Legal
Privacy Policy
Effective date: 1 June 2025
Sebacic Oman S.A.O.C. (“we”, “us”, or “Sebacic Oman”) is committed to protecting the personal data you share with us. This Privacy Policy explains what data we collect when you use sebacic.co, why we collect it, how it is used, and your rights under the Oman Personal Data Protection Law (Royal Decree 6/2022, the “PDPL”).
1. Data Controller
The data controller responsible for your personal data is:
Sebacic Oman S.A.O.C.Plot No. 1, Heavy Industries Zone, Special Economic Zone of Al Duqm (SEZAD), Al Wusta, Sultanate of Oman
Email: purchase@sebacic.co
2. What Data We Collect
We only collect data you voluntarily provide through our website forms. Depending on the form you complete, this may include:
- Full name
- Business email address
- Company name and business sector
- Phone number (optional)
- Country / destination for supply
- Product enquiry details (type, grade, quantity, frequency, intended application)
- Free-text message or additional notes
We do not collect payment data, government identification, or sensitive personal data as defined under the PDPL.
3. How We Use Your Data
| Purpose | Legal basis (PDPL Art. 4) |
|---|---|
| Responding to your quote request or enquiry | Performance of a (pre-)contract |
| Sending you an acknowledgment email | Legitimate interest in confirming receipt |
| Logging the submission for audit and compliance | Legitimate interest; legal obligation |
| Spam / bot prevention (Cloudflare Turnstile) | Legitimate interest in securing our systems |
We do not use your data for direct marketing, sell it to third parties, or share it outside the scope described above.
4. Third-Party Processors
We use the following sub-processors to operate this website. Each is bound by a data processing agreement and handles your data only on our instructions:
- Resend Inc. (email delivery) — transactional email only; no marketing use. Data stored in the United States.
- Vercel Inc. (hosting & analytics) — anonymised page-view analytics and performance metrics. No cookies; GDPR-compliant. Data stored in the United States.
- Cloudflare Inc. (bot protection via Turnstile) — processes your IP address to distinguish humans from bots. No CAPTCHA cookies for the managed/invisible mode used on this site. See Cloudflare's privacy policy for details.
- Upstash Inc. (KV store) — stores anonymised submission records for audit logging. Data stored in the region configured in your Vercel project.
5. Data Retention
Submission records (name, company, product enquiry details, email address) are retained for up to 5 years from the date of submission to support commercial correspondence and regulatory record-keeping. We will delete your data on verified request (see Section 7).
6. International Transfers
Some processors listed in Section 4 are based in the United States. Where personal data is transferred outside Oman, we rely on contractual safeguards (data processing agreements) to ensure an adequate level of protection consistent with PDPL Chapter 6.
7. Your Rights
Under the Oman PDPL you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your data where we no longer have a legitimate purpose for retaining it.
- Objection — object to processing based on legitimate interests.
- Restriction — request that we limit processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format where technically feasible.
To exercise any of these rights, email us at purchase@sebacic.co with the subject line “Data Request”. We will respond within 30 days.
8. Cookies & Tracking
This website does not use advertising or tracking cookies. Vercel Analytics collects anonymised, cookie-free page-view data for performance monitoring only. No data is shared with advertising networks.
9. Security
All data transmitted to this website is encrypted in transit via HTTPS (TLS 1.2+). Access to stored submission records is restricted to authorised Sebacic Oman personnel only.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be indicated by a new effective date at the top of this page. We encourage you to review this page periodically.
11. Contact Us
Questions, complaints, or data requests should be directed to:
purchase@sebacic.co
Sebacic Oman S.A.O.C.
Plot No. 1, Heavy Industries Zone, Special Economic Zone of Al Duqm (SEZAD), Al Wusta, Sultanate of Oman
You also have the right to lodge a complaint with the Omani National Committee for Information Technology (NCIT) or the relevant supervisory authority in your country of residence.
This policy was last reviewed on 1 June 2025. It does not constitute legal advice. Sebacic Oman recommends that enquirers with specific legal questions seek independent counsel.