The Fine Print, Also Known as our House Rules

Fine Print

Our  T&C's

Man Reading a Legal Document

Small Potato

Our House Rules

We believe in keeping things clear and simple. Below, you'll find all the important documents that help us work together smoothly. Whether you're a customer, partner, or just browsing our website, these documents explain how we do things at Small Potato. Think of these as our house rules - they help us take good care of you and maintain trust in our relationship. We've organized everything in one place to make it easy to find what you need. What You'll Find Here:

  • Privacy Policy - How we protect your information
  • Data Protection Notice - Your data rights and our responsibilities
  • Copyright Information - What you can and can't do with our content

Need Help? If anything isn't clear or you have questions, we're always here to help! Just reach out to our team.

Privacy Policy

1. Introduction

This privacy policy outlines how The Third Eye Ltd, trading as Small Potato ("we," "us," or "our"), uses and protects any information that you provide when using our website. We are committed to ensuring your privacy is protected and maintaining your trust by securely storing and handling your personal information. Company Information:

Company Name: The Third Eye Ltd (trading as Small Potato)

Registered Office: Unit 114 - The Flore, Diary Lane, Floreal, Mauritius

2. Information Collection and Use

Types of Data Collected:

  • Personal identification information (name, email address, phone number)
  • Usage data (IP address, browser type, pages visited)
  • Cookies and tracking data
  • Payment information (where applicable)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: Where you have explicitly agreed to the use of your personal data
  • Contractual necessity: Where processing is necessary for the performance of a contract
  • Legal obligation: Where we need to comply with a legal requirement
  • Legitimate interests: Where processing is necessary for our legitimate interests

4. Use of Data We use your data to:

  • Provide and maintain our services
  • Process your transactions
  • Send you important updates and notifications
  • Provide customer support
  • Improve our services
  • Detect and prevent fraud
  • Comply with legal obligations

5. Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data transmission
  • Regular security assessments
  • ccess controls
  • Secure data storage
  • Staff training on data protection

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including:

  • Satisfying legal and regulatory requirements
  • Resolving disputes
  • Enforcing our agreements
  • Maintaining business records

7. Cookies

We use cookies to:

  • Analyze website traffic
  • Improve user experience
  • Remember your preferences
  • Enable certain website functionality

You can control cookie settings through your browser preferences. Cookie duration varies from session cookies to persistent cookies lasting up to 12 months.

8. International Data Transfers

When we transfer your data outside your country of residence, we ensure:

  • Adequate data protection measures are in place
  • Compliance with applicable data transfer laws
  • Implementation of appropriate safeguards

9. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure of your data
  • Object to processing
  • Restrict processing
  • Data portability
  • Withdraw consent
  • Lodge a complaint with a supervisory authority

We will respond to all legitimate requests within 90 days.

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of other websites. Please review their privacy policies.

12. Data Breach

Notification In the event of a data breach affecting your personal information, we will:

  • Notify affected individuals promptly
  • Inform relevant supervisory authorities
  • Take necessary measures to mitigate any risks

13. Changes to This Privacy Policy

We may update this policy periodically. Changes become effective upon posting to our website. We will notify you of any material changes via email or website notice.

14. Contact Us

For privacy-related inquiries:

  • Use the contact form on our website -
  • Response time: Within 5 working days

This privacy policy was last updated on 15 February 2025. By using our services, you agree to the terms of this privacy policy.

Data Protection

1. Introduction

This Data Protection Notice ("Notice") explains how The Third Eye Ltd, trading as Small Potato ("we," "us," or "our"), processes personal data in accordance with applicable data protection laws. Company Information: - Company Name: The Third Eye Ltd (trading as Small Potato) - Registered Office: Unit 114 - The Flore, Diary Lane, Floreal, Mauritius - Website: https://thirdeye.mu

2. Scope and Application

This Notice applies to all personal data processing activities conducted by us, including:

  • Website visitors
  • Customers and clients
  • Employees and job applicants
  • Business partners and suppliers
  • Marketing recipients

3. Data Protection Officer (DPO)

Our appointed DPO oversees our data protection compliance and can be contacted via:

  • Email: By using the contact form on this website
  • Post: See address in paragraph 1

4. Definitions

  • "Personal data": Any information relating to an identified or identifiable natural person
  • "Processing": Any operation performed on personal data
  • "Data subject": The individual to whom the personal data relates
  • "Controller": The entity determining the purposes and means of processing
  • "Processor": The entity processing data on behalf of the controller

5. Categories of Personal Data

5.1 Standard Personal Data:

  • Identity information (name, date of birth, gender)
  • Contact details (email, phone, address)
  • Technical data (IP address, browser information)
  • Usage data (website and service usage)
  • Professional information (job title, employer)

5.2 Special Categories of Personal Data:

We process special category data only when:

  • You have given explicit consent
  • Processing is legally required
  • Processing is necessary for employment purposes

5.3 Children's Data:

We do not knowingly process data of children under 16 without parental consent.

