Privacy Policy
Last reviewed 25 July 2026
This document is a draft prepared for review. It is not legal advice, and is pending sign-off by the firm's legal counsel before launch. Clauses marked [confirm]require confirmed input from the firm.
This Privacy Policy explains how Hayat Auditors and Management Consultancy SPC ("Hayat", "we", "us") collects and processes personal data through this website, and your rights under the Sultanate of Oman's Personal Data Protection Law (Royal Decree 6/2022) and its Executive Regulations (Ministerial Decision 34/2024).
Who we are (the data controller)
The controller responsible for your personal data is Hayat Auditors and Management Consultancy SPC, P.O. Box 3840, P.C. 112, Ruwi, Muscat, Sultanate of Oman. For any privacy matter, contact us at info@hayatauditors.com.
What we collect and why
We only collect personal data you choose to give us, and only for the purpose you gave it:
- Contact enquiries. When you use our contact form or email us, we collect your name, company, email address, phone number and the content of your message, so we can respond and, where relevant, scope an engagement.
- Technical data. Basic, non-identifying information needed to serve the site securely. Optional analytics are only loaded if you accept them (see our Cookie Notice).
Legal basis and consent
We process contact-enquiry data on the basis of your explicit consent, given when you submit the form, and to take steps at your request prior to any engagement. You may withdraw consent at any time; withdrawal does not affect processing carried out before withdrawal.
How long we keep it
We retain contact-enquiry data only as long as needed to deal with your enquiry and any resulting relationship, after which it is deleted or anonymised. [confirm: the specific retention period Hayat applies to unsuccessful enquiries.] Where an engagement proceeds, records are kept for the period required by Omani professional, tax and anti-money-laundering law.
Who we share it with
We do not sell personal data. We share it only with service providers who help us operate the site and communications (for example, our hosting and email providers), under confidentiality obligations, and where required by law or a competent Omani authority.
International transfer
Our website and form submissions are hosted on international infrastructure, so your data may betransferred to and stored on servers located outside the Sultanate of Oman. Where the PDPL requires it, such transfers are made subject to appropriate safeguards. By submitting the form you consent to this transfer for the purpose of handling your enquiry.
Your rights
Subject to the PDPL, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- request erasure of your data;
- withdraw consent to processing;
- object to processing; and
- receive your data in a portable form.
To exercise any of these, email info@hayatauditors.com. We will respond within the period required by law.
Security and breach notification
We apply reasonable technical and organisational measures to protect personal data. In the event of a personal-data breach that meets the legal threshold, we will notify the competent authority and affected individuals as required by the PDPL.
Changes
We may update this policy to reflect changes in law or our practices. The "last reviewed" date at the top shows when it was last changed.