Privacy Policy

Introduction

Salalah Mills Company SAOG (“we,” “our,” or “us”) values your privacy and regards personal data protection as a core pillar of corporate governance. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide through our website, in full compliance with the Oman Personal Data Protection Law (Royal Decree No. 6/2022), its Executive Regulations (Ministerial Decision No. 34/2024), and directives issued by the Ministry of Transport, Communications and Information Technology (MTCIT).

 

Information We Collect

We collect personal information strictly limited to what you voluntarily provide through our website interactive touchpoints:

  • Contact Information: Full legal name, email address, and telephone number.
  • Inquiry Details: Message subject and specific inquiry details submitted via our “Contact Us” form.
  • Subscription Preferences: Email address and explicit consent records when opting into SMC newsletters.

 

How We Use Your Information

The information collected is used strictly for legitimate commercial and operational purposes:

  • To accurately respond to your inquiries, commercial requests, or partnership opportunities.
  • To send corporate news and newsletters only where you have provided explicit prior consent via a dedicated opt-in checkbox.
  • To maintain operational efficiency, service quality, and platform security.

We will not sell, rent, trade, or commercially exploit your personal information under any circumstances.

 

Data Storage and Security

Salalah Mills Company places the highest priority on personal data protection. We implement technical, administrative, and physical security measures to safeguard your personal data from unauthorized access, alteration, disclosure, loss, or destruction, in full compliance with statutory PDPL security standards.

 

Engagement of Third-Party Processors

The Company may delegate certain operational or technical functions to trusted external entities to provide services on its behalf. The access granted to these entities is strictly limited to the extent necessary to execute those specific functions. Furthermore, these third parties are bound by legal contracts to maintain the absolute confidentiality of the data and are prohibited from utilizing it for any other purposes.

 

Cloud Hosting & Cross-Border Data Transfers

Personal data collected through website forms may be hosted, processed, or backed up using secure enterprise cloud infrastructure and international hosting solutions. Any cross-border data transfer or cloud hosting arrangement is conducted in strict compliance with the Executive Regulations (MD 34/2024), and applicable technical risk assessments.

 

Cookies and Tracking

Our website may use essential cookies and technical session logs to enhance your browsing experience and maintain platform security. These technologies do not collect or extract personal information from your contact form submissions, nor do we deploy invasive advertising or behavioral tracking cookies.

 

Protection of Minors

In accordance with Omani law, a child is defined as any natural person under eighteen (18) years of age. Our digital services are not directed at minors, and we do not knowingly collect personal data from children. If a parent or legal guardian discovers that a minor has submitted personal data without verifiable consent, please contact us immediately to ensure its prompt erasure.

 

Your Statutory Rights

Pursuant to the Omani Personal Data Protection Law, you may submit a request to our Data Protection Officer (DPO) to exercise any of the following rights free of charge:

  1. Withdrawal of Consent: The right to revoke your consent to data processing at any time.
  1. Access & Copying: The right to confirm processing and obtain a clear, readable copy of your processed personal data.
  2. Rectification & Updating: The right to request the correction or updating of inaccurate or incomplete data.
  3. Restriction & Blocking: The right to request the temporary blocking or restriction of processing of your personal data.
  4. Data Portability: The right to request the transfer of your personal data to another data controller.
  5. Erasure: The right to request the deletion of your personal data, unless statutory retention mandates apply.

 

Retention of Data

We retain your personal information only as long as necessary to fulfill the operational purposes outlined in this Policy, or as mandated by Omani legal, statutory, and accounting retention requirements.

 

External Links

This website may contain links redirecting users to external third-party sites. Salalah Mills Company disclaims all legal liability regarding the content or privacy practices of those external platforms.

 

Changes to This Privacy Policy

We reserve the right to review and update this Privacy Policy periodically to reflect legal, regulatory, or operational developments. The updated version will become effective immediately upon being posted on this page.

 

Contact Us & DPO Intake

If you have questions, concerns, or wish to exercise any of your statutory data subject rights, please contact our Data Protection Officer:

  • Official Designation: Data Protection Officer (DPO)
  • Email Address: DPO@salalah-mills.com
  • Subject Line Requirement: PDPL Data Subject Rights Request

To guarantee information security, the Company reserves the right to request proof of identity (such as a valid Civil ID or passport) prior to acting upon a request. We are legally committed to notifying you of our decision within a maximum period of forty-five (45) calendar days free of charge.