Privacy
Privacy and cookies
What the firm collects through this website, why, and what rights you have over it.
Draft structure. The headings below are the ones this notice needs to carry. The wording is for the firm to settle.
Who the controller is
The firm's identity, address, and the contact point for data protection questions.
What is collected and why
Each purpose stated separately with its lawful basis — enquiries submitted through the form, and aggregate audience measurement.
Cookies and similar technologies
Every item named, with its purpose, duration and recipient. If the site sets none beyond what is strictly necessary, that should be stated plainly rather than implied.
Who it is shared with
Hosting, email and any processor, by name or by category, with the data processing agreements in place.
Transfers outside Somalia
Where data is hosted, and the basis relied on. This matters here: the Data Protection Act 2023 restricts cross-border transfer, and the firm sells DPO as a Service, so its own notice has to be exemplary.
How long it is kept
A retention period for each category, not a general statement.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — with how to exercise each.
Complaints
How to complain to the firm, and the route to the Data Protection Authority.