6. Purposes and Legal Basis for Processing

6.1 We process personal data for the following purposes:

Business Operations:

  • Providing our services
  • Contract fulfillment
  • Customer service
  • Quality assurance
  • Business development Administrative: -

Account management

  • Payment processing
  • Communication
  • Record keeping
  • Legal compliance

Marketing:

  • Service updates
  • Promotional communications
  • Market research
  • Analytics

6.2 Legal Basis for Processing:

Consent:

  • Marketing communications
  • Cookie usage
  • Special category data processing

Contractual Necessity:

  • Service delivery
  • Payment processing
  • Account management

Legal Obligation:

  • Tax compliance
  • Regulatory requirements
  • Employment law

Legitimate Interests:

  • Business improvement
  • Security measures
  • Fraud prevention

7. Data Security Measures

7.1 Technical Measures:

  • Encryption (in transit and at rest)
  • Firewalls and security software
  • Access controls
  • Regular security updates
  • Backup systems

7.2 Organizational Measures:

  • Staff training
  • Security policies
  • Access restrictions
  • Incident response procedures
  • Regular audits

8. Data Retention

8.1 Retention Periods:

  • Customer data: 7 years after last interaction
  • Employee data: 7 years after employment ends
  • Marketing data: 2 years after last interaction
  • Technical data: 1 year after collection

8.2 Retention Criteria:

  • Legal requirements
  • Business needs
  • Contractual obligations
  • Data minimization principle

9. International Data Transfers

9.1 Transfer Mechanisms:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Binding Corporate Rules

9.2 Transfer Safeguards:

  • Data Processing Agreements
  • Security assessments
  • Regular compliance audits
  • Data protection warranties

10. Your Rights as a Data Subject

10.1 Core Rights:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

10.2 How to Exercise Your Rights:

  • Submit request to DPO
  • Use online form om this website
  • Response within 90 days
  • No fee (except for excessive requests)

11. Automated Decision Making and Profiling

11.1 We use automated processing for:

  • Fraud detection
  • Service personalization
  • Credit assessments
  • Marketing segmentation

11.2 Your Rights:

  • Request human intervention
  • Express your point of view
  • Contest decisions
  • Understand the logic involved

12. Cookie Management

12.1 Types of Cookies:

  • Necessary cookies (session management)
  • Functional cookies (preferences) 
  • Analytics cookies (performance)
  • Marketing cookies (advertising)

12.2 Cookie Control:

  • Browser settings
  • Cookie lifetime information

13. Data Breach Procedures

13.1 In case of a data breach:

  • Internal notification within 24 hours
  • DPO assessment within 48 hours
  • Authority notification within 72 hours
  • Affected individual notification without undue delay

13.2 Response Measures:

  • Incident containment
  • Impact assessment
  • Remedial actions
  • Documentation
  • Prevention measures

14. Direct Marketing

14.1 Marketing Communications:

  • Opt-in requirement
  • Clear unsubscribe options
  • Preference management
  • Marketing channels selection

14.2 Marketing Preferences:

  • Frequency options
  • Channel preferences
  • Content preferences
  • Easy opt-out process

15. Data Protection Impact Assessments (DPIA)

We conduct DPIAs for:

  • New technologies
  • Large-scale processing
  • Systematic monitoring
  • Special category data processing

16. Records of Processing Activities

We maintain detailed records of:

  • Processing purposes
  • Data categories
  • Recipient categories
  • Security measures
  • Retention periods
  • International transfers

17. Changes to This Notice

  • Regular reviews (at least annually)
  • Material changes notification
  • Version control - Archive of previous versions

18. Group Entities and Joint Controllers

See Annex A for full list of:

  • Group companies
  • Joint controllers
  • Data sharing arrangements

19. Contact Information

For any queries regarding this Notice:

  • DPO Contact: Use the contact form on this website
  • Complaints: Use the contact form on this website
  • Regulatory Authority: Data Protection Commissioner, 5th Floor, SICOM Tower, Wall Street, Ebène

Annexes:

Annex A: List of Entities

  • smallpotatoltd.com (Hospitality Consulting Services)
  • food-revolution.mu (Producer-Consumer Link)
  • thirdeye.mu (Quality Assurance/Data Analysis)

Annex B: Detailed Categories of Personal Data

The categories of personal data we hold

Categories of personal data Examples:

