Legal

Privacy Policy

How we collect, use, store and protect personal and client information across every engagement we deliver.

Sahal Rise Innovation Tech respects the privacy of every client, partner and visitor. This policy explains what information we handle, why we handle it, how long we keep it and the rights available to you. It applies to our website and to all services delivered across our ICT, energy and waste, logistics, fintech and capacity building practices.

1. Information we collect

We collect information you provide directly to us, including your name, work email address, telephone number, organisation, role and the details of any project brief you submit through our enquiry form or share with us by email or phone.

When you visit our website we may also collect limited technical information such as browser type, device type, referring pages and aggregated usage data. This information is used to keep the site secure and to understand which content is useful.

2. How we use your information

We use the information you provide to respond to your enquiry, prepare proposals and scopes of work, deliver contracted services, invoice for work performed, and meet our legal and regulatory obligations.

With your consent, we may also send occasional updates about our services, published case studies or training programs. You can withdraw that consent at any time and we will stop sending them.

3. Client and project data

During delivery we may process data belonging to your organisation, including operational, financial or personal data held in systems we build or maintain. We process that data strictly on your instructions and only for the purposes of the engagement.

We do not use client data to train models, benchmark other clients, or for any purpose beyond the agreed scope. On final payment, all custom code, designs, documentation and data produced for your engagement transfer to you.

4. Legal basis for processing

We process personal data where we have a legitimate business interest in responding to enquiries and delivering our services, where processing is necessary to perform a contract with you, where you have given consent, or where we are required to process data to comply with applicable law.

5. Sharing and disclosure

We do not sell personal data. We share information only with trusted service providers who support our operations — such as cloud hosting, email and accounting providers — and only to the extent needed to perform their function under contractual confidentiality obligations.

We may disclose information where required by law, regulation, court order or a lawful request by a public authority, or where necessary to protect our rights, safety or property.

6. Data security

We apply administrative, technical and physical safeguards appropriate to the sensitivity of the data we hold, including access controls on a least-privilege basis, encryption in transit, hardened infrastructure configurations, logging and monitoring, and regular review of our security posture.

No system can be guaranteed completely secure. If we become aware of a breach affecting your personal or organisational data, we will notify affected parties and relevant authorities without undue delay.

7. Data retention

We retain enquiry records for up to 24 months so we can maintain continuity of conversation. Contract, project and financial records are retained for the period required by applicable accounting and tax law. Data held on your behalf within systems we operate is retained according to the retention terms set out in your service agreement.

8. Your rights

Subject to applicable law, you may request access to the personal data we hold about you, ask us to correct inaccurate data, request deletion where we have no continuing lawful basis to retain it, object to or restrict certain processing, and request a copy of data you provided in a portable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days and may need to verify your identity before acting on the request.

9. Cookies

Our website uses only the cookies necessary for the site to function and for basic, aggregated analytics. We do not use advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings, though some parts of the site may not function as intended.

10. International transfers

Some of our service providers may process data outside Somalia. Where that happens, we take reasonable steps to ensure the data continues to receive a level of protection consistent with this policy and applicable law.

11. Changes to this policy

We may update this policy to reflect changes in our practices, technology or legal requirements. Material changes will be announced on this page with a revised effective date, and where appropriate we will notify you directly.

12. Contact us

Questions, concerns or requests relating to this policy can be sent to [email protected], or by post to Sultan Business Park, Waberi District, Mogadishu, Somalia. You can also reach us by phone on +252 619999876.