Privacy Policy

Customary Archive (Customary Archive) keeps private family records. This notice explains what personal information we collect, why, who sees it and what your rights are under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07].

What we collect

• Account: name, email, mobile number, country.
• Verification: proof that you control a phone number or email (one-time code), and, where required, your legal name, ID type and number, and date of birth.
• Customary Union Record: the partners, date and place, family and clan names, family representatives, witnesses, lobola details, what the families agreed, photographs and documents.
• Family tree and archive: people, relationships, photographs, stories and documents you add.
• Payment: the amount, date and reference of your lodgement fee. Card details go to our payment provider, never to us.
• Records of activity: who confirmed or changed what, and when. This audit trail is part of the record.

Some of this is sensitive (identity numbers, marital and family details). We collect only what the process needs.

People named by someone else

A record may name you as a partner, family representative or witness. We hold that information only to invite you to confirm your part. Nothing is recorded in your name until you confirm it yourself, and you can correct it, dispute it or say you did not take part.

Why we use it (lawful basis)

• To run the record and confirmation process you or the person who named you asked for (your consent and the service itself).
• To check identity and keep records trustworthy and free of fraud.
• To take payment and issue receipts.
• To meet legal obligations and respond to lawful requests.

We do not sell personal information and we do not use it for advertising.

Who sees it

• Public record check: anyone with a reference sees only the status and which checks were completed. Never names or details.
• Family: only what you choose to share. Being related on the Legacy Tree never gives access to your Private Vault.
• LL Vault staff: reviewers and administrators see a record and identity details only to review, support and resolve disputes. Their reviews are logged.
• Service providers who process data for us: Supabase (database and file storage), Twilio (one-time codes), Stripe (card payments, if used), and our hosting provider.
• Government: not given access to your Private Vault, photographs, stories or unrelated family information.

Sending data outside Zimbabwe

Our providers store and process data in other countries (for example the United States). We use providers that apply security safeguards and we only send what is needed. Where the law requires it, we rely on adequate protection or your consent.

How long we keep it

We keep your account while it is open. A confirmed record, its confirmations and its history are kept so that the record stays trustworthy. Identity details are kept only as long as needed to complete and evidence the check. You can ask us to delete your account and the information we are not required or entitled to keep. Where a record involves other people, we may keep a minimal, anonymised trace of it.

Security

Access is limited by role, files are in private storage, evidence files are fingerprinted so they cannot be quietly swapped, and every change to a record is logged. No system is perfectly secure. If a breach puts your information at risk we will tell you and the regulator as the law requires.

Your rights

You can ask to see the personal information we hold about you, correct it, object to or restrict its use, withdraw consent, or have it deleted where the law allows. Email [privacy contact email: set NEXT_PUBLIC_PRIVACY_EMAIL]. We will respond within a reasonable time. You can also complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the data protection authority.

Children

Customary Archive is for adults. A union record must not involve anyone under 18.

Changes

We will update this notice as the pilot develops and show the date above.