Who is responsible
The Portal Passport is the travel brand of The Portal by Selectro, a registered Mauritian event-promotion company. It is responsible for the information this site collects, and it is who you are dealing with when you register, enquire or sign in.
Nothing you send from this site reaches a booking system, a spreadsheet or a customer database held by anyone else. A registration and an enquiry are both read by a person on that team, and the forms say so before you type anything.
There is no named data-protection officer. Requests about your own information go through the contact form, and they reach the same people.
What we collect
Only what you type, and only when you choose to. There is no analytics on this site, no advertising, no tracking pixel and no third-party script of any kind — that is enforced by the site's content security policy, not by good intentions.
If you send an enquiry, we receive the four things the form asks for: your name, your email address, the subject you picked, and your message. Nothing else from that page is transmitted.
If you register for the journey, we receive your name, your email address, your mobile number, your answer about the festival ticket, your answer about which package interests you, your answer about how you would expect to pay, your declaration that you are resident in Mauritius, and — if you write one — how you heard about us. That is the whole list, and the form rejects any submission carrying an identity document number, a date of birth, a nationality or an address, before it is validated. Your consent to be emailed about future journeys is recorded separately from your acceptance of the terms, and neither is ticked for you.
A registration reaches us as an email, and is also written to a private spreadsheet we keep for the allocation. Those are the only two places it goes: not a booking engine, not a marketing platform, not an advertising network, and nothing is passed to anyone for their own purposes. The spreadsheet lives on Google Drive, is visible only to the people running this journey, and holds exactly the list above and nothing more. It exists because places are filled in the order people register, and that order has to be sortable by the people working it. An automated test fails if the registration path ever reaches a service that is not named on this page, so the change that adds one is the change that has to declare it here.
No payment is taken on this site and no payment detail is collected by it. There is no card form, no payment page and no payment processor. When the time comes to pay, you make the transfer at your own bank or you deal with the credit provider directly, and neither of those passes through this website.
If you are a member and sign in, we hold your display name, your language preference, the date you joined, and the record of your journeys: which journey and package, its status and reference, what has been paid and what is outstanding, a checklist of which documents are still outstanding, announcements for journeys you are on, and the stamps you have collected.
If you ask Portal a question, the question and the conversation so far are sent to the model provider named below so it can answer. Most questions never reach it at all — they are answered from text written in advance and stored on this site.
We also process your IP address transiently, to limit how often a single sender can submit the form or ask a question. It is held in memory for the length of that window and never written to the database.
The two consents, and why they are separate
Registering asks you for two different things and they are two different boxes. Accepting the terms and conditions and this privacy policy is required — it is the agreement under which we deal with you at all. Being emailed about future journeys is optional, it starts unticked, and refusing it changes nothing: the same registration, the same position in the allocation, the same answer on 28 September 2026.
They are kept apart because bundling them would make the second one worthless. Consent has to be freely given and specific under the Mauritius Data Protection Act 2017 and under the GDPR, and a marketing permission you could only refuse by abandoning your registration is not freely given. So neither box is ticked for you, neither is inferred from the other, the validator reads them independently, and the notification that reaches us records which of the two you actually gave.
You can withdraw the marketing consent whenever you like — reply to any email we send you, or write through the contact form — and it costs you nothing. Withdrawing your acceptance of the terms is a different act: it means telling us you no longer want a place, which is a conversation with a person rather than a tick box.
What the site cannot hold
This is a design decision enforced in the database itself, not a promise about our habits. The schema has no column for a passport number, and none for a date of birth, a nationality, a home address or a telephone number beyond the mobile you give us. The document section records only *that* something is outstanding — there is no file upload and nowhere for a scan to go.
A schema that can hold passport scans eventually holds passport scans. Adding any of those fields would take a deliberate migration, and an automated test fails the moment one appears.
No identity document is collected at registration, by anyone, for any purpose. Not by us, and not on behalf of a lender. If you apply for credit to pay for your place, the lender asks you for an identity card, proof of address, a payslip and bank statements — and you give those to the lender, directly, through their own channel. None of it passes through this site, and there is nowhere on this site for it to go.
When a journey genuinely needs your passport details, they will be collected by a person, for that purpose, with its own consent and its own retention rule — not accumulated quietly by a website.
