Your journey. Your data. Your choices.

“iSomalia”, “we”, “us” and “our” mean iSomalia LTD, registered in the Banadir Region of Mogadishu, Somalia, and trading as iSomalia.com.

Designed and built by Somalis for Somalia, the Platform connects customers with accommodation and transport providers across the country.

We are the controller for the Platform data described in this notice unless we say otherwise. You can contact our privacy team at info@isomalia.com with “Privacy” in the subject line.

This notice covers iSomalia websites, mobile experiences, accounts, hotel and room reservations, taxi and airport-pickup services, provider dashboards, reviews, communications, customer support, promotions and AI-assisted search (together, the “Platform”).

A provider’s own privacy notice may also apply. If you follow a link to an independent website or service, its privacy practices—not this notice—govern that service.

Data about other people

If you book for another guest or passenger, you must have permission to give us their details and show them this notice. Provide only information needed for the booking.

Sensitive information

Accessibility, assistance or safety requests may reveal health, religion or other specially protected information. Please provide it only when necessary. Where the law requires, we use an additional condition such as explicit consent, vital interests or establishment or defence of legal claims.

Where data comes from

We receive data from you, another person booking for you, hotels, taxi providers, drivers, payment and identity services, authentication providers, fraud-prevention tools, maps, public registers and permitted business or marketing partners.

We use personal data only when a lawful basis applies. The basis can vary with the feature and local law.

iSomalia may use rules, statistics and AI to understand natural-language or voice searches, rank relevant results, suggest rooms or routes, translate or summarise text, detect spam and suspicious activity, and help support teams respond efficiently.

Search ranking and recommendations help organise options; they do not guarantee availability or quality. Final availability is checked against provider inventory. We do not intend to make solely automated decisions that have a legal or similarly significant effect on you without an applicable legal basis and required safeguards. Where those rules apply, you may request human intervention, explain your view and challenge the outcome.

Do not enter passwords, full payment-card details, identity documents or unnecessary sensitive information into AI or voice search. Contact us if you want more information about a significant automated decision involving you.

We share the minimum reasonably necessary for the purpose with:

• Your selected hotel, host, taxi operator or driver—to confirm and deliver the stay or journey, communicate with you, handle changes and resolve issues.
• Payment and financial providers—to authorise transactions, prevent fraud, process refunds and administer provider payouts.
• Infrastructure and business suppliers—including cloud hosting and database providers such as Supabase where deployed, authentication, email/SMS, support, analytics, security, mapping and AI suppliers.
• Professional advisers and insurers—where needed for audit, compliance, claims, disputes or business protection.
• Authorities and other parties required by law—including regulators, courts, law enforcement and emergency services where a valid basis exists.
• Business transaction parties—subject to confidentiality and legal safeguards during a merger, financing, reorganisation or sale.

We do not sell personal data for money. If a future data use is treated as a “sale” or “sharing” under a law that applies to you, we will provide the legally required notice and choice before using it that way.

iSomalia LTD is established and operates in Somalia. We use carefully selected technology, cloud, payment, communication and support suppliers where needed to operate the Platform and deliver customer services.

Where a supplier processes personal data for us, we require appropriate confidentiality, security and data-protection safeguards. Any transfer of personal data must follow applicable Somali law and any other mandatory protection that lawfully applies to the processing. Booking details are shared only as reasonably necessary to deliver the stay, airport pickup or journey requested by the customer.

You may ask us for more information about these safeguards by emailing the privacy team.

We keep data only for as long as reasonably needed for the purpose, then delete or anonymise it unless law, accounting, safety, fraud prevention or a legal claim requires longer. The periods below are our current operating retention periods and may be extended where required by applicable law, safety, fraud prevention, accounting or an active legal claim.

We use proportionate technical and organisational measures designed to protect data, including access controls, authentication, encrypted connections, supplier review, logging, backups, staff permissions, secure development and incident procedures. No online system is completely risk-free.

If a personal-data breach creates a legal notification duty, we will notify the regulator and affected people as required.

The Platform may use cookies, local storage, pixels, scripts or similar technologies for security, login, booking continuity, preferences, performance, analytics and advertising. Technologies strictly necessary to provide a feature you request may operate without consent where the law permits. Optional analytics or advertising technologies require a valid choice where applicable.

When enabled and accepted, our optional Google Analytics integration measures public-page visits, approximate countries and selected service clicks. See the Cookie Notice for the deployed controls and durations. Your account ID and form values are not passed to this integration.

You can unsubscribe from promotional emails using the link in each message. We may still send service messages about your account, security, booking, payment or journey. See our Cookie Notice for the deployed technologies and their durations.

iSomalia accounts and bookings are intended for people aged 18 or over. An adult may provide limited information about a child travelling with them when a provider needs it for occupancy, pricing, safety or the service. The adult is responsible for that data.

We do not knowingly create child accounts or target behavioural advertising to children. Contact us if you believe a child gave us personal data without appropriate authority.

Send privacy questions, rights requests and data-protection complaints to info@isomalia.com. Put “Privacy complaint” in the subject line for a complaint. We will acknowledge a data-protection complaint within 30 days, investigate appropriately, keep you informed where needed and tell you the outcome.

We would appreciate the opportunity to resolve your concern first. You also have the right to raise a complaint with the competent data-protection authority in Somalia or another authority where mandatory law gives you that right. We will cooperate with any lawful request from a competent authority.

We may update this notice as the Platform, suppliers or law changes. The effective date and version at the top show the current publication. If a change materially affects how we use personal data, we will provide an additional notice where appropriate.