Privacy Policy
Version 1.1 · November 2026
Data controller
Muculo & Filhos, Lda., Tax ID 5402118191, registered office at Talatona, Luanda, Angola. For any question about personal data: [email protected].
Legal framework
We process personal data in accordance with Law No. 22/11 of 17 June (Personal Data Protection Law) in Angola, and with Regulation (EU) 2016/679 (GDPR) and Law No. 58/2019 of 8 August in Portugal, depending on the data subject and the operation concerned.
What data we process and why
| Situation | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contact form | Name, company, email, message | Reply to the request or quote (pre-contractual steps and legitimate interest; consent given on submission) | Up to 24 months after the last contact, or the contract term, if any |
| Clients and partners | Identification, contacts, consignee and representative details | Perform contracts and meet customs, tax and anti-money-laundering obligations (contract and legal obligation) | Periods set by the applicable accounting, tax and customs law |
| Job applications | CV and data supplied by the applicant | Recruitment and selection (pre-contractual steps and consent) | 12 months, unless consent is given for a longer period |
| Whistleblowing channel | What the reporting person provides | Assess and handle the report (legal obligation and legitimate interest) | As long as needed for the assessment and any proceedings, and at most 5 years |
| Hosting technical logs | IP address, date and time, requested page | Site security and operation (legitimate interest) | Short period, set by the hosting provider |
We do not take solely automated decisions or carry out profiling.
Contact form
When you submit the form, the data is sent over an encrypted connection to Cloudflare's infrastructure, which delivers it by email to the mailbox responsible for the topic you chose. Cloudflare acts as a processor. If sending fails, the site opens your email application with the message filled in, and in that case the data only reaches us if you send it.
Cookies and similar technologies
This site does not use analytics or marketing cookies, does not load third-party scripts and does not track your behaviour. No cookies are used, so no consent is needed. If this changes, this policy will be updated first and the consent required by law will be requested.
Recipients and transfers
Data may be disclosed to customs and tax authorities, carriers, customs brokers, insurers and technical service providers acting on our behalf (hosting and email), always with confidentiality and security safeguards. Where data is transferred outside Angola or the European Economic Area, we ensure the safeguards required by the applicable law, such as standard contractual clauses or an adequacy decision. We do not sell personal data.
Your rights
You may exercise the rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time (without affecting earlier processing), through [email protected]. We reply within one month at most. You may also lodge a complaint with the Data Protection Agency (Angola) or the Comissão Nacional de Proteção de Dados (Portugal).
Security
We apply appropriate technical and organisational measures, such as encryption in transit and access control, described in the Information Security Policy. In the event of a data breach that poses a risk to data subjects, we notify the authorities and those affected as required by law.
Changes
This policy may be updated. The date of the version in force is shown at the top of the page.