Privacy and data protection

This page explains which personal data we collect through itcmz.com, the purposes for which it is used and the rights you hold over it.

Last updated: September 2026

Data controller

IT Consulting, Lda is a Mozambican technology services company and the controller of the personal data collected through this website. For any privacy-related matter, please contact us at [email protected].

Data we collect

When you complete the contact form, we collect your name, email address, telephone number (optional), subject and message. This data is provided voluntarily and serves solely to allow us to respond to your enquiry. The date and time of sending and the language of the page are also recorded with each message.

The site also uses Cloudflare's Turnstile service to protect the form against abuse. It processes technical browser data to distinguish genuine visitors from automated programs, without advertising cookies. When you send the form, our server confirms the check with Cloudflare, sending it the code generated by Turnstile and the IP address from which the request was sent.

To limit the number of form submissions and of failed attempts to sign in to the site's management system, the server records each one against a code derived from the IP address with a secret key (HMAC-SHA256), not against the address itself. These records serve only to count those events over the last 24 hours and are then deleted automatically.

As is customary, the web server also records the requests it receives, including the IP address, in technical logs that are deleted periodically.

Where audience measurement is enabled, we use an aggregated, cookieless statistics tool that does not identify individual visitors.

Purpose of processing

We use the form data exclusively to respond to your enquiry and, where applicable, to prepare a commercial proposal. We do not sell or share your data with third parties for marketing purposes, and we do not send you commercial communications without your consent.

Processors

Messages sent through the form are stored in a MySQL database on our own server, a virtual private server (VPS) rented from a hosting provider and administered by us. We read messages only in the site's password-protected management system.

To let us know a new message has arrived, the server sends an email alert through the Resend service. That alert says only that a new message has arrived and contains none of the data you entered in the form.

Cloudflare provides the Turnstile check described above and hosts the DNS for our domains. Each of these providers processes data under its own privacy policy.

Data retention

We retain the messages we receive in our database only for as long as necessary to handle the enquiry and to comply with legal or contractual obligations, after which they are deleted in our management system.

For security, the database is copied every day. These backups, to which access is restricted, include the messages and are kept for 30 days; copies made before a change to the structure of the database are kept for 90 days. A deleted message disappears from the backups only when they are themselves deleted.

Your rights

You may at any time request access to the personal data we hold about you, ask for it to be corrected or deleted, or object to its processing. To exercise these rights, write to [email protected] and we will respond as promptly as possible.

Changes to this policy

This policy may be updated to reflect changes to the site or to applicable legislation. The date of the most recent update is shown at the start of this page.

For questions about this policy, contact [email protected].