PRIVACY & COOKIE POLICY

Crossline Operations Group
Last Updated: 25 February 2026

1. Introduction

Crossline Operations Group (“Crossline”, “we”, “us”, or “our”) is a privately owned services firm headquartered in Maputo, Mozambique.

We operate and maintain digital operating environments that organisations rely on to coordinate complex, multi-location activity. Our clients operate across Southern and East Africa, with international linkages into Europe, the Middle East, Asia, the United Kingdom, and the United States.

This Global Privacy & Cookie Policy explains how we collect, use, disclose, store, and protect personal data when:

• You visit our website
• You contact us
• You engage us for operational platform management services
• You interact with systems we operate on behalf of clients

This policy is designed to align with:

• EU General Data Protection Regulation (EU GDPR)
• UK General Data Protection Regulation (UK GDPR)
• Applicable US state privacy laws (including CCPA/CPRA principles)
• Applicable African data protection laws

2. Company Details

Full Company Name:
Crossline Operations Group

Registered Address / Headquarters:
Maputo, Mozambique

Website:
https://www.crosslineoperations.com

Privacy Contact Email:
privacy@crosslineoperations.com

PRIVACY SECTION

3. Scope of Our Role

Depending on the context, Crossline may act as:

• Data Controller – when processing personal data for our own business purposes (e.g. website enquiries).
• Data Processor / Service Provider – when managing operational platforms on behalf of clients under contract.

Where we act as a processor, the client organisation remains responsible for determining the purpose and lawful basis of processing.

4. Categories of Personal Data We Collect

We collect personal data only where necessary for legitimate business and operational purposes.

A. Business Contact Information

• Name
• Job title
• Company name
• Business email address
• Telephone number

B. Operational Platform Data (Where Applicable)

When managing client systems, we may process:

• User account identifiers
• Access logs
• System activity records
• Operational workflow data

We process such data strictly in accordance with contractual instructions.

C. Website & Technical Data

When visiting our website, we may collect:

• IP address
• Browser type and version
• Device information
• Pages visited
• Time spent on pages
• Referral source

This data may be collected via cookies or analytics tools.

We do not intentionally collect special category (sensitive) personal data through our website.

5. Why We Process Personal Data

We use personal data to:

• Respond to enquiries
• Deliver and maintain operational services
• Ensure system reliability and continuity
• Monitor and improve performance
• Maintain security
• Comply with legal obligations

We do not sell personal data for monetary compensation.

6. Lawful Basis for Processing (UK & EU)

Where UK or EU GDPR applies, our lawful bases include:

• Legitimate interests (operating services and maintaining systems)
• Contractual necessity
• Legal obligation
• Consent (where required, including cookies)

7. US Privacy Rights (Including California)

Where applicable under US state privacy laws, individuals may have the right to:

• Request access to personal information
• Request deletion
• Request correction
• Opt out of the sale or sharing of personal information
• Not be discriminated against for exercising privacy rights

Crossline Operations Group does not sell personal information for monetary value.

To exercise rights, contact:

📧 privacy@crosslineoperations.com

Identity verification may be required.

8. International Data Transfers

As a Mozambique-headquartered organisation supporting international clients, personal data may be transferred across jurisdictions.

Where required under UK or EU law, we apply appropriate safeguards, including:

• Standard Contractual Clauses (SCCs)
• Contractual data protection commitments
• Other recognised legal transfer mechanisms

9. Data Retention

We retain personal data only as long as necessary to:

• Support active engagements
• Maintain operational records
• Meet legal obligations

Contact enquiries are typically retained for up to 24 months, unless a longer relationship exists.

Retention periods for client platform data are governed by contractual agreements.

10. Data Sharing

We may share personal data with:

• Cloud and hosting providers
• Technology partners
• Professional advisers
• Regulatory authorities (where required)

All third parties are expected to apply appropriate safeguards.

11. Your Rights (UK & EU Residents)

If UK or EU GDPR applies, you may have the right to:

• Access personal data
• Rectify inaccurate data
• Erase personal data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent

You may also lodge a complaint with your local supervisory authority.

12. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.

Our operational approach prioritises stability, controlled access, and continuity.

COOKIE SECTION

13. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function effectively and provide information about usage patterns.

14. Types of Cookies We Use

1. Essential Cookies

These are required for core functionality, including:

• Page navigation
• Security
• System stability

These cookies cannot be disabled via our consent tool.

2. Analytics Cookies

These help us understand:

• Website traffic
• Pages viewed
• Time spent on pages
• User interaction patterns

Analytics cookies are placed only with consent where required under UK or EU law.

3. Marketing Cookies

Crossline Operations Group does not currently use advertising or marketing cookies.

If this changes, this policy will be updated.

15. Managing or Withdrawing Cookie Consent

You may:

• Accept or reject non-essential cookies via our cookie banner
• Adjust cookie preferences (where available)
• Change browser settings to block or delete cookies
• Clear stored cookies at any time

Withdrawing consent does not affect processing carried out before withdrawal.

16. Children’s Data

Our services are directed at business organisations. We do not knowingly collect personal data from children.

17. Updates to This Policy

We may update this Global Privacy & Cookie Policy periodically. The latest version will always be available on our website, with the updated revision date shown above.