Privacy Policy

The Millennium Challenge Account – Mozambique (MCA-Mozambique) is the entity responsible for implementing Compact II in Mozambique, funded by the Millennium Challenge Corporation (MCC). MCA-Mozambique respects the privacy of the users of its website and is committed to protecting the personal and institutional information collected through this portal.

This Privacy Policy explains, in clear terms, what information may be collected through the website, how it is used and protected, and what rights users have. By using this website, the user acknowledges the practices described in this document.

This Policy applies to the institutional website of MCA-Mozambique and to the services made available through it. This includes the public information areas (news, documents, galleries and procurement notices) and the restricted-access areas (the procurement portal for suppliers, the communication portal and the administration portal).

This Policy does not apply to third-party websites that may be linked from this portal, which maintain their own privacy policies.

Depending on how the user interacts with the website, MCA-Mozambique may collect two broad categories of information: information voluntarily provided by the user, and information collected automatically for technical, security and statistical purposes.

Information voluntarily provided by the user may include:

• First name and surname;
• Email address;
• Telephone numbers;
• Organisation or company details (name, physical address and contacts);
• Position or role held;
• Supplier registration and procurement participation information (supplier type, geographic area, service types and categories of interest);
• Documents and files submitted through forms;
• The content of complaints, concerns, suggestions or requests for information;
• Any other information the user chooses to provide.

Information collected automatically for technical, security and statistical purposes may include:

• IP address;
• Browser and device type;
• Pages visited and actions performed on the website;
• Date and time of access;
• Technical activity records (logs), including the downloading of documents associated with procurement notices.

Where applicable, the technical identifiers used to distinguish visitors in download statistics are processed in a non-identifying form (for example, through hashing) and are not linked to the user's identity, except where the user is authenticated or registered as a supplier.

MCA-Mozambique collects information through the following means:

• Forms completed directly by the user (supplier registration, requests for information, complaints and other forms available on the website);
• The creation and use of accounts for the restricted areas;
• Interactions with the procurement portal, including viewing notices and downloading documents;
• Communications sent to MCA-Mozambique by email or through other channels;
• The automatic collection of technical data during browsing, as described above.

The information collected is used solely for legitimate purposes related to MCA-Mozambique's mission and the implementation of Compact II, namely to:

• Process and manage supplier registration and participation in procurement processes;
• Create and administer accounts for the restricted areas and authenticate users;
• Respond to complaints, concerns, suggestions and requests for information;
• Send service-related notifications, such as verification messages, access credentials, account-change confirmations, procurement notices, deadline reminders and similar communications;
• Ensure the proper functioning, security and integrity of the website and its portals;
• Produce aggregate statistics on website usage and on interest in procurement notices;
• Comply with applicable administrative, contractual and legal obligations.

In fulfilment of its mission of transparency and public interest, MCA-Mozambique intentionally publishes certain institutional content on its website. This content may include:

• News and communication articles;
• Public procurement notices (general and specific) and their updates;
• Documents, reports and other materials of a public nature;
• Names, photographs and roles of institutional representatives, governance body members and partners;
• Compact II activities, projects and milestones;
• Photo and video galleries;
• Official announcements and statements.

This publication is carried out deliberately and in the public interest, and should be distinguished from the personal information that users submit privately through forms and restricted areas, which is not made public.

The website provides channels for submitting complaints, concerns, suggestions and requests for information, in particular through the Grievance Redress Mechanism (GRM). The information provided through these channels — which may include the name, contact details and a description of the matter raised — is used solely to record, assess and respond to the submitted issue.

MCA-Mozambique handles these submissions seriously, impartially and confidentially, where applicable, and seeks to ensure the absence of retaliation against those who use these channels.

The procurement portal allows companies and individuals to register as suppliers and take part in procurement processes. During registration, information is collected such as the company name or the individual's name, the contact person, addresses, telephone numbers, email address, geographic location, service types and categories of interest. Once registration is verified, the supplier is assigned a unique identifier and provided with access credentials.

As part of the use of the portal, MCA-Mozambique may record certain actions, such as the downloading of documents associated with procurement notices, in order to support the integrity, traceability and fairness of the processes. These records may include the identification of the supplier or visitor, the document downloaded and the corresponding date and time. Supplier information is used solely for procurement-management purposes and is not publicly disclosed.

The website uses cookies and similar technologies that are strictly necessary for its operation, for authenticating users in the restricted areas, and for distinguishing visitors for statistical purposes such as counting document downloads. These cookies are not used for advertising.

As at the date of this Policy, the website does not integrate third-party analytics tools (such as Google Analytics or Matomo). Should such tools be activated in the future, this Policy will be updated accordingly. Users may, at any time, configure their browser to refuse or delete cookies, being aware that some features of the restricted areas may then no longer function correctly.

MCA-Mozambique does not sell or rent personal information. The information collected may be shared only where necessary and in the following circumstances:

• With the Millennium Challenge Corporation (MCC) and other entities involved in the implementation and oversight of Compact II, strictly within the scope of their functions;
• With service providers that support the technical operation of the website and its systems, subject to confidentiality obligations;
• With competent authorities, where required by law or in the context of applicable legal or regulatory proceedings.

Any sharing of information is carried out in accordance with applicable policies, procedures and legal requirements.

MCA-Mozambique adopts reasonable technical and organisational measures to protect information against unauthorised access, loss, alteration or improper disclosure. These measures include permission-based access controls, user authentication, the logging of administrative activities, and the protected handling of credentials and other sensitive data.

Information is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable administrative, contractual and legal obligations. Although MCA-Mozambique seeks to protect information appropriately, no data transmission or storage system is entirely secure, and absolute security cannot therefore be guaranteed.

Subject to applicable law, the user may have the right to:

• Request access to the personal information that concerns them;
• Request the correction of inaccurate or outdated information;
• Request, where applicable, the deletion or restriction of the processing of their information;
• Raise concerns regarding the processing of their data.

Registered suppliers may also update part of their data directly through their profile area in the procurement portal. To exercise any of these rights, the user may contact MCA-Mozambique using the contact details provided at the end of this Policy. Requests will be handled in accordance with applicable policies, procedures and legal requirements.

The website may contain links to third-party websites, such as that of the Millennium Challenge Corporation (MCC), the Ministry of Planning and Development and other institutional partners. MCA-Mozambique is not responsible for the content or the privacy practices of those websites. Users are advised to review the privacy policies of any websites they visit from this portal.

This Privacy Policy may be updated periodically to reflect changes in the website's functionality, in information-handling practices, or in applicable legal requirements. The version in force is the one published on this page. Users are encouraged to consult this page regularly to stay informed of any changes.

For any questions, requests or clarifications relating to this Privacy Policy or to the handling of your information, you may contact MCA-Mozambique through the following details:

MCA-Mozambique

Maputo Business Tower - MBT
Rua dos Desportistas, No. 480
8th & 9th floor | Maputo

Phone: +258 84 761 3997

Email: mcam-geral@mcamoz.co.mz