Protection Commissioner without undue delay and, where feasible, within 72 hours of becoming aware of it, and will inform affected individuals where the law requires.

10. Your rights

Under the Data Protection Act 2017 you have the right to:

• be informed about how your personal data is used;
• request access to the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to erase data, or to restrict how we use it, in the circumstances the law allows;
• object to processing carried out on the basis of our legitimate interests;
• object at any time to the use of your data for direct marketing;
• withdraw consent where our use of your data relies on it, without affecting processing carried out before you withdrew it;
• lodge a complaint with the Data Protection Commissioner.

To exercise any of these rights, write to us at info@ungmobility.com. We may need to verify your identity before we act. We will respond within one month; if a request is complex we may extend that period and will tell you if we do. There is no charge for a reasonable request.

If your data was given to us by your employer or an event organiser, we may need to refer your request to them, as they remain the controller of that data.

11. Cookies and this website

This website uses a small number of cookies and similar technologies. Strictly necessary cookies keep the site working and secure and cannot be switched off. Where we use analytics to understand how the site is used, that data is aggregated and is not used to identify individual visitors. Any third-party embedded content, such as fonts, maps or social media links, is served by those providers under their own privacy policies.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site from working properly.

12. Children

Our services are contracted by organisations and adults, and this website is not directed at children. Where an assignment involves transporting minors — for example a school or youth group movement — we handle only the data the organising body provides, on their instructions and with the consents they have obtained.

13. Changes to this policy

We review this policy periodically and will update it when our services, systems or legal obligations change. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.

14. Contact us

For any question about this policy, or about how we handle personal data:

UNG Mobility Services Ltd
Republic of Mauritius
Email: info@ungmobility.com
Telephone: +230 5256 6250 · +230 5940 8403