Privacy Policy

PRIVACY POLICY

Até Já - Scheduling and Management Platform

Last Updated: 04/12/2025

This Privacy Policy describes how Até Já (provided by [Insert Your Company Name/Khayasoft]) collects, uses, stores, and protects the personal information of Clients (Business Entities) and End Users (the Client's customers) in compliance with applicable laws and regulations in the Republic of Mozambique.

1. Our Role in Data Protection

1.1. Client (Data Controller): The Client (e.g., Salon, Clinic) is the Data Controller for the data of their own customers (End Users). This means the Client is responsible for ensuring that the collection and processing of such data are lawful and based on consent.

1.2. Até Já (Data Processor): Até Já acts as a Data Processor on behalf of the Client. We only process scheduling and contact data according to the instructions and contractual obligations with the Client.

2. Data Collected

We collect two main types of information:

2.1. Client Data (Business Entity)

This data is collected directly for billing, account management, and communication purposes:

  • Contact and Identification Information: Company Name, Manager/Representative Name, Email Address, Phone Number (Mozambique), Tax Address.

  • Subscription Data: Active subscription plan, billing history, and payment information (e.g., M-Pesa method, proofs of payment).

  • Service Data: List of services offered, prices, operating hours, and staff/employee data.

2.2. End User Data (Client's Customers)

This data is collected by our Clients and processed by Até Já for scheduling purposes:

  • Identification: Full Name.

  • Contact: Phone number and/or email address.

  • Scheduling Details: Time, date, and service scheduled, scheduling history.

  • Transactions: Information that a payment (M-Pesa, Emola, etc.) has been initiated or completed for the scheduled service (Até Já does not store credit card data).

3. How We Use the Data

We use the data for the following purposes:

  • Service Provision: To enable scheduling, manage the Client's calendar, and send automated confirmation notifications (SMS/Email) to End Users.

  • Billing and Payment: To process subscription fees (payment from the Client to Até Já) and facilitate the M-Pesa/Emola payment interface (payment from the End User to the Client).

  • Service Improvement: To analyze usage patterns (in an aggregated and anonymized form) to improve the Platform's performance and usability.

  • Communication: To send updates about the Service, maintenance, and support information.

4. Sharing and Disclosure of Data

We do not sell or rent your Personal Data. We share information only under the following circumstances:

  • With the Client: End User Data is shared with the Client for whom the service was booked.

  • Third-Party Service Providers: We share the minimum necessary data with third parties that help us operate (e.g., SMS providers for scheduling notifications, hosting services). These third parties are contractually obligated to maintain data confidentiality and security.

  • Legal Compliance: If required by law, court order, or regulation in Mozambique, we may disclose personal data to competent authorities.

  • Payment Processors: In the case of M-Pesa or Emola transactions, contact details are shared with the relevant telecommunications operators to process the transaction. Até Já has no control over the privacy practices of these entities.

5. Data Security

Até Já implements appropriate technical and organizational measures to protect Client Data and End User Data against unauthorized access, alteration, disclosure, or destruction.

  • All data is stored on secure servers.

  • We use encryption to protect data transmission.

6. Data Subject Rights

6.1. Client Rights (Data Controller): The Client can access, rectify, update, or delete their own account data at any time through the Platform's administration panel.

6.2. End User Rights (Client's Customer): If an End User wishes to exercise their rights (e.g., request deletion of scheduling history), they must contact the Client directly (the business entity where they made the booking), as the Client is the responsible Data Controller. Até Já will assist the Client in fulfilling these requests as instructed.

7. Final Provisions

7.1. Changes: This Privacy Policy may be updated occasionally. We will notify the Client of any substantial changes via email or notification on the Platform.

7.2. Contacts: For any questions regarding this Privacy Policy or the processing of your data, please contact:

  • Email: admin@empire216.co.za

  • WhatsApp/Phone: +258855555699

  • Address: Rua Mártires da Mueda, nº 488, Museu, Maputo