Data Rights & Deletion Request

Your rights

Under Oman’s Personal Data Protection Law, Royal Decree 6/2022, and its Executive Regulation, Ministerial Decision 34/2024, you may have the right to request access to or a copy of your personal data, correction or updating, blocking where applicable, transfer, withdrawal of consent, or erasure.

A deletion request is not the only available option. Tell us the outcome you need, and we will assess the request under the applicable law and our Privacy Policy.

How to submit a request

Send the request from an email address or telephone number you previously used with Al Noor where possible. These buttons open your email application or WhatsApp with a draft message. Nothing is sent until you review and send it yourself.

What to include

Providing the following information helps us find the correct records:

• your full name;
• the telephone number, email address or company name previously used with Al Noor;
• the quotation, invoice, job order or warranty number, if known;
• whether you want access, correction, updating, blocking, transfer, consent withdrawal or deletion; and
• your preferred response method.

Identity and authority checks

Before disclosing, changing or deleting data, we may need to verify your identity and confirm that the request relates to you. We will use proportionate checks and request only the information reasonably necessary for verification.

If you act for another person or company, we may ask for evidence that you are authorised to make the request. We will not disclose personal data where identity or authority cannot be established safely.

How we handle the request

1. We acknowledge the request through an available contact channel.
2. We identify the relevant systems and records.
3. We verify your identity and clarify the requested action where necessary.
4. We erase, correct, provide, transfer, anonymise, block or restrict eligible data as appropriate.
5. We explain the result, including any data that must remain under legal retention requirements.

We will handle the request without unnecessary delay and within the timeframe required by applicable law. We do not publish an invented universal 30-day promise because the required process and lawful exceptions depend on the request and the current regulation.

Information that may be deleted or anonymised

Where no continuing purpose or legal duty applies, eligible information may include an inactive enquiry, duplicate contact details, optional marketing preferences, or other personal data no longer needed for the reason it was collected.

Deletion from active systems does not necessarily mean immediate removal from every protected backup. Backup copies are overwritten or aged out through controlled cycles and are not restored for ordinary business use. If a backup must be restored for recovery, applicable deletion restrictions will be reapplied.

Information we may have to retain

Deletion rights are subject to lawful exceptions. We may retain the minimum information necessary for:

• tax invoices, accounting, VAT, audit and regulatory obligations;
• an active quotation, order, project, payment, job order or warranty;
• establishing, exercising or defending a legal claim or resolving a complaint;
• fraud prevention, security, document integrity and proof that a request was completed; or
• another requirement or permission under the laws of Oman.

Relevant Oman VAT records generally must be retained for 10 years after the end of the applicable tax year. The legal period may be 15 years for records related to real estate where that rule applies. When data cannot be erased, access will be restricted and the data will be used only for the permitted retention purpose.

Marketing consent

You may ask us to stop advertising or commercial messages at any time and free of charge. Use the same channel through which the message was received or contact us using the details on this page. Stopping marketing does not stop necessary project, payment, safety, warranty or service communications.

If you are not satisfied

Please contact us first so we can investigate and respond. If you believe your personal data is being processed unlawfully, you may also use the complaint process of the Personal Data Protection Department at the Ministry of Transport, Communications and Information Technology (MTCIT). The Ministry’s procedure includes its own submission requirements and time limits.

Visit the official MTCIT Personal Data Protection page.