AmCham Oman Privacy Policy

 

AmCham Oman (“us”, “we”, or “our”) operates the [amcham.om] website and the AmCham Oman mobile application (the “Service”). This Privacy Policy explains how we collect, use, store, disclose and protect your personal data, and the rights you have in relation to it, in accordance with the Personal Data Protection Law issued by Royal Decree No. 6/2022 (the “PDPL”), its Executive Regulations issued by Ministerial Decision No. 34/2024, and other applicable laws of the Sultanate of Oman.

For the purposes of the PDPL, AmCham Oman is the “Controller” of the personal data described in this policy. Terms not defined here have the meanings given in our Terms and Conditions.

1. Personal Data We Collect

We collect different types of information to provide and improve the Service.

Personal Data you provide. While using the Service, we may ask you to provide information that can identify or contact you, including:

  • Email address
  • First name and last name
  • Phone number
  • Address, governorate/state, wilayat, postal code and city
  • Company, job title and membership details

Usage Data. We may collect information your browser or device sends when you visit or use the Service, such as your IP address, browser type and version, the pages you visit, the date, time and duration of your visit, unique device identifiers and other diagnostic data.

Cookies and Tracking Data. We use cookies and similar technologies (beacons, tags and scripts) to track activity on the Service, hold certain information, and analyze and improve the Service. Cookies are small files that may contain an anonymous unique identifier and are stored on your device. You can instruct your browser to refuse all cookies or to tell you when a cookie is being sent. If you do not accept cookies, some parts of the Service may not work.

2. Your Consent

Under the PDPL, we process your personal data only with your explicit consent, which we record and keep as proof, except where the law permits or requires otherwise (for example, to protect your vital interests or to comply with a legal obligation). By providing your personal data and using the Service, you consent to its collection and use as described in this policy.

You may withdraw your consent at any time by contacting us at the address in Section 13. Withdrawal does not affect processing carried out before you withdrew, and it may limit our ability to provide some parts of the Service.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • To provide and maintain the Service
  • To manage memberships, events and committee participation
  • To provide customer care and support
  • Data storage and administration
  • Data security and fraud prevention
  • Advertising, marketing and public relations activities
  • Maintenance of accounts and records
  • To comply with our legal and regulatory obligations

We will not process your personal data for a purpose materially different from those above without informing you and, where required, obtaining your fresh consent.

4. Retention

We keep personal data only for as long as necessary for the purposes described in this policy, or for the period required by the PDPL, its Executive Regulations or other applicable law. When data is no longer needed, we delete or anonymize it.

5. Security of Your Data

We take appropriate technical and organizational measures to protect your personal data against destruction, loss, alteration, unauthorized disclosure, and unauthorized access or processing, and we keep your data confidential. No method of transmission over the Internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs that may pose a risk to your rights, we will notify the Ministry of Transport, Communications and Information Technology (the “Ministry”) within the time required by law, currently 72 hours, and we will notify you of the breach and the actions we are taking.

6. Communications

We may use your personal data to send you newsletters, marketing or promotional materials and other information that may interest you. You may opt out of some or all of these communications at any time by using the unsubscribe link or instructions in any email we send, or by contacting us.

7. Service Providers and Disclosure

We may engage third-party companies and individuals (“Service Providers”) to facilitate or provide the Service on our behalf, perform Service-related tasks, or help us analyze how the Service is used. Service Providers act as Processors on our behalf. They may access your personal data only to perform these tasks and are obliged not to disclose or use it for any other purpose.

We will not publish, transmit or advertise your personal data without your prior consent, except where permitted or required by law or requested by a competent authority.

8. Transfers Outside Oman

Some of our Service Providers, or the servers we use, may be located outside Oman. We transfer personal data outside Oman only where permitted by the PDPL and its Executive Regulations, which generally require your explicit consent and an adequate level of protection, and where the transfer would not harm you or prejudice national security or higher national interests. We do not transfer personal data that has been processed in violation of the PDPL.

9. Payments

We may offer paid products or services through the Service. We use third-party payment processors and we do not store or collect your payment card details. That information is provided directly to the processor, whose use of your personal data is governed by its own privacy policy.

10. Your Rights

Under the PDPL, you have the right to:

  • Be informed about how your personal data is processed
  • Access your personal data and obtain a copy of it
  • Request correction of inaccurate or incomplete data
  • Request erasure of your data where there is no legal ground to keep it, including data processed in violation of the PDPL
  • Request restriction of, or object to, processing in the circumstances the law allows
  • Request transfer (portability) of your data where applicable
  • Withdraw your consent at any time
  • Be notified of any breach of your personal data and the actions taken
  • Lodge a complaint with the Ministry

To exercise any of these rights, contact us using the details in Section 13. We will respond to your request within the period set by the Executive Regulations (currently 45 days). We may need to verify your identity before acting on your request.

11. Links to Other Sites

The Service may contain links to sites we do not operate. If you click a third-party link, you will be taken to that site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies or practices of third-party sites or services.

12. Children’s Privacy

The Service is not directed at anyone under the age of 18 (“Children”). We do not knowingly collect personal data from Children without verifiable consent from a parent or guardian. If you are a parent or guardian and believe your child has given us personal data, please contact us. If we learn that we have collected personal data from a child without such consent, we will take steps to delete it from our servers.

13. Contact Us and Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your rights, please email us at:

Info@amcham.om

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time and will post the updated version on this page. Please review it periodically. Changes are effective when posted on this page, and where the law requires, we will seek your consent again.

15. Governing Law

This Privacy Policy is governed by the laws of the Sultanate of Oman, including the PDPL and its Executive Regulations.