Privacy Policy

Custodia is operated by Hudumika, a Tanzania-based platform of business tools (Ondi, Tuma, CRM, Bliss and others). This policy covers Custodia only and describes what it actually does today. Contact us at komply@hudumika.tz.

• Signing in with Ondigives Custodia your name, email address and profile photo (if you have one), and the organisation you work in. This comes from a signed token issued by Ondi, Hudumika's own identity provider. We never see or handle your password.
• Your session— proof that you're signed in — is kept in your browser's session storage for this tab. Closing the tab or signing out removes it.
• Compliance recordsyour organisation enters — certificates, licence applications, obligations, renewals, reminders and company profile details — are stored in Custodia's database, scoped to your organisation. Other organisations can't see them.
• PDPA records— risk assessments, incidents, data-subject rights requests, PDPC registration details and vendors — can contain personal data about other people (for example a requester's name and contact details). They are stored the same way, scoped to your organisation, and used only to run your PDPA register.
• Messages you send usthrough the contact form go to Hudumika's support queue (Bliss) with the name and email you give, so we can reply. Email to komply@hudumika.tz reaches our inbox.

Reminders appear inside Custodia. Custodia doesn't send email, SMS or WhatsApp messages today.

One preference cookie remembers the language you chose on these pages. Your sign-in lives in session storage, as above. No analytics cookies, no advertising cookies, no third-party trackers.

Ondi, for sign-in; Bliss, Hudumika's support desk, for contact-form messages; and our own database infrastructure. We don't share your information with anyone outside Hudumika, and we don't send anything to government agencies on your behalf.

Under Tanzania's Personal Data Protection Act, you can ask what we hold about you, ask us to correct or delete it, or withdraw consent. Email komply@hudumika.tz. If your organisation holds records about you in its own Custodia register, your organisation is responsible for them; we'll pass your request on.

When Custodia starts sending reminders by email or SMS, or collects anything new, this policy will be updated before the change goes live, not after.