Privacy Policy

We may collect and process personal data voluntarily provided by the data subject when requesting services or contacting us, only to the extent necessary to achieve the stated purposes. This may include, without limitation:

• Full name.
• Contact details (email address and telephone number).
• Nationality and country of residence.
• Identity, passport or residence details.
• Details of partners and shareholders and their ownership percentages.
• Business or investment information.
• Company details and legal and commercial documents.
• Powers of attorney, constitutional documents and related documents.
• Data relating to visa, residence or licence applications.
• Correspondence and documents submitted through the website, email, WhatsApp or any other communication channel.
• Technical data such as IP address, device and browser type, usage data and cookies.

Please do not provide data that is unnecessary for the requested service. The company is not responsible for data provided unnecessarily.

Personal data is processed for the following purposes, in accordance with the principles of proportionality and necessity:

• Responding to enquiries and contact requests.
• Providing company formation, licensing, visa, residence and other services.
• Verifying identities and documents.
• Performing contracts and contractual obligations towards clients.
• Coordinating with government bodies, competent authorities and service providers.
• Following up applications and updating clients on progress.
• Issuing invoices and managing payments and financial records.
• Complying with legal and regulatory requirements, including anti-money laundering and counter-terrorist financing requirements where applicable.
• Protecting the legal rights of the company and clients and preventing fraud and misuse.
• Improving service quality and user experience.
• Sending marketing or advertising materials with prior consent.

Data will not be processed for any purpose incompatible with those stated, except as permitted by Omani law or with the data subject's express consent where required.

Personal data is processed on one of the following legal bases under Oman's Personal Data Protection Law:

• The data subject's express consent.
• Processing necessary to perform a contract to which the data subject is a party or to take steps at their request before entering into a contract.
• Compliance with a legal or regulatory obligation imposed on the company.
• Protection of the company's legitimate interests, without conflicting with the data subject's rights and freedoms.
• Any other legal basis permitted by Omani law.

The data subject may withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal or processing permitted or required by law.

The company does not knowingly collect children's data. If data concerning a minor is provided, it must be submitted by their guardian or with the guardian's legally valid consent.

Sensitive data (such as health, biometric or criminal-record data) is processed only under strict legal safeguards and with express consent or another lawful basis permitting it.

Personal data may be disclosed or shared only to the extent necessary and in accordance with the principle of data minimisation with the following parties:

• Government bodies in the Sultanate of Oman (such as the Ministry of Commerce, Industry and Investment Promotion, Royal Oman Police, Ministry of Labour and others).
• Competent regulatory and supervisory authorities.
• Free zones and economic zones.
• Notaries, embassies, consulates and attestation bodies.
• Banks and payment service providers.
• Lawyers, accountants and statutory auditors.
• Technology service providers (hosting, email and data management systems).
• Partners and service providers involved in delivering the service.
• Any judicial or supervisory authority where disclosure is legally required.

Personal data is never sold or traded. All recipients are bound by confidentiality agreements and must use the data only for the stated purposes.

Data may be transferred or made accessible outside Oman where necessary to provide services, for example when dealing with embassies or technology service providers.

In all cases, transfers take place only as permitted by the Personal Data Protection Law and after measures have been taken to ensure an adequate level of protection, including obtaining necessary approvals where required.

Personal data is retained throughout the provision of services and the contractual relationship, and subsequently for the period required by law or regulation, such as commercial, tax and accounting rules.

When the purpose of processing has ended and there is no legal obligation to retain the data, it is securely deleted or destroyed, or anonymised so that the data subject can no longer be identified.

The company applies appropriate technical, organisational and administrative security measures to protect data against:

• Unauthorised access.
• Loss, damage or alteration.
• Unlawful disclosure.
• Security breaches.

These measures include access controls, encryption where necessary, permission management, periodic system reviews and internal confidentiality policies.

However, complete security of data over the internet cannot be guaranteed. The user acknowledges that data is transmitted at their own risk when using insecure methods.

Under Oman's Personal Data Protection Law, data subjects have the following rights, as applicable:

• The right to be informed about their data and how it is processed.
• The right to access their personal data.
• The right to correct or update inaccurate data.
• The right to request deletion when there is no longer a legal reason to retain the data.
• The right to restrict or stop processing in cases permitted by law.
• The right to withdraw consent.
• The right to object to certain types of processing.
• The right to data portability where legally possible.
• The right to lodge a complaint with the competent authority (the Ministry of Transport, Communications and Information Technology).

These rights may be exercised by emailing info@gpioman.com. The data subject may be asked to provide proof of identity to protect their data.

The website uses cookies to improve performance and user experience and to analyse usage.

Non-essential cookies are used only with the user's consent. Users can control or disable them through their browser settings or consent management tools.

The website may contain links to external websites or services such as WhatsApp, Google or government portals. GPI Oman is not responsible for those websites' privacy policies or practices. Users are responsible for reviewing them.

Marketing messages are sent only with the data subject's prior express consent, and they may unsubscribe at any time.

This does not affect necessary communications relating to services, ongoing orders or contractual obligations.

This policy may be amended from time to time to reflect legal or operational changes. The updated version is published on the website with a revised review date, and the published version is the applicable version.