Privacy Policy

Ler esta página em português: pragma.co.mz/privacidade

Pragma Consulting, Lda is a Mozambican company based in Maputo, taxpayer number 402266708, providing consulting services in process automation and artificial intelligence.

This policy explains what personal data we collect through pragma.co.mz and in the business communications that follow, what we use it for, who we share it with, and what you can require of us.

It is written to be read, not to protect us. If anything here is unclear, write to geral@pragma.co.mz and we will explain.

Our principle

Your data is yours. We collect the minimum we need to answer what you asked for, we tell you exactly where it goes, and we delete it when you ask us to.

We do not sell personal data. We do not release it for advertising. We do not build visitor profiles. We do not use the data you entrust to us to train artificial intelligence models.

Data controller

Entity	Pragma Consulting, Lda
Taxpayer number (NUIT)	402266708
Registered office	Av. 25 de Setembro, n.º 1113, Maputo City, Mozambique
Person responsible for data protection	Designated internally by the management
Contact	geral@pragma.co.mz · +258 84 04 99 700

Appointing a person responsible for data protection complies with Article 65(1) of Mozambican Law No. 3/2017.

What data we collect

Data you give us directly

When you complete the free diagnostic form: name, job title, organisation, sector, team size, a description of the process that consumes your team’s time, email address and phone number. All fields are required, and each exists so that we can prepare the meeting properly.

We also keep what you write to us by email, WhatsApp or LinkedIn, and what you tell us in a meeting that we record in our notes.

Data collected automatically

The site is static and uses no tracking cookies, no Google Analytics, and no other audience analytics tool. Fonts are served from our own domain, not from third-party servers.

What does exist are the technical server logs kept by the hosting provider: IP address, date and time of request, page visited, browser type. These are operational and security records, not marketing records, and we do not cross-reference them with anything else.

Data we do not collect

We neither ask for nor want: identity card numbers, personal tax numbers, bank details, card details, health data, or political, religious or trade union affiliation. If you send us any of these without our asking, we delete them.

What we use the data for

To answer your request and schedule the free diagnostic; to prepare the meeting with knowledge of your context; to prepare and send commercial proposals; to stay in contact during and after a project; to meet legal and tax obligations where a contract exists; and to keep the site secure.

We do not use your data for targeted advertising, and we do not share it with advertisers.

Legal basis

Processing is based on your consent, on the performance of a contract or pre-contractual steps, on compliance with legal obligations, and on our legitimate interest in site security and in responding to those who approach us.

We comply with Articles 63 to 65 of Law No. 3/2017 of 9 January, the Electronic Transactions Law, and with Article 71 of the Constitution of the Republic of Mozambique.

On forthcoming legislation. The Bill establishing the Legal Framework for Personal Data Protection was approved by the Council of Ministers in March 2026 and referred to the Assembly of the Republic. When it comes into force, we will revise this policy and publish the updated version here.

Who we share your data with

We do not sell or release personal data. We share it only with the service providers we need in order to operate, and only what is necessary.

Purpose	What data	Where processed
Website hosting and backup of form submissions	Technical logs and form content	United States
Internal automation of contact handling, on Pragma’s own private server	All form content	Berlin, Germany (European Union)
Immediate internal notification of a new contact	Name, organisation, sector, process description and contact details	International
Email and contact logging	Contact details and correspondence content	International

None of these providers is authorised to use your data for their own purposes.

Want to know exactly which companies these are? Write to geral@pragma.co.mz and we will send you the current, named list of our sub-processors. We do not publish it here for a practical reason: a list of names on a page goes out of date, and an out-of-date policy is worse than a simple one. The list we send is the one in force on the day you ask for it.

Social platforms and API access

Pragma maintains a presence on LinkedIn, Instagram and Facebook, and uses those platforms’ official programming interfaces to publish content on its own accounts and on the accounts of entities that have expressly authorised us to do so.

