How we handle your data

Who is responsible

Visit Mozambique is the National Tourism Digital Economy Platform of the Ministry of Economy, Republic of Mozambique, which is the controller of the data described here. The platform is built and operated on the Ministry's behalf by Webmasters Kenya LDA, which processes data only on the Ministry's instructions.

What we collect

You can browse destinations, experiences, events and the public transparency report without an account and without giving us anything. The data below is collected only when you use the feature it belongs to.

• Account: your name, your email address or phone number, a hashed password, your language preference and, if you give it, your province. Sign-in sessions are kept as short-lived tokens.
• Bookings and the Tourism Pass: what you booked, the dates, the number of guests, the amounts, and the pass or ticket issued to you, including where it was redeemed.
• Payments: the payment method you chose, the provider's reference and the receipt. Card numbers, security codes and expiry dates never reach our servers; they go to the payment provider, which returns a token.
• Trip planner: the trip length, budget band, interests and starting region you enter. The planner runs entirely on the Ministry's own content; nothing about you is sent to an outside AI service.
• Reviews and contributions: the reviews you write, and any voluntary conservation contribution you add to a booking, together with the organisation you chose to receive it.
• Businesses, guides and community organisations: registration details, licence and verification documents, listings, orders, insurance policies and claims, credit applications and payout records, as required to verify and licence you and to run the services you enrol in.
• Technical records: server logs and an append-only audit log of administrative, licensing and verification actions, kept for security and accountability. Visitor statistics are kept only as aggregates by province and attraction, never as a profile of you.

The mobile apps

The iOS and Android apps use the same services as the website and collect nothing more. They keep your sign-in token in the device's secure storage and a copy of content you have opened so it still reads offline. They do not use your location, camera, microphone or contacts, and they contain no advertising or third-party analytics software.

Why we use it

To create and secure your account, to make and settle bookings, to issue passes, tickets and receipts, to verify and licence tourism businesses and guides, to run the supply, insurance, credit and conservation services for those who enrol, to send you the notifications those services require by email or SMS, to publish conservation funding as public totals, and to keep the platform safe and accountable. We do not sell personal data and we do not use it for advertising.

Who we share it with

The operator you book with sees the booking details it needs to host you. The payment provider receives what it needs to take your payment. An insurer sees a policy or claim only if you accepted its cover. A lender sees your trading data only after you give explicit consent in the portal, which you can withdraw there. A conservation organisation sees the contribution you directed to it. Public authorities receive data where the law requires it. Nobody else.

How long we keep it

Your account and its content stay until you delete the account. Booking and payment records are kept for as long as tax and audit law requires, then removed. Licence and verification documents are kept while the licence is valid and for the period the Ministry sets after it ends. The audit log is retained as a security record.

Your rights

You can see and correct your account details in your profile at any time. You can ask for a copy of your data, ask us to correct it, or ask for your account to be deleted; deletion is carried out except where a record must be kept by law. Requests are handled by the Ministry of Economy as the controller, in line with Mozambique's data protection framework.

How we protect it

Every connection is encrypted. Passwords are stored only as hashes. Access is restricted by role on the server for every request, documents are served through short-lived signed links, and administrative actions are written to an audit log that cannot be edited.

Children

Accounts, bookings and payments are for adults. We do not knowingly collect data from anyone under 18.

Contact

For any question or request about your data, write to the Ministry of Economy, Republic of Mozambique, through the contact channels published on its official website, naming Visit Mozambique. Changes to this notice are published on this page with a new date.