Privacy Policy

Effective date: 16 July 2026 · MozPay Ltd, registered in England & Wales, company no. 17341686

1. Who we are

MozPay Ltd ("MozPay", "we", "us") is the data controller for the personal data described in this policy. We are a private company limited by shares, registered in England & Wales under company number 17341686, with our registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

For any privacy question or request, contact hello@mozpay.co.uk or write to our registered office.

This policy explains how we handle personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Personal data we collect

• Lodge onboarding and KYC data: names, dates of birth, contact details and identity documents of a lodge's owners, directors and authorised representatives; business registration details; bank account details; and the results of sanctions and politically-exposed-person (PEP) screening.
• Guest transaction data: the guest's name, booking reference, transaction amount, currency, date and card metadata needed to process, reconcile, refund or defend a payment. Full card numbers are handled by our card-processing partners on secure systems; MozPay does not store full card numbers.
• Website and contact data: information you send us when you email, call or message us, such as your name, contact details and the content of your enquiry.

3. How we use personal data and our lawful bases

• To provide the service (processing payments, converting currency, settling to lodges, providing statements): performance of a contract.
• To meet our legal obligations (anti-money-laundering, KYC, sanctions and PEP screening, fraud prevention, record-keeping, responding to lawful requests from authorities): legal obligation.
• To run and improve our business (responding to enquiries, managing disputes and chargebacks, keeping records, securing our systems): legitimate interests, balanced against your rights.

We do not sell personal data, and we do not use it for automated decision-making that produces legal effects without human review.

4. Who we share personal data with

We share personal data only as needed to operate the service, with:

• our card-acquiring and payment-processing partners, to process guest card payments, refunds and chargebacks;
• our licensed foreign-exchange partner, to convert proceeds to Mozambican metical;
• compliance and screening providers, to carry out KYC, sanctions and PEP checks;
• professional advisers (legal, accounting, audit) under duties of confidentiality; and
• authorities and regulators, where we are legally required to do so.

The lodges you book with receive the booking and settlement information they need to honour your reservation and keep their accounts.

5. International transfers

MozPay operates between the United Kingdom and Mozambique, and our service providers may process data in other countries. Where personal data is transferred outside the UK, we rely on UK adequacy regulations where available, or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep personal data

We keep personal data only as long as needed for the purposes above. As a payments business we are required to retain KYC and transaction records for at least five years after the end of a business relationship or transaction, in line with UK anti-money-laundering rules. Enquiry data that does not lead to a business relationship is kept for up to two years, then deleted.

7. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected and, in some circumstances, have data erased;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive a copy of data you provided to us in a portable format; and
• withdraw consent, where processing is based on consent.

To exercise any of these rights, email hello@mozpay.co.uk. We will respond within one month. Some rights are limited where we must retain data to comply with the law (for example, AML record-keeping).

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

8. Cookies

This website does not set advertising or analytics cookies and does not use tracking technologies. Fonts are served by Google Fonts, which may receive your IP address when the page loads; no cookies are set by this site.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and vetted third-party providers. Card data is handled by payment partners on systems designed for that purpose.

10. Changes to this policy

We may update this policy from time to time. The current version, with its effective date, will always be available on this page.