The application Pragma Consulting — Social Publisher, registered by Pragma Consulting, Lda with LinkedIn, accesses only the identifier and name of the authorised profile and the publishing permission granted by its holder. We do not read connections, private messages or third-party content, and we do not collect data about other members through the application. We store only the access credential, encrypted, and a record of the posts we published. None of this is sold, released or transferred to third parties. The account holder may revoke access at any time in the platform’s settings, with immediate effect.

The same rules apply to our Instagram and Facebook accounts.

Buttons and links. The site links to our profiles, but embeds no social sharing buttons and no tracking pixels — your visit to this site is not reported to any platform. When you follow a link to an external site, that site’s privacy policy applies.

How long we keep data

Situation	Period
Contact that does not lead to a commercial relationship	24 months from last contact
Active client	For the duration of the relationship
Former client	5 years, or the statutory retention period for commercial and tax records, if longer
Server technical logs	As retained by the hosting provider, typically 30 days
Correspondence	While it holds commercial or legal value, and no more than 5 years after last contact

After these periods, data is deleted. If you ask for deletion sooner, we delete it — with the sole exception of what tax and commercial law requires us to keep, and in that case we tell you exactly what and why.

Your rights

At any time you may: know what data we hold about you and receive a copy; correct what is wrong or out of date; ask for deletion; object to our use of it or ask us to restrict it; receive your data in an open format to take elsewhere; and withdraw consent, without affecting what was done before.

Write to geral@pragma.co.mz with the subject “Personal data”. We reply within 15 working days, and we charge nothing for this.

Note. Some of these rights are not yet expressly required by Mozambican law in force. We grant them anyway, by choice, and we write them here precisely so that you can require them of us.

Cookies

This site uses no tracking, advertising or analytics cookies. There is no cookie banner because there are no cookies to consent to.

Should we ever adopt an analytics tool, this page will be updated before that tool is activated, and a consent request will be introduced.

Security

The site is served exclusively over an encrypted connection (HTTPS). Access to email, hosting and automation accounts is protected by two-factor authentication. System credentials are never stored in code or in shared documents. Access to contact data is limited to authorised Pragma personnel, and only to the extent necessary for their duties.

No system is impenetrable. If there is unauthorised access to data concerning you, we will tell you directly, with what we know and what we are doing, as soon as we know it.

International transfers

Some of the providers listed above are based outside Mozambique, chiefly in the United States and the European Union, which means your data may be processed outside the country. We choose providers with contractual data protection commitments and documented security practices. Where the processing region can be chosen, we choose the stronger protection regime: that is why the server running our internal automation is in the European Union, subject to the General Data Protection Regulation, rather than in a more permissive jurisdiction.

Minors

Our services are aimed at organisations and professionals. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.

Changes to this policy

When we change this policy, we change the date and version number at the top of the page. If the change is substantial — a new provider with access to your data, a new purpose — we notify by email those with an active contact with us. The version history is at the foot of this page.

What this policy does not cover

Data processed on behalf of clients. When Pragma builds or operates a system for a client, the data that system processes belongs to the client, who is the data controller. Pragma acts as a processor, and the applicable rules are set out in the services agreement and its data processing agreement — not on this page.

Pragma’s own products. Any system Pragma may offer as a product, with user accounts, will have its own privacy policy specific to that product.

Contact and complaints

For any question about this policy or about your data:

Pragma Consulting, Lda For the attention of the person responsible for data protection geral@pragma.co.mz · +258 84 04 99 700 Av. 25 de Setembro, n.º 1113, Maputo City, Mozambique

If you are not satisfied with our response, you may complain to the Instituto Nacional de Tecnologias de Informação e Comunicação (INTIC), the body that oversees the legal framework for data protection in Mozambique.

Version history

Version	Date	What changed
1.0	10 September 2026	First version
1.1	11 September 2026	Editorial revision
1.2	11 September 2026	Social platforms section revised