Privacy and Legal Policy

Last updated: Sat/26/2026

ARLog Moçambique, Limitada

PART I: GENERAL PROVISIONS

1. Introduction

ARLog Moçambique, Limitada ("ARLog", "we", "us" or "our") is committed to protecting the privacy of everyone who interacts with us and to operating with full transparency and legal integrity. As a risk management and investigations consultancy, confidentiality is not only a legal obligation for us. It is the foundation of our profession and of the trust our clients place in us.

This Privacy and Legal Policy sets out the terms that govern the use of our website, how we collect, use and protect personal data, and the rights and obligations of everyone who uses our website and channels. By accessing this website or sending us your information, you confirm that you have read, understood and accepted this Policy. If you don't agree with it, please don't use the website.

2. Who We Are

ARLog Moçambique, Limitada
Headquarters: [address], Boane, Maputo Province, Mozambique
Company registration: [number]
NUIT: [tax number]
Share capital: 80.000.000,00 MTn
General email: info@arlog.co.mz
Privacy email: privacyandlegal@arlog.co.mz
Phone: (+258) 415 1111

ARLog also operates through offices in South Africa and Angola. Where these offices handle personal data or provide services, they do so under the principles set out in this Policy.

3. Information Officer

We have appointed an Information Officer to oversee compliance with this Policy and with the applicable data protection laws. The Information Officer can be contacted at privacy@arlog.co.mz for any question, request or complaint about personal data.

4. Definitions

In this Policy:

Personal data means any information that identifies a person or can be used to identify them, directly or indirectly.
Processing means any operation performed on personal data, including collecting, recording, storing, consulting, using, sharing, transferring or deleting it.
Data subject means the person to whom the personal data relates.
Sensitive data means personal data about health, criminal records, biometrics, religious or political beliefs, or other categories given special protection by law.
Website means the ARLog website and all its pages, forms and related online channels.
User means any person who accesses or uses the website.

PART II: TERMS OF USE OF THE WEBSITE

5. Purpose of the Website

This website presents ARLog Moçambique, its history, values, services, leadership and governance. Its content is provided for general information only. It doesn't constitute professional, legal, financial or security advice, and shouldn't be relied upon as a substitute for advice tailored to your specific situation.

6. No Client Relationship

Using this website, sending us a message or submitting a form doesn't create a client relationship with ARLog. A client relationship begins only when both parties sign a written engagement agreement.

7. Legal Services

Legal services in commercial and criminal matters are provided by our partner law firm, whose lawyers are registered with the Mozambican Bar Association (Ordem dos Advogados de Moçambique). ARLog doesn't provide legal advice or legal representation itself. ARLog coordinates the engagement between its investigative services and the partner firm, while legal advice and representation remain the independent professional responsibility of the partner firm's lawyers.

8. Lawful Methods

ARLog carries out all its activities in compliance with the laws of the countries in which it operates. We don't accept engagements that would require unlawful methods, including unauthorised surveillance, interception of communications, access to protected systems or any violation of individual rights. We reserve the right to decline any request that doesn't meet our legal and ethical standards.

9. Intellectual Property

All content on this website, including text, images, photographs, graphics, logos, trademarks, design and software, belongs to ARLog Moçambique or is used under licence, and is protected by intellectual property laws. You may view and print pages for personal, non-commercial use. Any other copying, reproduction, distribution, modification or commercial use requires our prior written consent.

The names and logos of clients and partners shown on this website remain the property of their respective owners and are used with their authorisation.

10. Acceptable Use

When using this website, you agree not to:

use it for any unlawful, fraudulent or harmful purpose
submit false, misleading or defamatory information
attempt to gain unauthorised access to the website, its servers or connected systems
introduce viruses, malware or any harmful code
interfere with the website's operation, security or availability
collect data from the website through automated means without our permission
impersonate any person or organisation

We may restrict or block access to anyone who breaches these rules, and report unlawful conduct to the competent authorities.

11. Whistleblowing Channel

Our whistleblowing channel is intended for reports made in good faith. We protect everyone who reports honestly from retaliation. Deliberately false or malicious reports may lead to legal consequences.