Who else sees it
These are the companies that touch anything you send, and what each of them touches. Each sees only what it needs to do its job, none of them is an advertising company, and this is the whole list — a test reads the outbound addresses in the code and fails if one of them is not named here.
- Vercel hosts the site. Requests are served from Singapore and processed in the United States.
- Supabase holds the member database and handles sign-in. The database is in Mumbai, India.
- Resend delivers email. Your enquiry and your registration both reach us through it, and it also carries our own operational alerts.
- Google holds the registrations spreadsheet on Google Drive, and Google Apps Script is the small program that writes each new registration into it. It receives a registration only when you submit the form, and it receives the same answers the email carries and nothing else — no identity document, no payment detail. Google processes it in the United States.
- A model provider answers Ask Portal, and the site holds keys for up to three: Google, through its Gemini API; OpenAI; and Anthropic. They are tried in a fixed order, and a question the first cannot answer — because it is refusing, rate-limiting, timing out or down — is retried with the next, so more than one may see it. Most questions reach none of them: they are answered from text held on this site and never leave it. Ask through the contact form which providers are configured today and we will tell you.
- WhatsApp, which belongs to Meta, is a way of reaching us rather than a part of this site. The contact page carries a link to it. Nothing is sent there by the site itself, but a conversation you start on WhatsApp lives on Meta's service under Meta's terms and not ours — the contact form and the telephone number are on the same page if you would rather it did not.
- Not on this list, and deliberately: the credit provider. Rogers Capital is named on this site because you may want to borrow from them, and that is the whole of the relationship. Nothing you type here is sent to them, no form of theirs is embedded here, and we receive no commission and no notification if you apply.
Where your data goes
As the list above makes plain, your information leaves Mauritius. It is processed in the United States, India and Singapore depending on the service, and a question put to Ask Portal that reaches a model is processed wherever that model provider runs.
We are telling you this rather than burying it because it is the part of any privacy policy that actually matters and the part most often left vague. If you would prefer that something not cross a border, the answer is to tell a person instead of typing it into a form, and we will handle it that way.
Photographs and film
Professional content creators travel with the group and photograph and film the journey. That is part of what a place includes: you receive shareable footage of your own journey afterwards.
You agree to it when you accept the terms and conditions at registration, which say so in the same words rather than in a clause you have to hunt for. Filming happens in respectable conditions, in public parts of the journey, and never where someone would reasonably expect not to be photographed.
You can decline, at any point, and nothing else about your place changes. Tell a host or write to us and you are not filmed, not photographed, and not published. If material of you is already published when you ask, we remove it from anything we control.
How long we keep it
Enquiries are kept while we are dealing with them and for up to 24 months afterwards, so that we can pick up a conversation you started last year. After that they are deleted.
Registrations are kept until the allocation has been decided and the journey has run, and are then deleted unless you have become a member or asked to hear from us again.
Member records are kept while you are a member and while a journey of yours is live. Records that relate to money — what was owed and what was paid — are kept for as long as accounting obligations require.
The two consents are kept with the registration they were given in, because a consent whose date and wording cannot be shown is not much of a record. If you withdraw the marketing one, what remains is the note that you withdrew it and when.
Ask Portal conversations are not stored. Questions are answered and discarded; what remains is an operational count of how many were asked, with no text attached.
Your rights
Under the Mauritius Data Protection Act 2017, and under the GDPR where it applies to you, you can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy in a portable form, and object to a particular use.
Ask through the contact form and a person will answer. We will not require you to prove a legal basis for asking, and we will not charge you for it.
If we ever get this wrong, you can complain to the Data Protection Office in Mauritius, or to your own supervisory authority if you are in the EU. We would rather you told us first, but that is your choice and not a condition.
How it is protected
Member data is protected at the database level: every table refuses to return a row unless the person asking is the person it belongs to. That rule is enforced by the database itself rather than by application code, so a mistake in a query cannot expose what someone else has paid. It is verified against the live database by an automated test.
There are no passwords on this site. Signing in uses a one-time link sent to your address, so there is no password to store, to leak, or to reuse somewhere else. The sign-in page also answers identically whether or not an address belongs to a member, so it cannot be used to find out who our members are.
Changes
When this policy changes we will change the date at the top of the page. If a change is significant — a new service handling your data, a new category of information collected — we will say so plainly rather than relying on you to re-read it.