MF-NOT-001 · Version 1.0 · Last updated October 2026 · M&F Trading, Lda
1. Who we are
M&F Trading, Lda ("M&F", "we") is a company registered in Mozambique, tax number (NUIT) 401040390, with its head office at Av. Armando Tivane, Beira. We distribute, install and service industrial equipment. This notice explains how we handle personal data when you visit mf.co.mz, contact us, apply for a job or do business with us. For any question about this notice, write to compliance@mf.co.mz.
2. What we collect
- Contact details: your name, job title, employer, work email address, telephone number and postal address, when you or your employer give them to us.
- Correspondence: the content of emails, website forms and messages you send us, and our replies.
- Business records: quotations, orders, contracts, invoices, delivery and service records, and payment records that name you as a contact.
- Account data: if you create an account on our website or customer portal, your login name, your orders and the documents shared with you.
- Job applications: the information in your application and curriculum vitae.
- Due diligence information: where the law or our compliance policies require it, identification and ownership details of directors and beneficial owners of the companies we deal with, and the results of sanctions screening.
- Website data: technical information that your browser sends when you visit our website, such as IP address, browser type and the pages requested, kept in server logs.
- CCTV images, if you visit our premises.
We ask you not to send us special categories of personal data, such as health information, unless we request it for a lawful purpose.
3. Why we use it
| Purpose | Lawful basis |
|---|---|
| Answering enquiries and preparing quotations | Steps taken at your request before a contract, and our legitimate interest in running our business |
| Supplying goods and services, invoicing and collecting payment | Performance of a contract |
| Providing the customer portal and online shop | Performance of a contract |
| Assessing job applications | Steps taken at your request, and our legitimate interest in recruiting |
| Know Your Counterparty, sanctions and anti-corruption checks | Compliance with legal obligations, and our legitimate interest in trading lawfully |
| Keeping accounting and tax records | Compliance with legal obligations |
| Keeping our premises, website and systems secure | Our legitimate interest in protecting people, property and systems |
We do not sell personal data and we do not use it for automated decision-making. We send commercial communications only to business contacts with whom we have a relationship or who have asked for them, and every recipient can ask us to stop.
4. Cookies
Our website uses the cookies that are needed for it to work, such as a session cookie, a language preference and the contents of a shopping cart. We do not use advertising or cross-site tracking cookies.
5. Who we share it with
We share personal data only where it is needed for the purposes above, with:
- manufacturers, suppliers and logistics providers involved in fulfilling an order or a warranty claim;
- banks and payment providers;
- providers of hosting, email and business software that process data on our behalf under contract;
- professional advisers and auditors;
- authorities, where the law requires it.
6. International transfers
Our systems are hosted with service providers in South Africa, the European Union and the United States, and the manufacturers we represent are located in other countries. Where personal data is transferred across borders, we apply the safeguards required by the law that applies to that data.
7. How long we keep it
We keep business, accounting and due diligence records for ten years after the end of the transaction or relationship, or longer where the law requires. Enquiries that do not lead to business are deleted within two years. Unsuccessful job applications are deleted within one year unless you ask us to keep them. CCTV recordings and server logs are kept for a short period for security purposes.
8. How we protect it
We apply technical and organisational measures to protect personal data, including access controls, encryption in transit and multi-factor authentication on our business systems.
9. Your rights
Subject to the law that applies to you, you may ask us to:
- confirm whether we hold personal data about you and give you a copy;
- correct data that is inaccurate;
- delete data that we no longer need;
- restrict or stop a particular use of your data;
- provide your data in a portable form.
Send your request to compliance@mf.co.mz. We may need to verify your identity. We will reply within the period required by law.
10. Changes to this notice
We may update this notice from time to time. The current version is always published on this page, with the date of the last update.