Privacy Policy

1. Who we are

AL NOOR - Upvc,Aluminium Windows and Door Solution (“Al Noor”, “we”, “us” or “our”) supplies and installs UPVC, aluminium, glass and related door and window solutions in the Sultanate of Oman. For the personal data described in this policy, Al Noor acts as the data controller unless another party is identified when the data is collected.

2. Scope of this policy

This policy applies when you visit al-noor.online, request information or a quotation, communicate with us, become a customer or supplier, receive an installation, use a document verification link, or request warranty and after-sales support.

It does not replace a project-specific quotation, contract, invoice, work order or written warranty. It also does not control how an independent third-party website or platform handles information after you choose to use that service.

3. Personal data we may collect

We collect data that is reasonably needed for our relationship with you, which may include:

• Identity and contact data: name, company name, telephone number, email address, delivery or installation address and preferred contact method.
• Enquiry and project data: requested service, property or site location, measurements, drawings, photographs, design choices, specifications, access requirements and messages.
• Commercial records: quotations, accepted scope, purchase or work orders, invoices, VAT information, payments, credits and account balances. We do not ask you to submit payment-card passwords or security codes through public website forms.
• Delivery and installation records: appointments, site-readiness notes, job orders, completion records, service observations and authorised contact persons.
• Warranty and support data: product details, manufacturer or brand, warranty certificate, QR verification reference, reported issue, supporting photographs and service history.
• Communications: email, telephone, WhatsApp and other correspondence connected with an enquiry, project, payment, warranty or complaint.
• Technical and usage data: IP address, browser and device information, requested pages, referral information, timestamps, language preference, diagnostic events and security logs.

We normally receive data directly from you or a person authorised to act for you. We may also receive relevant details from your contractor, consultant, employer, property representative, supplier, manufacturer, payment provider, or publicly available business source.

4. Website forms, WhatsApp and social platforms

Our public quotation form prepares a message in your browser and opens WhatsApp. Al Noor does not receive that form information through its website merely because you typed it. The information is sent only if you continue in WhatsApp and send the message.

When you use WhatsApp, Facebook, Instagram, Google Maps or another external platform, that provider may process information under its own privacy terms. WhatsApp and related Meta services may process data outside Oman. Please review the provider’s controls before sending sensitive or unnecessary information.

5. Cookies, analytics and server logs

Necessary and preference technologies

The site may use a language-preference cookie. Restricted staff areas use session and, where selected, remember-me cookies for authentication and security. Disabling necessary cookies may prevent those restricted features from working.

Google measurement services

The site loads Google Analytics 4 and Google Tag Manager to help us understand visits, page performance and enquiry activity. These services may set or read identifiers and receive device, interaction and approximate-location information derived from your IP address. Google acts under its own terms and may process data internationally.

Hosting and security logs

Our hosting and security systems may record requests, IP addresses, error information and timestamps to deliver the site, investigate faults and protect against misuse.

Browser controls can limit many cookies. Where the law requires consent for a non-essential technology, we will use it subject to the required consent mechanism.

6. Why we use personal data

• to answer enquiries, arrange site visits and prepare quotations;
• to confirm specifications, procure or manufacture products, schedule work and complete delivery or installation;
• to create and administer quotations, invoices, payments, job orders, warranty certificates and customer records;
• to provide warranty administration, product support and after-sales service;
• to meet accounting, VAT, audit, licensing, consumer-protection and other legal obligations;
• to maintain site and system security, prevent fraud, troubleshoot faults and keep reliable business records;
• to analyse and improve our website, services, products and customer experience; and
• to send advertising or commercial messages only where the consent required by Oman law has been obtained, with a free method to opt out.

Depending on the activity, processing is based on your explicit consent, steps requested before a contract, performance of an agreement, a legal obligation, or another basis permitted by the laws of Oman. Withdrawing consent does not invalidate processing already carried out, and it may not require deletion of records that we must retain by law.

7. When data may be shared

We disclose only what is reasonably necessary for the relevant purpose. Recipients may include:

• hosting, cybersecurity, analytics, software, communications and document-delivery providers;
• manufacturers, authorised distributors, suppliers, installers or subcontractors involved in the requested product, installation or warranty support;
• banks, payment providers, accountants, auditors, insurers, lawyers and other professional advisers;
• a successor or purchaser involved in a genuine business reorganisation, subject to appropriate confidentiality; and
• courts, regulators, tax, consumer-protection, law-enforcement or other public authorities where disclosure is required or permitted by law.

We do not describe disclosure to a service provider as a sale of your personal data. We do not authorise service providers to use Al Noor customer data for their unrelated purposes.

8. International transfers

Some technology, analytics, communications and supplier services may process data outside the Sultanate of Oman. Before transferring personal data internationally, we will take the steps required by the Personal Data Protection Law and its Executive Regulation, including explicit consent where required, assessment of the recipient’s protection, appropriate contractual and technical safeguards, and any approval required for protected categories of data.

9. Security

We use administrative, technical and physical measures intended to reduce unauthorised access, loss, alteration or disclosure. Measures may include access controls, authenticated staff areas, secure transmission, backups, logging and recovery procedures. No internet transmission or storage system can be guaranteed completely secure, so please use our official channels and do not send information we have not requested.

10. How long we retain data

We retain personal data only for a documented business or legal purpose. The period depends on the record, the project lifecycle, warranty duration, unresolved account or complaint, limitation period, and applicable accounting or regulatory duty.

• Enquiries that do not become projects are reviewed and deleted or anonymised when no longer reasonably needed.
• Project, warranty and support records may be kept for the life of the product or written warranty and for a reasonable period afterwards to deal with claims and service history.
• Under Oman VAT requirements, relevant tax invoices, accounting records and supporting documents generally must be retained for 10 years after the end of the relevant tax year. The period may be 15 years for records related to real estate where that rule applies.
• Data in protected backups is removed or overwritten through controlled backup cycles unless preservation is required for recovery, security, a dispute or law.

Where deletion is not legally available, we will limit retained data to the permitted purpose and restrict access appropriately.

11. Your personal data rights

Subject to the Personal Data Protection Law, Royal Decree 6/2022, and its Executive Regulation, Ministerial Decision 34/2024, you may request to:

• understand how we process your data and obtain access to or a copy of processed personal data;
• correct, update or, where applicable, block inaccurate data;
• receive or transfer your personal data where the legal conditions for portability are met;
• withdraw consent, without affecting processing completed before withdrawal;
• erase personal data where no lawful reason requires continued processing;
• stop advertising or commercial messages immediately and free of charge; and
• receive notice of a qualifying personal data breach where required by law.

Use our Data Rights & Deletion page or contact us using the details below. We may request proportionate information to verify your identity and authority before acting. We will not ask for more verification data than reasonably needed.

If you believe personal data is being processed unlawfully, you may also use the complaint process of the Personal Data Protection Department at the Ministry of Transport, Communications and Information Technology (MTCIT). Complaints are subject to the Ministry’s procedure and time limits.

12. Children’s data

Our website and products are intended for adults and business representatives. We do not knowingly request personal data directly from a child. If a project requires a child’s personal data, we will process only what is necessary and obtain guardian consent and any other protection required by Oman law.

13. External links and policy changes

Links to third-party sites are provided for convenience. We are not responsible for their content or privacy practices.

We may update this policy when our services, technology or legal obligations change. We will publish the revised policy here with a new effective date. Material changes will be highlighted or otherwise communicated where appropriate.