12. Case Studies

Case studies and examples published on this website are anonymised to protect the confidentiality of our clients and the people involved. They are provided for illustration only, and past results don't guarantee similar outcomes.

13. Accuracy and Availability

We take care to keep the information on this website accurate and up to date, but we don't guarantee that it is complete, accurate or current at all times. We may change or remove content without notice. We aim to keep the website available at all times, but may suspend access for maintenance, security or reasons beyond our control.

14. Limitation of Liability

To the fullest extent permitted by law, ARLog, its partners, officers, employees and associates aren't liable for any direct, indirect or consequential loss arising from the use of, or inability to use, this website, reliance on its content, technical failures, viruses, or the content of linked third-party websites. Nothing in this Policy excludes liability that can't be excluded under the applicable law.

15. External Links

This website may contain links to third-party websites. We have no control over their content, security or privacy practices, and a link doesn't mean we endorse them.

16. Confidentiality of Communications

Internet communications aren't fully secure. Please don't send confidential or case-related information through the general contact form or by standard email. For sensitive matters, request a confidential consultation, and we will arrange a secure channel.

PART III: PRIVACY AND DATA PROTECTION

17. Our Data Protection Principles

In every processing activity, we follow these principles:

Lawfulness and fairness: we process personal data only on a valid legal basis, and transparently.
Purpose limitation: we use data only for specific and legitimate purposes.
Data minimisation: we collect only the data we need.
Accuracy: we keep data accurate and up to date.
Storage limitation: we keep data only as long as necessary.
Integrity and confidentiality: we protect data against unauthorised access, loss or disclosure.
Accountability: we can demonstrate our compliance at any time.

18. Personal Data We Collect

18.1 Data you give us directly

Consultation and contact requests: name, organisation, position, email, phone number, country and the content of your message.
Job applications: CV, cover letter, qualifications, professional history, references and any other information you choose to share. For some positions, and only at an advanced stage and with your consent, we may carry out background and integrity checks as permitted by law.
Whistleblowing reports: the information in your report, and your contact details if you choose to give them. You may report anonymously.
Messages to the Chairman: your name, contact details and the content of your message.
Newsletter subscriptions: your name and email address.

18.2 Data we collect automatically

When you visit our website, we may collect your IP address, browser type, operating system, device type, approximate location, referring website, pages viewed and time spent on the site, through cookies and similar technologies.

18.3 Data from third parties

We may receive personal data from recruitment platforms, references you have named, public registers, or partners who refer you to us.

18.4 Sensitive data

We don't ask for sensitive data through this website. Please don't include it unless strictly necessary. If a report or application contains sensitive data, we will handle it with enhanced protection and only for the purpose for which it was provided.

19. How and Why We Use Personal Data

Purpose and Legal basis
Responding to enquiries and consultation requests Your consent, or steps taken at your request before a contract
Providing our services to clients Performance of a contract
Assessing job applications Your consent and steps taken before an employment contract
Examining whistleblowing reports Our legitimate interest in preventing misconduct, and legal obligations
Handling messages to the Chairman Our legitimate interest in good governance
Sending insights and newsletters Your consent, which you may withdraw at any time
Improving and securing our website Our legitimate interest
Complying with legal, tax and regulatory obligations Legal obligation
Establishing, exercising or defending legal claims Our legitimate interest and legal obligations

We never sell, rent or trade personal data, and we don't use it for automated decisions that produce legal effects on anyone.

20. Data Processed in Client Engagements

In the course of our engagements, we may process personal data about people connected to a client's matter, such as employees, suppliers or other parties. This processing is governed by the contract with our client, carried out strictly within the limits of the law and subject to strict confidentiality. Our methods are lawful, proportionate and respectful of individual rights. The specific confidentiality terms agreed with each client apply in addition to this Policy.

21. Marketing Communications

We send insights and information about our services only to people who have agreed to receive them. Every message includes a simple way to unsubscribe.

22. Sharing Personal Data

We share personal data only when necessary, and only with:

ARLog offices in Mozambique, South Africa and Angola

our partner law firm, when legal services are requested
service providers for hosting, IT, email, cloud storage and recruitment tools, acting on our instructions under binding confidentiality and security obligations
professional advisers, such as auditors, lawyers and insurers, bound by confidentiality
competent authorities, when required by law or court order, or to protect our legal rights

No third party may use personal data we share for its own purposes.

