Privacy policy

This policy explains what personal data Dhara collects through this website, why we collect it, how we look after it, and what rights you have over it. It is written to meet our obligations under the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022) and its Executive Regulations.

Who is responsible for your data

[REGISTERED COMPANY NAME], commercial registration number [CR NUMBER], registered at [REGISTERED ADDRESS], Sultanate of Oman, is the controller of the personal data described in this policy. Where this policy says "we", "us" or "Dhara", it means that company.

For any question about this policy, or to exercise any of the rights described below, contact us at info@dhara.om or write to us at the address above.

What we collect

We only collect what you give us through a form on this site, together with basic technical information that accompanies any web request. We do not buy contact lists, and we do not collect personal data from other sources.

When you request the Fawtara guide, we collect your name, work email address, company name and your role.

When you book a consultation, we collect your name, company name, work email address and phone number. You may also choose to tell us which accounting system you use, your approximate monthly invoice volume, how you prefer to be contacted, and anything you write in the notes field.

When you use the Phase Finder or the readiness checklist, your answers stay in your browser. They are only sent to us if you then submit a form in the same visit, in which case we keep them alongside your enquiry so we can prepare properly for the conversation.

With any form you submit, we also record the date and time, the page you submitted from, your IP address, your browser's user-agent string, and, where present, the site that referred you and any campaign parameters in the link you followed.

We do not ask for, and do not want, sensitive personal data. Please do not include national ID numbers, financial account details, health information or any similar data in the notes field.

Cookies and tracking

This website sets no tracking cookies and runs no third-party advertising or analytics scripts. We use two small pieces of browser storage that stay on your device and are never sent to us: one remembers that you closed the contact invitation, so it does not reappear for thirty days, and one holds your Phase Finder answers so your result survives a page refresh. You can clear both at any time through your browser settings.

Why we use your data, and on what basis

We process your data on the basis of the consent you give when you submit a form. You can withdraw that consent at any time, and withdrawing it does not affect anything we did lawfully beforehand.

We use your data to send you the guide when you ask for it; to reply to your enquiry and arrange a consultation; to prepare usefully for that conversation; to keep a record of the consent you gave us; and, only if you ticked the relevant box, to send you occasional updates about Fawtara and e-invoicing in Oman.

Consent to marketing is separate from consent to be contacted about your enquiry, and consent for email is separate from consent for WhatsApp. Ticking one does not tick the others. Every marketing message we send will tell you how to stop receiving them.

We do not sell your personal data. We do not share it for anyone else's marketing. No decision producing legal effects for you is made about you by automated means. The Phase Finder gives you general information, not a decision.

Who else sees your data

Your data is handled by our own staff, and by a small number of service providers who process it strictly on our instructions: our hosting provider, which operates the servers where the data is stored, and our email provider, which delivers messages we send you. We require each of them to protect your data and to use it for no purpose of their own.

We may also disclose data where a court, regulator or law of the Sultanate of Oman requires it. If that ever happens, we will tell you unless we are prohibited from doing so.

Where your data is kept

Your personal data is stored on servers located in [COUNTRY]. Where we transfer personal data outside the Sultanate of Oman, we do so on the basis of your consent and only where the receiving country provides an adequate level of protection, or where we have put appropriate safeguards in place as required by the Personal Data Protection Law.

How long we keep it

We keep enquiry and contact data for thirty-six months from our last meaningful contact with you, then delete it. We chose that period deliberately: Oman's e-invoicing mandate runs to at least August 2027, so an enquiry made today may still be live well into the future.

Records of the consent you gave (what you agreed to, when, and the wording you saw) are kept for as long as we hold your data and for three years afterwards, because we may need to demonstrate that consent was properly obtained. If you ask us to delete your data, we retain only the minimum needed to show that your deletion request was honoured.

Your rights

Under the Personal Data Protection Law you have the right to be told what personal data we hold about you and to receive a copy of it; to have inaccurate or incomplete data corrected; to ask us to delete your data; to withdraw your consent to processing at any time; to object to your data being used for direct marketing; and to be informed if a breach affects your data.

To exercise any of these, email info@dhara.om. We will respond within thirty days. We will not charge you, and we will not ask you to justify the request. We may need to confirm your identity first, to be sure we are not disclosing your data to someone else.

If you are not satisfied with how we have handled your data or your request, you may complain to the Ministry of Transport, Communications and Information Technology, which supervises data protection in the Sultanate of Oman.

How we protect your data

Data sent from this website travels over an encrypted connection. It is stored in a database that only authorised people can reach, using individual accounts rather than shared ones, and access is logged. We keep the number of people who can see personal data to those who need it to do their job.

No system is perfectly secure, and we do not claim otherwise. If a breach occurs that risks the destruction, alteration or unlawful disclosure of your personal data, we will notify the Ministry and affected individuals as the law requires.

Children

This website is intended for businesses and the people who run them. It is not directed at children, and we do not knowingly collect data about anyone under eighteen. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it last changed. If a change materially affects how we use data you have already given us, we will tell you directly rather than relying on you to notice.

Contact

Questions about this policy, or about your data, go to info@dhara.om. We would rather hear from you directly than have you wonder.