1. Data We Collect

• Account Data: name, email, phone, billing address, and login details.
• Payment Data: processed securely via third-party providers; we do not store card details.
• Usage Data: IP address, device information, browser type, and interaction with our platform.
• Cookies & Analytics: information gathered via cookies or similar technologies.

2. Legal Basis for Processing (GDPR Art. 6)

• Contractual necessity: to provide access to services and subscriptions.
• Legal obligation: compliance with AML/CFT and tax rules.
• Legitimate interests: fraud prevention, service improvement, internal analytics.
• Consent: for marketing communications, cookies, or optional analytics.

3. Use of Data

• Providing and improving services.
• Processing payments and subscriptions.
• Compliance with applicable laws (including AML/CFT).
• Security monitoring and fraud detection.
• Marketing (only with prior consent).

4. International Transfers

• Data may be transferred to and stored on servers outside your jurisdiction.
• Where required, we apply safeguards such as Standard Contractual Clauses (SCCs) in line with GDPR, and equivalent safeguards under Oman’s PDPL.

5. Data Retention

• We retain personal data only as long as necessary for the purposes set out in this Policy, and as required by law.
• After expiry of retention periods, data is securely deleted or anonymized.

6. Cookies & Tracking

• We use cookies to operate the site and improve user experience.
• Strictly necessary cookies: essential for site functionality.
• Analytics/marketing cookies: used only with explicit opt-in consent.
• A cookie banner allows you to accept, reject, or customize preferences at any time.

7. Your Rights

You have the right to:

• Access your personal data.
• Request correction or deletion.
• Object to or restrict processing.
• Withdraw consent at any time (without affecting prior lawful processing).
• Request data portability.

Requests can be submitted to: [email protected].

We will respond within one month (30 days) unless law requires otherwise.

8. Children’s Privacy

• Our services are not directed to individuals under the age of 18.
• We do not knowingly collect personal data from minors.

9. Data Security

We apply technical and organizational measures to protect personal data, including encryption, access control, and regular security assessments.

10. Third-Party Services

We may share data with trusted service providers (payment processors, hosting, analytics). These parties are contractually bound to protect personal data and use it only for specified purposes.

11. Regulatory Compliance

• GDPR (EU/EEA): This Policy is drafted in compliance with Regulation (EU) 2016/679.
• Oman PDPL (Royal Decree 6/2022): We respect requirements for consent, transparency, and lawful processing.
• Sanctions & Risk Policy: We block access and restrict transactions from sanctioned jurisdictions (OFAC and U.S. Treasury guidance).

12. Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted here with a revised “Effective Date.”

13. Contact

For questions, requests, or complaints regarding this Privacy Policy:

Email: [email protected]