23. International Transfers

Because we operate in several countries, personal data may be transferred outside the country where it was collected. When this happens, we make sure that the receiving country offers adequate protection, that the transfer is covered by contractual safeguards, or that consent has been given where the law allows it.

24. Retention of Personal Data

Type of data and Retention period
Contact and consultation requests Up to [2] years after our last contact
Client engagement records For the engagement and up to [10] years after, as required by law
Successful job applications Transferred to the employee's personnel file
Unsuccessful job applications Up to [12] months, unless deletion is requested sooner
Whistleblowing reports Until the examination and any follow-up action are complete, then deleted or anonymised
Newsletter subscriptions Until you unsubscribe
Website analytics data Up to [26] months

When data is no longer needed, we securely delete or anonymise it.

25. Security of Personal Data

We protect personal data through:

access restricted to authorised personnel on a need-to-know basis
encryption of data in transit and, where appropriate, at rest
secure servers, firewalls and regular security updates
confidentiality obligations for all staff, associates and service providers
regular training in data protection and information security
secure procedures for handling evidence and case files

Access to whistleblowing reports is limited to the Ethics Officer and the Chair of the Audit, Risk & Ethics Committee.

26. Data Breaches

If a security incident affects personal data and is likely to put people's rights at risk, we will act promptly to contain it, assess its impact and, where required by law, notify the people affected and the competent authorities without undue delay.

27. Your Rights

Depending on the applicable law, you may have the right to:

be informed about how we process your personal data
access your personal data and receive a copy
correct inaccurate or incomplete data
delete data that is no longer needed or was processed unlawfully
object to processing based on legitimate interests or for marketing
restrict processing in certain circumstances
withdraw consent at any time
complain to the competent data protection authority

To exercise these rights, write to privacyandlegal@arlog.co.mz. We may ask you to confirm your identity first. We will respond within [30] days, free of charge, unless the request is clearly unfounded or excessive. Some rights may be limited where the law allows it, for example to protect an ongoing investigation or the rights of others.

28. Complaints

If you are unhappy with how we have handled your personal data, please contact our Information Officer first, and we will try to resolve the matter quickly. You may also complain to the competent authority in your country, such as the Information Regulator in South Africa or the Data Protection Agency (APD) in Angola.

29. Cookies

We use:

essential cookies, needed for the website to work
analytics cookies, to understand how visitors use the website, used only with your consent
functional cookies, to remember your choices, such as language

A banner on your first visit lets you accept or refuse non-essential cookies. You can change your choice at any time through the cookie settings link at the bottom of each page, or in your browser settings.

30. Children

Our website and services are intended for adults and organisations. We don't knowingly collect personal data from anyone under 18, and will delete any such data promptly if we discover it.

PART IV: FINAL PROVISIONS

31. Applicable Law

This Policy and the use of this website are governed by the laws of the Republic of Mozambique, including the Constitution of the Republic and the Electronic Transactions Law. For our operations abroad, we also comply with South Africa's Protection of Personal Information Act (POPIA) and Angola's Personal Data Protection Law (Law 22/11), and we follow internationally recognised best practice.

32. Jurisdiction

Any dispute arising from or relating to this Policy or the use of this website will be subject to the exclusive jurisdiction of the courts of the City of Maputo, unless mandatory law provides otherwise.

33. Language

This Policy may be available in English and Portuguese. If there is any conflict between the two versions, the [Portuguese] version prevails.

34. Severability

If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions remain in full force and effect.

35. Changes to This Policy

We may update this Policy to reflect changes in the law, our services or our practices. The latest version will always be published on this page, with the date of the last update. Significant changes will be announced on the website or, where appropriate, by email.

36. Contact

For any question about this Policy:

Information Officer
ARLog Moçambique, Limitada
Email: privacyandlegal@arlog.co.mz
Phone: (+258) 415 1111
Address: Rua Anabela Cossa nº03, Boane, Maputo Province, Mozambique