Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you purchase our tourist SIM cards or use our services, we collect information that you voluntarily provide, including:

• Contact Information: Full name, email address, phone number, mailing address
• Identification Information: Passport number, nationality, date of birth (required for SIM card registration as mandated by Omani telecommunications regulations)
• Payment Information: Credit/debit card details, billing address (processed securely through encrypted payment gateways)
• Travel Information: Arrival date, flight details, hotel address (for delivery coordination)
• Communication Records: Messages, emails, or phone calls with our customer support team
• Account Information: Username, password, preferences if you create an account on our website

1.2 Information Automatically Collected

When you visit our website or use our services, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, referring website, date and time of visits
• Location Data: General geographic location based on IP address
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies (see Cookie Policy section)

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions
• Telecommunications partners (Omantel and Ooredoo)
• Marketing and analytics service providers
• Social media platforms if you interact with our social media accounts
• Hotel partners for delivery coordination

2. How We Use Your Information

We use the collected information for the following legitimate purposes:

2.1 Service Delivery

• Processing and fulfilling your SIM card orders
• Activating your mobile service and managing your account
• Coordinating delivery or pickup at airport locations
• Providing customer support and responding to inquiries
• Complying with Omani telecommunications regulations requiring customer registration

2.2 Communication

• Sending order confirmations, activation instructions, and service updates
• Providing customer support via email, phone, or chat
• Sending promotional offers, newsletters, and marketing communications (with your consent)
• Notifying you about changes to our services, policies, or terms

2.3 Business Operations

• Processing payments and preventing fraudulent transactions
• Analyzing website usage to improve user experience
• Conducting market research and developing new services
• Maintaining security and preventing abuse of our services
• Complying with legal obligations and regulatory requirements

2.4 Marketing and Analytics

• Personalizing your experience on our website
• Sending targeted advertising based on your interests (with consent)
• Measuring advertising effectiveness and website performance
• Creating anonymized statistical data about user behavior

3. Legal Basis for Processing (GDPR Compliance)

For users in the European Union, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our contract with you (order processing, service delivery)
• Legal Obligation: Compliance with Omani telecommunications laws requiring customer registration
• Legitimate Interests: Fraud prevention, website security, business analytics (where not overridden by your rights)
• Consent: Marketing communications, non-essential cookies, data sharing with third parties (you may withdraw consent anytime)

4. How We Share Your Information

We respect your privacy and only share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist in our operations:

• Telecommunications Partners: Omantel and Ooredoo (for SIM card activation and service provisioning)
• Payment Processors: Secure payment gateways for transaction processing
• Delivery Services: Courier companies and airport kiosk partners
• Technology Providers: Website hosting, email services, customer relationship management systems
• Analytics Services: Google Analytics, Facebook Pixel (with appropriate safeguards)

All service providers are contractually bound to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms & Conditions and protect our legal rights
• Investigate and prevent fraud, security breaches, or illegal activities
• Protect the safety and rights of our customers, employees, or the public
• Comply with Omani telecommunications regulations and data retention requirements

4.3 Business Transfers

If Oman Mobile Pro is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

4.4 With Your Consent

We may share your information with other parties when you explicitly consent, such as when you participate in partner promotions or third-party services.

5. Data Security

We implement comprehensive security measures to protect your personal information:

5.1 Technical Safeguards

• Encryption: SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure Storage: Encrypted databases and secure servers with restricted access
• Payment Security: PCI-DSS compliant payment processing (we do not store complete card details)
• Firewall Protection: Advanced firewalls and intrusion detection systems
• Regular Security Audits: Periodic vulnerability assessments and penetration testing

5.2 Organizational Safeguards

• Access controls limiting employee access to personal data on a need-to-know basis
• Employee training on data protection and privacy best practices
• Confidentiality agreements with all staff and contractors
• Incident response procedures for data breach management
• Regular backups with secure, encrypted storage

5.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by applicable laws, providing details about the breach and steps being taken to address it.

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Customer Registration Data: Retained for 5 years as required by Omani telecommunications regulations
• Transaction Records: Retained for 7 years for accounting and tax purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Website Analytics: Anonymized after 26 months (Google Analytics default)
• Customer Support Records: Retained for 3 years for quality assurance and dispute resolution

After retention periods expire, we securely delete or anonymize your data. You may request earlier deletion subject to legal and contractual obligations.

7. Your Privacy Rights

Depending on your location, you have the following rights regarding your personal data:

7.1 Access and Portability

• Right to Access: Request a copy of personal data we hold about you
• Data Portability: Receive your data in a structured, commonly used format and transfer it to another service

7.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)

7.3 Control and Restriction

• Right to Object: Object to processing of your data for marketing purposes or based on legitimate interests
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Withdraw Consent: Withdraw previously given consent at any time

7.4 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@om-mobile.pro
• Phone: +508261285104
• Mail: 4 Raphaelle Courtyard Robertmouth, NSW 2660, Oman

We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide better service and understand how you interact with our site.

8.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (shopping cart, login sessions) – cannot be disabled
• Performance Cookies: Collect anonymous data about website usage (Google Analytics)
• Functionality Cookies: Remember your preferences (language, location)
• Advertising Cookies: Deliver relevant advertisements based on your interests (Facebook Pixel, Google Ads)

8.3 Managing Cookies

You can control cookies through:

• Our cookie consent banner when you first visit the website
• Your browser settings (blocking or deleting cookies)
• Opt-out tools: Digital Advertising Alliance, Network Advertising Initiative

Note that disabling certain cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites (social media, partner sites, payment processors). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries outside Oman, including countries that may not have the same data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (for US-based service providers where applicable)
• Ensuring adequate data protection measures are in place

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notifications for material changes
• Displaying prominent notices on our website

We encourage you to review this policy regularly. Continued use of our services after changes constitutes acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us using the information in the Contact section below.

14. Do Not Track Signals

Some browsers offer "Do Not Track" (DNT) signals. Our website does not currently respond to DNT signals due to lack of industry-wide standards. We provide cookie management options through our cookie consent tool.