Last updated: 3 October 2026.
1. Who we are
DOMOZAY, LDA, trading as MOZAYDO, is responsible for the processing described in this notice when it determines why and how personal data is used.
Company number (NIPC): 519130154.
Registered address: Praceta da Tabaqueira, nº A2, 1950-256 Lisboa, Portugal.
Privacy contact: info@mozaydo.com.
This policy explains how we handle personal data through our website, recruitment activities, professional relationships, consulting services and digital tools. Additional notices or contractual terms may apply to particular services or employment relationships.
Where we process data solely on a customer’s instructions, the customer is responsible for its purposes and legal basis. We handle that processing under the applicable service and data-processing arrangements.
2. Personal data we collect
Depending on your relationship with us, we may process:
- Identification and contact details, such as name, email address, telephone number, location, employer and professional role.
- Recruitment and professional information, such as CVs, career history, education, qualifications, skills, availability, professional profiles, interview notes and assessment feedback.
- Information you provide in enquiries, forms, meetings, correspondence or other interactions, including documents and contextual notes.
- Commercial and service information, such as business requirements, proposals, agreements, project contacts and service-delivery records.
- Administrative and financial information needed for contracts, invoicing, payment and statutory obligations.
- Account and authentication information used to access our digital tools, including session identifiers and tokens.
- Technical information needed to operate and protect our website and services, such as IP addresses, timestamps, browser information, request logs and cookie or similar identifiers where used.
We obtain information directly from you, through authorised users of our services, from professional referrals and partners, or from relevant public professional sources. Publicly available information remains personal data and is handled under the same data-protection principles.
Please do not provide sensitive information that is unnecessary for the relevant purpose. Special-category personal data requires an additional applicable legal condition.
3. Why we use personal data and our legal grounds
We use personal data for defined purposes and an applicable legal basis:
- Responding to enquiries and preparing services: taking steps at your request before a contract, performing a contract where you are a party, or our legitimate interests in responding to professional enquiries.
- Recruitment and professional opportunities: evaluating relevant experience, managing applications, discussing opportunities and maintaining professional relationships. Depending on the context, this may rely on pre-contractual steps, legitimate interests subject to balancing your rights, or consent where required.
- Providing consulting and digital services: delivering agreed services, managing project relationships and providing authorised access to our tools, under the applicable contract or legitimate interests.
- Managing business relationships: communicating with customers, suppliers, partners and professional contacts where relevant to the relationship and subject to applicable communication rules.
- Administration and legal obligations: handling invoices, payments, records and other information required by applicable law.
- Security and service operation: authenticating users, preventing abuse, resolving operational problems, maintaining provenance and protecting our systems, based on legitimate interests or legal obligations.
- Optional communications or features: consent where required. Consent can be withdrawn without affecting the lawfulness of earlier processing.
We do not treat a public profile, a referral or another person’s submission as proof that you have consented. When relying on legitimate interests, we must consider the necessity of the processing and its impact on your rights.
4. Recruitment, professional information and digital tools
Our recruitment work may involve storing professional-profile information, source links, qualifications, interview feedback and information relevant to a particular opportunity. Relevant information may be shared with a prospective client or employer as part of the process, with appropriate transparency, authority and access controls.
Our digital tools may retain information submitted by authorised users, including profile content, contact information, documents, source evidence and contextual notes. Such information is used for the stated recruitment, relationship-management or service purpose and is available only within the relevant authorised workflow.
Tools may assist with classification, identity resolution, interpretation, matching or summarisation. These outputs support professional assessment and should be checked for accuracy and relevance. They do not themselves establish that a person is suitable for a role or that a commercial relationship exists.
Where a tool offers optional browser or third-party features, the selected provider may also process information needed to supply that feature under its own terms. The relevant interface should explain material data handling before the feature is used.
5. Who may receive personal data
Personal data may be accessed by authorised MOZAYDO personnel and, where necessary for the relevant purpose, by:
- Customers, prospective employers or project partners involved in a recruitment or service process.
- Contracted hosting, database, authentication, email, collaboration, document-management, security and other service providers.
- Providers used for automated processing or analysis where necessary to deliver the stated service and subject to appropriate data-protection arrangements.
- Professional advisers and accounting or legal providers.
- Authorities or other recipients where disclosure is required by law or necessary to establish, exercise or defend legal claims.
We limit access and disclosure to what is necessary for the relevant purpose. We do not sell personal data or use data collected through our digital tools for personalised or interest-based advertising.
Our digital services use providers such as Supabase and Google where relevant to hosting, authentication or collaboration. The specific providers depend on the service and configuration. You can request details about the recipients applicable to your information using our privacy contact.
Where personal data is transferred outside the European Economic Area, appropriate safeguards are required under applicable data-protection law, such as an adequacy decision or standard contractual clauses where applicable. Contact us for information about the arrangements relevant to your data.
6. Website forms, cookies and external links
When you submit a website form, we use the details and message you provide to respond and manage the resulting relationship. Fields needed to deal with the enquiry should be identified in the relevant form.
The website and integrated services may use cookies or similar technologies for functionality, security and, where configured, other disclosed purposes. Non-essential technologies require consent where applicable. You can manage cookies through your browser, although blocking necessary technologies may affect functionality.
External websites and services linked from our website have their own privacy practices. Selecting an external link or using a third-party feature may result in that provider processing information under its own privacy notice.
7. Security and retention
We apply technical and organisational measures appropriate to the processing, including authenticated access, role-based permissions and secure transmission where personal data is exchanged through our digital services. Users should protect their accounts and devices and sign out on shared devices.
We retain personal data for as long as necessary for its documented purpose, taking account of the relationship, the type of information, applicable legal obligations and the need to establish, exercise or defend claims.
Recruitment and professional records should be reviewed when the relevant process or relationship ends. Financial and contractual records may require longer retention under applicable law. Information subject to a deletion request may need to be retained where a lawful exception applies.
Removal from active systems and expiry from backups may occur on different schedules. Contact us to ask about the retention applicable to a particular record.
8. Your rights and choices
Subject to applicable conditions and exceptions, you may request access to your personal data, correction, erasure, restriction of processing or portability, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent.
You may object at any time to direct marketing. If you do not wish to remain in contact about professional opportunities, tell us using the privacy contact.
To exercise your rights, email info@mozaydo.com and identify the relevant relationship, profile or record. We may need proportionate information to verify your identity before disclosing or changing personal data. We respond within the periods required by applicable law.
You may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or another competent supervisory authority.
9. Use of data through digital services
Information accessed or submitted through our digital tools is used for their disclosed user-facing purposes and necessary service operation, security and legal obligations. It must not be reused for unrelated advertising or transferred for unrelated purposes.
Where a service is subject to a platform’s user-data rules, including the Chrome Web Store User Data Policy and its Limited Use requirements, those restrictions also apply. Access to user data for support or other human review requires an appropriate authorised basis. Authentication information is not made public.
10. Changes and contact
We may update this policy to reflect changes in our activities, services or applicable requirements. The current version will be published on this page with an updated date. Where required, we will provide additional notice of material changes.
Privacy contact: info@mozaydo.com.
Postal address: DOMOZAY, LDA, Praceta da Tabaqueira, nº A2, 1950-256 Lisboa, Portugal.