  • First name
  • Maiden name
  • Last name
  • Username or similar identifier
  • Marital status
  • Job title
  • Date of birth
  • Gender
  • Signature

Contact details

  • Email Address
  • Telephone numbers
  • Fax numbers
  • Address

Financial

  • Credit/Debit card numbers
  • Payment card details (including security code numbers) and other related billing information
  • Bank details
  • Payment card details

Transactional

  • Payments to and from you
  • Services/goods purchase history

Technical

  • Internet Protocol (IP) address
  • Login data
  • Browser type and version
  • Time zone setting and location
  • Browser plug-in types and versions
  • Operating system and platform
  • Other technology on the devices used to access our website
  • Traffic data

Preferences and interests Usage

  • Information about how you use our website and service (You may also wish to consult our Cookie Policy).

Additional information we collect if your relationship with us is an HR-related one (solicitation, recruitment or employment)

Qualifications

  • CVs
  • Records of past employment
  • Employment records, including remuneration details, attendance records, performance-related information
  • Fingerprints, if we operate a fingerprint-based access systems

Special categories of personal data

  • Fingerprints (for the purposes of operating a fingerprint-based access system for employees)
  • Criminal records, including certificate of character (for HR purposes and to meet our obligations towards the Financial Services Commission)
  • Trade union membership records (if you are an employee)
  • Health records (if you are an employee)

Others

  • Photographs
  • Videos, including where we operate CCTV surveillance systems

Declaration:

This Notice was last updated on 24 july 2025. By engaging with our services, you acknowledge this Notice. For material changes, we will seek renewed consent where required by law.

Website Usage, Content & Copyright

1. The website's content is for general information. It may change without prior notice.

2. Neither we nor any third parties guarantee the accuracy, timeliness, performance, completeness, or appropriateness of the website's information and materials. You recognize potential inaccuracies or errors, and we disclaim responsibility for them to the maximum extent permitted by law.

3. Using this website's information or materials is at your risk. It's your duty to ensure that any products, services, or information available align with your needs.

4. All materials on this website, including design, layout, appearance, and graphics, either belong to or are licensed to us. Reproduction is restricted, except in line with the copyright notice that is part of these terms.

5. Unauthorized use may result in damage claims or criminal penalties.

Security:

Your data's security is paramount. We've implemented robust physical, digital, and managerial measures to prevent unauthorized access or leaks, ensuring the online data we collect remains protected.

Cookies:

Cookies are small files that get stored on your computer. They help analyze web traffic or record when you visit specific sites. Cookies enable web applications to cater to your personal preferences by gathering and retaining information. We use traffic log cookies to discern frequently visited pages. This helps us understand web traffic and refine our website for our users. The data is exclusively used for statistical analysis. While cookies enhance your experience by tracking the pages you find most helpful, they don't grant us access to your computer or any of your data, except for what you choose to share with us. You can accept or reject cookies. Most browsers accept cookies by default, but you can adjust the settings to decline them. However, this might impede the website's full functionality.

External Links:

Our website might include links to other sites. After using these links to exit our site, remember we don't have authority over that website. As such, we can't guarantee the safety and privacy of any data you provide during your visit. Those sites aren't governed by this Privacy Policy. Always exercise caution and review the privacy policies of the sites you visit.

Images:

All images, except for our team, displayed on this website are artificially generated using LLM technology. While these images may occasionally bear resemblance to real persons, any such similarity is entirely coincidental and unintentional. We do not use, collect, store, or process any real individuals' photographs or likenesses in the creation of these images. By using LLM-generated imagery, we maintain our commitment to privacy while providing visual content that serves our website's purpose. We take no responsibility for any perceived similarities between our LLM-generated images and real persons, living or deceased.

Copyright Notice:

© 2021 - The Third Eye (Mauritius) LTD. All rights reserved. All content, including but not limited to, the design, layout, graphics, logos, text, images, audio, video, data, wallpapers, icons, software, and other materials ("Content") on the website of The Third Eye (Mauritius) LTD is the intellectual property of The Third Eye (Mauritius) LTD or its content suppliers and protected by Mauritian and international copyright laws. No portion of the Content may be reproduced, redistributed, transmitted, sold, broadcast, or stored for any purpose without the express written permission of The Third Eye (Mauritius) LTD or the appropriate copyright holder as applicable. Users may not modify, publish, transfer, or participate in the transfer or sale of, reproduce, create derivative works from, distribute, display, or in any way exploit any of the Content in whole or in part except as expressly permitted by this notice or applicable law. Unauthorized use of the Content will be considered a breach of copyright, trademark, or other intellectual property rights and may result in legal action.

Interested in working with us? 

Simply send a message to schedule a meeting with the team