Privacy Policy
Your privacy is our top priority. This Privacy Policy applies to all visitors, users, and subscribers of itqanailab.com and all sub-platforms including cart.itqanailab.com, lms.itqanailab.com, dms.itqanailab.com, and crm.itqanailab.com. It explains clearly and honestly how we collect, use, store, protect, and share your personal data. We comply fully with Oman's Personal Data Protection Law (Royal Decree No. 6/2022) and the international standards required by Google, Meta, and YouTube.
2.1 Our Commitment to Your Privacy
We pledge to never sell, rent, trade, or transfer your personal data to third parties for commercial or advertising purposes. Your data belongs to you — we simply use it to serve you better. We process your personal data lawfully, fairly, and transparently. We collect only what we genuinely need to provide you with the best possible service. We keep your data accurate, protect it with robust security, and hold it only for as long as necessary. You remain in complete control of your personal information at all times.
2.2 What We Collect and Why
Information you share with us: your full name, email address, phone number, postal address, business name, commercial registration details, billing address, payment information (processed securely - we never store your full card number), profile details, course content, documents, product listings, or client records you upload, and messages you send us. Information we collect automatically: your IP address, browser type, operating system, device identifiers, log data (pages visited, time spent, errors encountered), cookies and similar technologies, usage analytics including feature interactions and session duration, and your approximate location at a country or region level. Information from trusted third parties: basic profile data if you register using Google, Facebook, or other social login options; payment verification data from payment processing partners; API data from third-party services you have authorised us to connect with.
2.3 How We Use Your Data
We only use your data when there is a proper legal reason, as required by Oman's PDPL. We use your data to: provide and manage your subscription and access to our platforms; process payments and send billing notifications; send important service updates, security alerts, and technical notices; respond to your support requests and enquiries; improve, personalise, and develop our platforms and services; comply with our legal obligations under Omani law; prevent fraud, abuse, and security threats; and conduct anonymised analytics to understand usage patterns.
2.4 Sharing Your Data
We do not sell, rent, or share your personal data with advertising companies or data brokers. We only share data with: our trusted service providers (cloud hosting, payment processors, email delivery) who process data only on our instructions under strict agreements; platforms you connect such as Google Workspace or WhatsApp Business API (only with your explicit authorisation); government authorities if required by Omani law; a successor entity in the event of a merger (with prior notice to you); and third parties only with your explicit, informed consent.
2.5 International Data Transfers
Oman's Personal Data Protection Law carefully regulates the transfer of personal data outside Oman. When we need to transfer data internationally, we ensure robust protections are in place — including contractual safeguards and transfers only to countries recognised as providing adequate data protection. We will never transfer your data outside Oman without a valid legal basis.
2.6 How Long We Keep Your Data
We only hold your data as long as genuinely necessary: Account and subscription data is held for the duration of your subscription plus 5 years after closure. Transaction and payment records are held for 10 years per Oman commercial law. Support and communication records are held for 3 years from the last communication. Analytics data is used in anonymised form for up to 3 years. Legal compliance records are held as long as required by law. Once no longer needed, we securely delete or fully anonymise your data.
2.7 How We Keep Your Data Safe
We utilise advanced, industry-standard security measures including: encryption of all data in transit using TLS/SSL protocols; encryption of sensitive data stored on our servers; role-based access controls so only authorised team members can access your data; regular security assessments, vulnerability scans, and penetration testing; multi-factor authentication for all administrative access; secure, certified cloud infrastructure; continuous employee training on data protection best practices; and a dedicated incident response and breach management procedure.
2.8 If a Data Breach Occurs
If a personal data breach occurs that could affect your rights or safety, we commit to: notify the Ministry of Transport, Communications and Information Technology (MTCIT) of Oman within 72 hours of becoming aware of the breach; notify you directly without undue delay if the breach is likely to cause you serious harm; keep a complete internal record of all incidents and our response; and take immediate and decisive action to contain, investigate, and fix the breach.
2.9 Your Rights
Under Oman's Personal Data Protection Law (Royal Decree No. 6/2022), you have: Right of Access (ask what data we hold); Right to Rectification (correct inaccurate data); Right to Erasure (request deletion when no longer needed); Right to Restriction of Processing; Right to Data Portability (receive data in machine-readable format); Right to Object (object to direct marketing — we stop immediately); Right to Withdraw Consent (at any time); Right to Lodge a Complaint with Oman's supervisory authority. Contact our DPO at contact@itqanailab.com or +968 95528125. We respond within 45 days.
2.10 Your Data Protection Officer (DPO)
We have designated a Data Protection Officer (DPO) to ensure your privacy rights are upheld and our data practices remain fully compliant: - Email: contact@itqanailab.com - Phone: +968 95528125 - Address: Itqan General Solutions LLC, Muscat Governorate, Sultanate of Oman
2.11 Children's Privacy
Our platforms are designed for adults and business use. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at contact@itqanailab.com — we will delete that information without delay. In educational contexts on Itqan LMS, the subscribing institution or trainer is responsible for ensuring appropriate parental consents are obtained.
2.12 Third-Party Links
Our platforms may occasionally link to third-party websites or services. This Privacy Policy does not apply to those external sites, and we are not responsible for their privacy practices. We encourage you to review their policies directly. We only link to reputable services, but please exercise your own judgment.
2.13 Updates to This Privacy Policy
We may update this Privacy Policy from time to time to keep it current and accurate. When we make meaningful changes, we will notify you by email (if you have an account), display a clear notice on our website, and update the effective date. Your continued use of our Services after the updated Policy becomes effective means you accept the changes.