Privacy and Data Protection

Somali Humanitarian Magazine (SHM) · Version 1.0 · Effective date: 23 October 2026

1. Our commitment

SHM protects the personal data of everyone who uses https://shm.so. We follow Somalia's Data Protection Act, 2023 (Law No. 005 of 2023), the EU General Data Protection Regulation (GDPR) for users in the EU, EEA and UK, and SHM's internal Data Protection Policy (SHM/Policy/DPGP/No22/2025). Where they differ, we apply the stronger protection.

2. What we collect and why

• Messages and forms: name, organisation, email address and your message, so we can reply and manage partnerships.
• Directory profiles: the organisation details you choose to publish, so we can list your organisation.
• Usage data: IP address, device, pages viewed and files downloaded, so we can keep the site secure and improve it.
• Staff and contributor accounts: name, work email and login records, so we can run the platform securely.

We collect only what we need. We do not ask for sensitive data such as health, ethnicity, religion or political opinion.

3. We do not share your data

Your personal data and usage data are used only by SHM, only for the purposes above. SHM does not sell, rent or share them with any third party. Donors and funders receive only aggregated figures that cannot identify you.

4. Court orders and government requests

SHM discloses personal data to a government body or authority only when a competent court has issued a written order, and only if the order is specific and rests on lawful, proportionate grounds consistent with the Constitution of the Federal Republic of Somalia. We then disclose only the partial information the order requires, nothing more. An informal request or a letter from an agency is not enough. If an order is unclear, too broad or lacks a constitutional basis, we ask the court to narrow it or we challenge it first. Unless the court forbids it, we tell the person concerned, and we keep a record of every order.

5. Humanitarian data and sources

We publish aggregated or anonymised data and take care with sensitive locations. We do not publish identifiable images of people, especially children, without informed consent. We protect confidential sources and will contest any order that would reveal one.

6. Security and retention

We use encrypted connections, access controls, multi-factor authentication for staff, and checks on uploaded files. We keep personal data only as long as needed then delete or anonymise it. If a breach puts people's rights at risk, we notify the Somalia Data Protection Authority within 72 hours and tell affected people without undue delay.

7. Your rights

You may ask us to confirm and give you access to your data, correct it, delete it, or stop using it, and you may withdraw your consent or object at any time. Under the GDPR you may also ask us to restrict processing or provide your data in a portable format. Email privacy@shm.so and we will reply within 30 days. If you are unsatisfied, you may complain to the Somalia Data Protection Authority or, if you are in the EU, EEA or UK, to your local supervisory authority.