Privacy Policy

1. Data Controller

The data controller is FFGR SAS, a company incorporated under French law, operating the FFGR Paris brand with principal operations in Paris, France.

2. Data We Collect

We collect only the information strictly necessary to provide our services:

• Full name and title
• Email address and telephone number (including WhatsApp)
• Travel dates, pick-up and drop-off locations, and itinerary details
• Passport or identity document details (when required by French law or for border crossings)
• Payment and billing information (processed by certified PCI-DSS providers)
• Special requirements: dietary preferences, medical needs, security profile (optional, at client request)
• Communication history for reservation management purposes

3. How We Use Your Data

4. Legal Basis for Processing

5. Data Retention

Personal data is retained for the duration necessary to fulfil the service and comply with our legal obligations — generally a maximum of five (5) years from the date of the last service. Security-related records (threat assessments, vehicle logs) are retained for seven (7) years pursuant to French security legislation. Upon expiry, data is securely deleted or permanently anonymised.

6. Your Rights

Under the GDPR and applicable French law (loi Informatique et Libertés), you have the right to:

To exercise any right, contact us at contact@ffgrparis.com. We will respond within 30 days.

7. Security Measures

We implement technical and organisational measures to protect your data, including end-to-end encryption for communications, access controls with multi-factor authentication, regular security audits, and staff training on data protection. Our systems are hosted on ISO 27001-certified infrastructure within the European Economic Area.

8. Third-Party Transfers

Where your service requires engagement of partner operators (e.g. helicopter companies, yacht providers, aviation brokers), only the minimum data necessary to fulfil your booking is shared. All partners are contractually bound to the same confidentiality and GDPR compliance standards as FFGR Paris. No transfers occur outside the EEA without appropriate safeguards (Standard Contractual Clauses or equivalent).

9. Cookies & Analytics

Our website uses only strictly necessary cookies required for its operation. We do not use advertising or third-party tracking cookies. Anonymous analytics (page views, session duration) are collected via a privacy-first tool without personal identifiers. You may disable cookies in your browser settings without affecting service functionality.

10. Changes to This Policy

This policy may be updated from time to time to reflect changes in legislation or our practices. The date at the top of this page indicates the most recent revision. For significant changes, we will notify existing clients by email.