Privacy Policy

This Privacy Policy describes how Domus Care, Lda. ("Company", "we") collects, uses, stores and protects the personal data of users ("User", "you") of the Domus Care platform ("Platform"), in accordance with Law No. 4/2017, of 18 January — Personal Data Protection Law of the Republic of Mozambique and Law No. 3/2014, of 5 February — Electronic Transactions Law.

1. Data Controller

The controller of your personal data is Domus Care, Lda., headquartered in Nampula, Mozambique. For any questions regarding the processing of your data, contact us at privacidade@domuscare.co.mz.

2. Personal Data We Collect

We collect the following personal data, grouped by category:

2.1. Data provided directly

• Identification data: full name, email address, phone/WhatsApp number, address.
• Authentication data: password (stored as an irreversible hash), session tokens.
• Profile data: service address(es), preferences and booking history.

2.2. Automatically collected data

• Usage data: pages visited, features used, session duration, clicks and interactions.
• Technical data: IP address, browser type, operating system, screen resolution, device identifiers.
• Cookies and similar technologies: we use strictly necessary cookies for platform operation and analytical cookies to improve the experience. See section 9 for details.

2.3. Third-party data

If you authenticate via third-party services (Google, Facebook, Apple), we receive your name, email and profile photo associated with that account, subject to their respective privacy policies.

3. Purposes of Processing

Your personal data is processed for the following purposes, under Article 6 of Law No. 4/2017:

4. Sharing Personal Data

Your personal data may be shared in the following circumstances:

• Payment processors: we share transaction data with payment partners (M-Pesa, e-Mola, bank operators).
• Technical service providers: hosting servers (Supabase/AWS), email services, analytics — all contractually bound to protect your data.
• Competent authorities: when required by law, court order or as part of legal investigations.

Domus Care never sells, rents or markets your personal data to third parties for advertising purposes.

5. International Data Transfers

Your data may be stored on servers outside Mozambique (notably in the European Union and the United States) through our technical service providers. These transfers are carried out with adequate safeguards, including standard contractual clauses, under Article 35 of Law No. 4/2017.

6. Data Retention

Your personal data is retained only for as long as necessary for the purposes for which it was collected:

• Account data: while the account is active or up to 2 years after a closure request, for audit purposes.
• Financial transaction data: 10 years, pursuant to tax and accounting obligations under the Commercial Code and IRPS Code.
• Navigation logs: up to 6 months.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Passwords stored with irreversible hashing (bcrypt).
• Row Level Security (RLS) in the database — each user can only access their own data.
• Role-Based Access Control (RBAC) for internal staff.
• Continuous monitoring and regular security audits.
• Automatic daily backups with disaster recovery.

No system is 100% breach-proof. In the event of a data breach that may affect your rights, we will notify the competent authorities and affected Users within 72 hours, under Article 30 of Law No. 4/2017.

8. Your Rights

Under Law No. 4/2017, you have the following rights regarding your personal data:

• Right of access (Article 15): obtain confirmation that your data is being processed and access it.
• Right of rectification (Article 16): correct inaccurate or incomplete data.
• Right of erasure (Article 17): request the deletion of your data, unless a legal retention obligation applies.
• Right to object (Article 18): object to the processing of your data for direct marketing purposes.
• Right to portability (Article 20): receive your data in a structured, commonly used format.
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacidade@domuscare.co.mz. We will respond within a maximum of 30 days.

9. Cookies and Tracking Technologies

The Platform uses the following categories of cookies:

We do not use advertising or third-party tracking cookies for commercial purposes. You can manage your cookie preferences in your browser settings.

10. Minors

The Platform is not intended for minors under 18 years of age. We do not intentionally collect data from minors. If we become aware that data from a minor has been collected, we will proceed to its immediate deletion, under Article 8 of Law No. 4/2017.

11. Changes to this Policy

We may update this Privacy Policy periodically. Any substantial changes will be communicated with at least 15 days' notice via email or platform notification. The date of the last update is indicated at the top of this document.

12. Complaints

If you believe that the processing of your data violates your rights, you have the right to lodge a complaint with the competent supervisory authority in Mozambique, under Article 39 of Law No. 4/2017.

13. Contact

To exercise your rights or ask questions about this Policy:

• Data Protection Officer: privacidade@domuscare.co.mz
• General Support: suporte@domuscare.online
• WhatsApp: +258 84 611 7200
• Address: Av. Samora Machel, Nampula, Mozambique
• Address 2: Av. da República, 1st Fl., Lisbon, Portugal