TransGate Services Enterprises SPC, a company of Oman :(‘TransGate’,’Company’,’we’,’us’
or ‘our’) respects privacy and is committed to handling personal information
responsibly and professionally. This Privacy Notice explains how we collect, use,
disclose, store, and protect Personal Information in connection with our website, our
commercial brokerage, local administrative support, and limited agency-style support
services in Oman, and related interactions with business customers, counterparties,
service providers, and authorized representatives. Our services may include
commercial brokerage support, arranging or coordinating certain local administrative or
operational services, supporting vendor and government-related bill payment processes
on customer instruction, and supporting collection flows connected to underlying
customer business activities and agreed service arrangements, always subject to
applicable law, customer authorization, contractual terms, and compliance
requirements.
Where applicable, this Privacy Notice is intended to support compliance with the laws
and regulations of the Sultanate of Oman, including the Personal Data Protection Law
issued by Royal Decree No. 6/2022 and its implementing framework, the Electronic
Transactions Law issued by Royal Decree No. 39/2025, and applicable anti-money
laundering, counter-terrorism financing, banking, payment, sanctions, and
recordkeeping requirements.
1. Scope and Acceptance. By accessing or using our website or engaging with our
services, you acknowledge this Privacy Notice and the related Website Terms of
Use. This Privacy Notice applies to personal information processed in connection
with our website and our business operations in Oman. It is intended primarily for
business users, corporate customers, prospective customers, banking partners,
suppliers, and other commercial counterparties, rather than retail consumer
services.
2. Personal Information We May Collect. Depending on the nature of the
relationship and the services involved, we may collect: (a) identification and
contact details, such as name, job title, employer, business address, email
address, phone number, passport or national ID details where required for
compliance; (b) business and account information, including company name,
registration details, licensing information, tax or regulatory identifiers, bank
account details, invoicing information, and customer-approved payment or
collection instructions; (c) transaction and service information, including records
relating to service requests, invoices, bills, receipts, collections support,
counterparties, and supporting documentation linked to an underlying
commercial service or obligation; (d) due diligence and compliance information,
including know-your-customer, anti-money laundering, sanctions screening,
source-of-funds, beneficial ownership, and related verification information; (e)
communications and correspondence; and (f) technical and website usage information, such as IP address, browser type, device information, and cookie-
related data where applicable.
3. How We Collect Information. We may collect personal information directly from
you or your organization, from authorized representatives, from banks and
payment service providers, from governmental or regulatory sources, from
publicly available corporate registries, from compliance and verification providers,
from counterparties involved in a transaction, and through your use of our
website or communications channels.
4. How We Use Personal Information. We may use personal information to: (a)
review inquiries and onboard customers, suppliers, and counterparties; (b)
provide, administer, and support our services; (c) coordinate local administrative
services, vendor payments, reimbursements, and collections support on behalf of
customers in accordance with documented instructions and agreed controls; (d)
verify identity, authority, ownership, invoicing details, and customer-approved
payment or collection instructions; (e) perform screening, compliance checks,
monitoring, auditing, and internal risk management; (f) maintain records,
accounts, and transaction histories; (g) communicate about services, operations,
issues, and updates; (h) protect our rights, systems, personnel, customers, and
business partners; (i) investigate fraud, misconduct, or security incidents; (j)
comply with legal, regulatory, banking, accounting, tax, and reporting obligations;
and (k) improve our website, service delivery, governance, and internal controls.
5. Basis for Processing. Where required by applicable law, we process personal
information on the basis of consent or another legally recognized basis, including
where processing is necessary to perform contractual arrangements, carry out
requested services, comply with legal or regulatory obligations, protect legitimate
business interests, prevent fraud or abuse, or establish, exercise, or defend legal
rights. Where consent is relied upon, it may be obtained in writing, electronically,
or through other valid means permitted by law. In Oman, our processing
practices are intended to be consistent, where applicable, with the Personal Data
Protection Law issued by Royal Decree No. 6/2022 and the related Executive
Regulations issued pursuant to Ministerial Decision No. 34/2024, as each may be
amended, supplemented, or replaced from time to time.
6. How We May Disclose Personal Information. We may disclose personal
information, to the extent reasonably necessary, to: (a) banks and financial
institutions involved in account opening, account maintenance, payment
instruction processing, collections support, verification, or compliance review; (b)
customers, counterparties, vendors, and their authorized representatives where
relevant to an underlying commercial transaction or service; (c) service providers
and professional advisers, such as legal, accounting, audit, technology, cloud,
communications, compliance, and document management providers; (d)
regulators, ministries, supervisory authorities, law enforcement, courts, or other
authorities where required or appropriate; (e) insurers, auditors, and financing or
banking partners as part of legitimate diligence or risk-management processes; and (f) acquirers, investors, or successors in connection with a restructuring,
financing, sale, merger, or other corporate transaction, subject to appropriate
confidentiality measures. Such disclosures may also be made where reasonably
necessary to comply with obligations under applicable anti-money laundering and
counter-terrorism financing laws, sanctions screening requirements, fraud
prevention controls, banking requirements, audit expectations, or lawful requests
from competent authorities, including under Royal Decree No. 30/2016 and
applicable Central Bank of Oman requirements to the extent relevant to our
activities.
7. No Sale of Personal Information. We do not sell personal information. We do
not disclose personal information for unrelated third-party marketing. Where we
share information with service providers or business partners, we do so for
business, compliance, operational, security, or legal purposes consistent with this
Privacy Notice and applicable law.
