Skip to content

Legal

Data Protection Notice

How KMA's data architecture is being prepared to operate across jurisdictions, and what still depends on legal approval.

Document in preparation

The structure is published for transparency. Clauses marked “pending approval” will be drafted and validated by qualified legal advisers before carrying legal weight. The existence of technical components is not a declaration of compliance with any regime.

Policy version
{LEGAL_TEXT_TO_BE_APPROVED}
Last reviewed
{LEGAL_TEXT_TO_BE_APPROVED}

Scope of this notice

This notice describes the website's data protection architecture: what data exists, where it lives, who can reach it and how consent is recorded. It does not replace the privacy policy and is not a declaration of compliance.

Consent record

Each consent decision is stored with its type, decision, policy version, timestamp, session identifier and jurisdiction where known. Records are appended, never edited, so the history can be evidenced.

The session identifier is random and does not identify a person on its own; once accounts exist, a record can be associated with an account.

Data-subject requests

Requests for access, correction, deletion, portability or objection reach the privacy contact and are logged internally with dates of receipt and resolution. Deadlines and verification requirements depend on the applicable jurisdiction.

Pending approval{LEGAL_TEXT_TO_BE_APPROVED}

Processors and hosting

The list of processors, hosting locations and transfer mechanisms will be published once contractually confirmed.

Pending approval{INTERNATIONAL_TRANSFER_LANGUAGE}

Controller and contact

Identification of the controller and of the privacy point of contact.

Pending approval{DATA_CONTROLLER_DETAILS}

Frameworks being prepared for

Listing a framework indicates the scope of preparation work under way — not a declaration of compliance.

  • Mozambique

    Mozambique data protection & electronic transactions regime

    KMA's primary jurisdiction. Applicable regime to be confirmed with local legal counsel.

  • European Union

    GDPR (Regulation (EU) 2016/679)

    Relevant to contacts, clients and partners in the European Economic Area.

  • Brazil

    LGPD (Lei nº 13.709/2018)

    Relevant to the Portuguese-speaking network and programmes run with Brazilian counterparts.

  • California (USA)

    CCPA / CPRA

    Relevant where California residents are among visitors or clients.

  • South Africa

    POPIA (Act 4 of 2013)

    Relevant to regional SADC operations and South African counterparts.

Contact

Questions about this document or personal data: advisory@kmaadvisory.com · Av. Armando Tivane, 591, Polana, Maputo, Mozambique

Next step

What are you trying to transform?

Choose your starting point. We adapt the conversation — and the advisor — to the decision in front of you.

Select an area so we can frame the first conversation.