What Personal Data We Collect

Depending on how you interact with us, we may collect the following data:

Data provided directly

• Full name and email address
• Phone / mobile number
• Company name and professional position
• Messages sent through contact forms

Data collected automatically

• IP address and browser type
• Pages visited and time spent
• Referral source
• Cookies and similar technologies

We do not knowingly collect data from minors under 18 without parental consent.

How We Use Your Data

Your data is processed for the following purposes:

• Service provision — execution of contracts and digital projects
• Commercial communication — response to information requests and quotes
• Marketing — sending news, articles and value propositions (with consent)
• Website improvement — performance analysis and user experience
• Compliance with legal obligations — compliance with applicable Mozambican legislation

Legal Basis for Processing

Your personal data is processed based on the following legal grounds under Law No. 24/2022:

• Consent — when you expressly authorize us to process your data
• Contract performance — when processing is necessary for the provision of contracted services
• Legitimate interest — for communication purposes and improvement of our services
• Legal obligation — when required by law or competent authority in Mozambique

Sharing Data with Third Parties

Merity does not sell, rent or transfer your personal data to third parties for commercial purposes. We may share data in the following circumstances:

• Technology partners — infrastructure, hosting and analytics tool providers, bound by confidentiality agreements
• Legal obligation — when required by court order or competent public authority
• Rights protection — to protect the security or rights of Merity, its clients or the public

How Long We Keep Your Data

We retain your personal data only as long as necessary to fulfill the purposes described in this policy:

• Active client data — during the contract term and for 5 years after its termination, as required by tax and accounting regulations
• Contact / marketing data — until you withdraw your consent or request deletion
• Browsing data — maximum of 12 months, unless otherwise provided by law

Your Data Subject Rights

Under Mozambican data protection law, you have the right to:

• Access — know what data we process about you
• Rectification — correct inaccurate or outdated data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — restrict processing in certain circumstances
• Portability — receive your data in a structured, readable format
• Objection — object to processing based on legitimate interest or for marketing purposes
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@merity.co.mz. We will respond within 30 days.

How We Protect Your Data

Merity implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or improper disclosure, including:

• Encryption of data in transit and at rest (TLS/SSL, AES-256)
• Role-based access control (RBAC)
• System monitoring and auditing
• Regular training of our teams on security best practices

In case of a data breach that may affect your rights and freedoms, we will notify the competent authorities and affected individuals within the legally established timeframe.

Cookie Policy

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device.

Types of cookies used

• Essential — necessary for the basic functioning of the website
• Analytics — help us understand how visitors use the site (e.g., Google Analytics)
• Functional — remember your browsing preferences
• Marketing — used only with your prior consent

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect website functionality.

Changes to This Policy

Merity reserves the right to update this Privacy Policy at any time, including to reflect legal, technical or business practice changes.

Whenever we make significant changes, we will notify users via the website or by email. The date of the last update is always indicated at the top of this document.

We recommend that you review this policy periodically to stay informed about how we protect your information.