8. Cross-Border Transfers. Because our customers, banking partners, technology
providers, and counterparties may operate in multiple jurisdictions, personal
information may be transferred to or accessed from outside Oman, including the
United States or other countries relevant to a transaction or service relationship.
Where cross-border transfers occur, we aim to implement appropriate safeguards
and controls consistent with applicable legal requirements, contractual
commitments, and risk considerations. Where applicable, this includes taking into
account transfer-related requirements under the Personal Data Protection Law
issued by Royal Decree No. 6/2022 and its implementing regulations.
9. Retention of Personal Information. We retain personal information for as long
as reasonably necessary for the purposes described in this Privacy Notice,
including to provide services, maintain records, complete transactions, resolve
disputes, enforce agreements, satisfy audit requirements, and comply with legal,
regulatory, tax, accounting, banking, anti-money laundering, and recordkeeping
obligations. Retention periods may vary depending on the type of information and
the applicable risk or legal requirement, including any retention expectations
arising under applicable Oman laws, regulatory guidance, contractual obligations,
and relevant Central Bank of Oman or other supervisory requirements to the
extent applicable.
10. Security and Governance. We use administrative, technical, and organizational
measures designed to protect personal information against unauthorized access,
loss, misuse, alteration, or disclosure. These measures may include role-based
access controls, restricted access to systems and records, due diligence on
service providers, record management practices, and procedures for incident
handling and escalation. Although no system can be guaranteed to be fully
secure, we seek to maintain controls appropriate to the nature of our business
and the sensitivity of the information involved. Where applicable, our approach
also takes into account the legal and operational framework relevant in Oman, insofar as they relate to electronic records, electronic dealings, systems integrity,
and protection of data handled through digital channels.
11. Your Rights. Subject to applicable law and verification of identity and authority,
you may have the right to request access to personal information, correction or
update of inaccurate information, deletion where legally permitted, restriction or
objection to certain processing, withdrawal of consent where consent is the basis
for processing, and a copy or transfer of certain information. We may require
written requests and supporting information to verify identity, authority, and the
scope of the request, and we may decline requests where an exemption or legal
basis for retention or continued processing applies.
12. Website Data, Cookies, and Communications. Our website may use cookies
or similar technologies to support functionality, security, analytics, and
administration. We may also keep records of inquiries, emails, form submissions,
and other communications for operational, compliance, quality assurance, and
recordkeeping purposes. You may be able to adjust browser settings to manage
certain cookies, but doing so may affect website functionality. Where relevant,
electronic communications, records, and website interactions may also be
subject to applicable law in Oman.
13. Third-Party Services and Websites. Our website or communications may refer
to third-party systems, banking channels, vendors, or service providers that
operate under their own terms and privacy practices. We are not responsible for
third-party privacy statements or the content, availability, or security of systems
we do not control, except to the extent required by applicable law or contract.
14. Intended Audience. Our website and services are intended for business and
commercial use. We do not knowingly offer services to children or intentionally
collect personal information from children for our business operations.
15. Website Terms of Use. You agree to use our website only for lawful business
purposes and in a manner that does not interfere with the operation, security, or
integrity of the website or our systems. You may not attempt unauthorized
access, misuse credentials, reverse engineer, scrape, transmit malicious code,
misrepresent identity or authority, or use the website in violation of applicable
law, sanctions, anti-money laundering requirements, or contractual restrictions.
We may suspend or restrict access where we reasonably believe misuse,
security concerns, or compliance risks exist. Electronic interactions through the
website may also be subject to applicable provisions of Omani law governing
electronic transactions, electronic records, and related digital communications.
16. Governing Law and Regulatory Context. This Privacy Notice and the Website
Terms of Use are intended to be interpreted in a manner consistent with the laws
of the Sultanate of Oman. Without limiting the generality of the foregoing,
relevant legal and regulatory frameworks may include, to the extent applicable to
our activities, the Personal Data Protection Law issued by Royal Decree No.
6/2022, its Executive Regulations issued pursuant to Ministerial Decision No. 34/2024, the Electronic Transactions Law issued by Royal Decree No. 39/2025,
the Law on Combating Money Laundering and Terrorism Financing issued by
Royal Decree No. 30/2016, and applicable requirements, circulars, policies, and
guidance issued by other competent authorities. Nothing in this Privacy Notice
should be interpreted as limiting any obligation imposed by mandatory law,
regulation, license condition, or lawful regulatory instruction.
17. Disclaimer. The website is provided on an “as is” and “as available” basis for
general informational purposes. To the maximum extent permitted by law, we do
not make warranties of uninterrupted availability, completeness, accuracy,
merchantability, or fitness for a particular purpose. Nothing on the website
constitutes legal, tax, regulatory, banking, investment, or other professional
advice, and no person should rely on the website as a substitute for independent
advice tailored to their circumstances.
18. Changes to This Privacy Notice. We may update this Privacy Notice from time
to time to reflect changes in our business, services, legal requirements, or
operational practices. The updated version may be posted on our website and
will be effective from the stated effective date or, if none is stated, from the date
of posting.
19. Contact Us. If you have questions about this Privacy Notice or wish to submit a
privacy-related request, please contact: TransGate Services Enterprises SPC, Muscat
Governorate, PC 123, PO Box 321.