Skip to content

Privacy

How we handle information

This policy describes how Global Fine Solutions processes information when you use our website, correspond with us, or enter a client relationship. It is not a substitute for contractual data processing terms agreed for a specific engagement.

For users in the Sultanate of Oman, this Privacy Policy is intended to be read in light of the Oman Personal Data Protection Law issued by Royal Decree No. 6/2022 (the “Oman PDPL”), to the extent applicable to the processing of their personal data.

01. What we collect

Website & enquiries

Depending on how you interact with us, we may collect:

  • Identity & contact detailsName, employer, role, email address, phone number, and similar fields you provide through forms, email, or calendar tools.
  • Technical & usage dataLimited technical information from our website and hosted tools (for example IP address, device type, and pages viewed) where cookies or analytics are enabled. You can control cookies through your browser where applicable.

02. How we use it

Purposes & legal bases

We use information to respond to enquiries, manage prospective client relationships, deliver contracted services, operate our website, meet legal obligations, and protect our legitimate interests (such as fraud prevention and IT security), in line with applicable law.

Service delivery

Scoping, proposals, project communications, and billing for engagements you agree to in writing.

Security & improvement

Monitoring for abuse, debugging issues, and understanding aggregate usage of our digital properties.

Legal bases we rely on

We only process personal data where there is a valid legal basis under applicable law. Depending on the context, this may include:

  • Your explicit consentFor example, where you submit an enquiry, request information about our services, subscribe to updates, or allow us to contact you.
  • Contractual necessityThe need to take steps at your request prior to entering into a contract, or to perform a contract with you or your organisation.
  • Legal & regulatory obligationsCompliance with legal and regulatory obligations to which we are subject, including anti-money laundering, sanctions, tax, accounting, and record-keeping requirements.
  • Other lawful groundsOther lawful grounds permitted by applicable law, such as protecting our systems and services, preventing fraud and abuse, and defending or establishing legal claims, in each case where this is allowed under the applicable data protection framework.
Security and data protection concept

03. Security & retention

We apply administrative, technical, and organisational measures appropriate to the nature of the data and the risk—including encryption in transit where standard for the tools we use, access controls, and vendor due diligence. Retention periods depend on legal requirements and whether an ongoing relationship exists; we delete or anonymise data when it is no longer needed.

Encryption in transit
Least-privilege access
Vendor reviews

04. Cross-border transfers

Data leaving Oman

Your personal data may be transferred to and processed in countries outside the Sultanate of Oman. These recipients may include cloud hosting providers, IT and security service providers, email and communications providers, analytics providers, professional advisers, and other service providers that help us operate our business and this website.

Where such transfers occur, we will take appropriate steps to ensure that the level of protection applied to your personal data is consistent with applicable legal requirements, including, where the Oman PDPL applies, assessing the level of protection in the receiving jurisdiction, applying contractual and organisational safeguards, and obtaining your consent to the transfer where such consent is required.

You may contact us using the details below if you would like more information about how we handle cross-border transfers of your personal data.

05. Rights & frameworks

Global context

GDPR

EU / UK rights

CCPA

US state privacy

SOC 2

Where applicable

Laws vary by location. Where the GDPR, UK GDPR, or US state privacy laws apply, you may have rights to access, correct, delete, or restrict certain processing, and to object or lodge a complaint with a supervisory authority. We design processes to support common expectations; certifications and subprocessors depend on the entity and contract. Contact us to exercise rights or ask for the notice your jurisdiction requires.

Additional rights under Oman PDPL

If the Oman PDPL applies to the processing of your personal data, you may, in addition to any rights described above and subject to legal limitations, have the right to:

  • Revoke your consent to the processing of your personal data, without affecting the lawfulness of processing carried out before such withdrawal.
  • Request correction, updating, or blocking of your personal data if it is inaccurate, incomplete, or not processed in accordance with applicable law.
  • Obtain a copy of your personal data that we process.
  • Request deletion of your personal data, subject to legal limitations.

Data controller and Oman PDPL contact

Global Fine Solutions is the controller responsible for the processing of personal data collected through this website for the purposes described in this Privacy Policy, unless we inform you otherwise for specific processing activities. If you have any questions about how we process your personal data, or if you wish to exercise your rights under applicable data protection law (including the Oman PDPL where applicable), you can contact us using the details below.

Postal address
P.O. Box: 2352, Postal Code: 122Muscat, Muscat GovernorateSultanate of Oman

Questions

For privacy requests or clarifications about this policy, email us or use the contact page.

[email protected]Go to contact