LEGAL
Privacy.
Last updated 27 October 2026
This policy explains what personal data MITHLAK collects when you use this website or contact us, why we use it, who processes it for us, how long we keep it, and the rights you have. It follows Oman's Personal Data Protection Law (Royal Decree 6/2022) and its Executive Regulations.
Who is responsible for your data
MITHLAK works independently from Muscat, Sultanate of Oman. We decide how the personal data described here is used, so we are responsible for it (the data controller). MITHLAK is not yet a registered company; once it is, this policy will name the registered entity and its commercial registration number.
When we process personal data only on a client's documented instructions, the client may be the controller and MITHLAK the processor. Those roles are set out in the agreement for that project.
What we collect
- From the Start a project form: your name, email, organisation (optional), the service you are interested in, your message, the language of the page, and the time and version of this policy you agreed to.
- When you contact us on WhatsApp, by phone or by email: your number or address and the messages you send.
- When you visit the site: our hosting provider processes your IP address, browser and device details, and the pages requested, to deliver and protect the site. Our own server logs record error codes only, not what you write in the form.
- If you become a client: proposals, agreements, invoices, and the contacts and access needed for the project.
Please do not send passwords, payment-card details, identity documents, health records, or children's data through the form.
Why we use it
- To reply to your enquiry and decide whether it fits our services.
- To prepare proposals and deliver the services you agree to.
- To keep the website working and secure.
- To keep the business and accounting records the law requires.
We do not sell personal data, we do not send marketing messages, and no enquiry is accepted, priced or declined by an automated decision.
Legal basis and consent
We process enquiries on the basis of your consent, which you give by ticking the box on the form, and of the steps you ask us to take before an agreement. Client work is based on the agreement, and records are kept where the law requires them. You can withdraw your consent at any time by contacting us. Withdrawal does not affect what was done lawfully before it.
Who processes it for us
- Cloudflare: hosts the website, delivers its pages and stores form enquiries.
- Google (Gmail): our email.
- WhatsApp (Meta): when you message us there.
- n8n, Telegram and Google Sheets: alert us when a new enquiry arrives and keep a working copy.
- Professional advisers, such as legal or accounting advisers, and authorities where the law requires it.
These providers may store or process data outside Oman. We use them only for the purposes above.
How long we keep it
- Enquiries that do not become projects: deleted within 12 months of our last contact.
- Client records: for the length of the project, and accounting records for as long as Omani law requires.
- Hosting logs: for the short period our hosting provider keeps them.
You can ask us to delete your enquiry sooner.
Security
Enquiries are stored in a database that the public website cannot read; only our server can write to it. Only MITHLAK can access them, and the site is served over encrypted connections. No online service can guarantee absolute security.
Your rights
Subject to the law, you can ask to:
- Know what personal data we hold about you and receive a copy.
- Correct or update it.
- Delete it.
- Withdraw your consent or object to its processing.
Contact us by email or WhatsApp. We may need to confirm who you are before acting, but we will not ask for identity documents by ordinary email. You can also complain to the authority responsible for personal data protection in Oman, the Ministry of Transport, Communications and Information Technology.
Cookies
We set no cookies and use no analytics or advertising trackers. Our hosting provider may set one strictly necessary security cookie. The Cookie Policy has the details.
Children
This website is meant for businesses and is not designed for children. Please do not submit children's data through it.
Other websites
Links to other services, such as WhatsApp or Instagram, are governed by those services' own privacy notices.
Changes to this policy
When this policy changes, the date at the top changes too. Each enquiry records the version that was agreed to.
Contact
- Email: mithlak1001@gmail.com
- WhatsApp: +968 9121 1050
- Muscat, Sultanate of Oman