Privacy Policy

Introduction

This Privacy Policy explains how the Ministry of Commerce, Industry & Investment Promotion (MoCIIP), through its Invest OMAN initiative, collects, uses, shares and protects your personal information when you visit or use our website (the “Site”). We are committed to safeguarding personal data and complying with the Personal Data Protection Law of the Sultanate of Oman (Royal Decree No. 6/2022), which came into force on 13 February 2023. The law sets strict standards for data privacy and protection, and this policy aims to reflect those requirements.

What Information We Collect

We collect personal data in the following ways:

• 1.    Information you provide – When you fill in forms, subscribe to newsletters, request information or otherwise communicate with us, we collect the details you provide (such as your name, organization, telephone number and email address).
• 2.    Automatically collected information – We may collect certain technical information about your device and browsing behaviour using cookies and similar technologies. This may include IP address, browser type, operating system, pages visited and other usage statistics. This information is collected in an aggregated or anonymous form and does not allow us to identify you personally.

You are under no obligation to provide personal data; however, failure to do so may limit your ability to access some services offered on the Site.

How We Use Your Information

We use your personal data for the following purposes:

·  Responding to enquiries – To respond to your questions, provide information about investment opportunities and deliver services you request.

·  Improving the Site and services – To analyse usage trends and improve our content, navigation and functionality.

·  Communications – To send newsletters, updates and marketing communications with your consent. You may opt out of marketing communications at any time.

·  Compliance – To comply with legal obligations, including obligations under the Omani Personal Data Protection Law and other applicable regulations.

We do not use your personal data for automated decision‑making or profiling. We will not sell or rent your personal data to third parties.

Legal Basis for Processing

Under the Personal Data Protection Law, personal data may only be processed with the explicit written consent of the data owner, unless specific exceptions apply (e.g., national security, performance of a contract, legal obligations or protection of vital interests). We process your personal data based on one or more of the following legal bases:

1.    Consent – where you have given explicit consent for processing.

2.    Contract – where processing is necessary to respond to your request or perform an agreement with you.

3.    Legal obligations – where we are required to comply with Omani law or court orders.

4.    Legitimate interests – where processing is necessary to operate and improve the Site and does not infringe your rights and freedoms.

Data Subject Rights

The Omani Personal Data Protection Law grants individuals several rights regarding their personal data. These include the right to:

·  Withdraw consent – You may withdraw your consent to data processing at any time.

·  Request correction, update or blocking – You may request correction or completion of inaccurate or incomplete data.

·  Obtain a copy of your data – You may request copies of your personal data being processed.

·  Request erasure – Under certain circumstances, you may request the deletion of your personal data. Note that the right to erasure is not absolute and may not apply when the data must be retained for legal obligations.

·  Transfer your data – You may request to transfer your personal data to another controller.

·  Be notified of data breaches – You will be informed of any breach involving your personal data​.

To exercise these rights, please contact us using the details provided in the “Contact Us” section below. We may need to verify your identity before processing your request.

Data Security

Invest OMAN uses appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or destruction. While we strive to protect your information, no method of transmission or storage is completely secure. We encourage you to use secure networks and take precautions to protect your own information.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal requirements and resolve disputes. When personal data is no longer needed, it will be securely deleted or anonymised.

Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit the Site. We use cookies to improve user experience, analyse site traffic and maintain session information. You can choose to accept or decline cookies through your browser settings; however, disabling cookies may affect your experience on the Site.

Sharing Your Information

We do not share your personal data with third parties except in the following circumstances:

·  Service providers – We may share data with third‑party service providers who assist us in operating the Site or providing services to you. These providers are obligated to protect your information and use it only for the purposes specified by Invest OMAN.

·  Legal requirements – We may disclose your information if required by law, court order or a government authority, or to protect our rights, property or safety or those of others.

We may share aggregated or anonymised information that does not identify individuals with partners or the public for research, marketing or statistical purposes.

International Data Transfers

If personal data needs to be transferred outside the Sultanate of Oman, Invest OMAN will ensure that appropriate safeguards are in place to protect the data. This may include contractual clauses or other measures consistent with the Personal Data Protection Law.

Data Protection Officer

Under the Omani Personal Data Protection Law, controllers are required to appoint a Data Protection Officer (DPO). Our DPO oversees our compliance with data protection laws and serves as a point of contact for individuals and supervisory authorities.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. We encourage you to review the policy periodically. Changes will become effective upon posting to the Site. Continued use of the Site after any changes constitutes your acceptance of the revised policy.

Contact Us

For questions, concerns or requests related to this Privacy Policy or personal data processing, please contact:

·  Address: Ministry of Commerce, Industry & Investment Promotion, Muscat, Sultanate of Oman

·  Telephone: +968 8000 0222

·  Email: info@investoman.om

We will endeavour to respond to all legitimate requests within the timeframes set out by the Omani Personal Data Protection Law. Serious concerns about data privacy compliance may also be raised with the Competent Authority as defined by the law.