Legal
Privacy Policy
How KMA Strategic Advisory handles personal data collected through this website. Structure published; legal text subject to approval.
Document in preparation
The structure is published for transparency. Clauses marked “pending approval” will be drafted and validated by qualified legal advisers before carrying legal weight. The existence of technical components is not a declaration of compliance with any regime.
- Policy version
- {LEGAL_TEXT_TO_BE_APPROVED}
- Last reviewed
- {LEGAL_TEXT_TO_BE_APPROVED}
Data controller
The formal identification of the controller, its representative and the privacy point of contact will be published after legal validation.
Pending approval{DATA_CONTROLLER_DETAILS}
Data we collect
We collect only data voluntarily submitted, through the contact form and the consent preferences stored in your browser.
- Contact form: name, email, organisation, role, country, phone/WhatsApp, area of interest, message and contact preference.
- Consent record: consent type, decision, policy version, timestamp, session identifier and jurisdiction where known.
- Knowledge Platform accounts and diagnostic data: provided for in the architecture, not yet active.
Purposes and legal basis
We use data to answer enquiries, assess potential advisory engagements and keep a record of that communication. The applicable lawful basis in each jurisdiction is under review.
Pending approval{LEGAL_TEXT_TO_BE_APPROVED}
Retention
Each data category will have a defined retention period, after which it is deleted or anonymised.
Pending approval{PRIVACY_RETENTION_PERIOD}
International transfers
KMA operates from Mozambique with international counterparts, so data may move between jurisdictions. The mechanism and safeguards will be described after validation.
Pending approval{INTERNATIONAL_TRANSFER_LANGUAGE}
Your rights
Depending on the applicable jurisdiction, you may request access, correction, deletion, portability, restriction or objection, and withdraw consent previously given. Requests are logged and handled internally.
Final wording on response deadlines, identity verification and complaint routes is subject to approval.
Pending approval{LEGAL_TEXT_TO_BE_APPROVED}
Security
Submitted data is stored on managed infrastructure with access restricted to authorised staff, role-based permissions and a log of access and changes.
Describing technical measures is not, in itself, a declaration of compliance with any legal regime.
Frameworks being prepared for
Listing a framework indicates the scope of preparation work under way — not a declaration of compliance.
Mozambique
Mozambique data protection & electronic transactions regime
KMA's primary jurisdiction. Applicable regime to be confirmed with local legal counsel.
European Union
GDPR (Regulation (EU) 2016/679)
Relevant to contacts, clients and partners in the European Economic Area.
Brazil
LGPD (Lei nº 13.709/2018)
Relevant to the Portuguese-speaking network and programmes run with Brazilian counterparts.
California (USA)
CCPA / CPRA
Relevant where California residents are among visitors or clients.
South Africa
POPIA (Act 4 of 2013)
Relevant to regional SADC operations and South African counterparts.
Contact
Questions about this document or personal data: advisory@kmaadvisory.com · Av. Armando Tivane, 591, Polana, Maputo, Mozambique
