Sea Noor Market

Privacy Policy

Version 1.0·Effective 2026-05-04

1. Controller

The data controller responsible for personal data processed through seanoor.market (the "Marketplace") is Sea Noor United Group, Commercial Registration No. [CR Number], registered office at [Registered Address], Muscat, Sultanate of Oman ("we", "us", "our").

For privacy questions or to exercise the rights described in this policy, please contact:

2. Personal Data We Collect

2.1 Data you provide to us

  • Account data — name, email address, phone number, delivery address, optional date of birth.
  • Order data — shipping address, contact details, payment method (the last four digits of the card only; the full card number is held by our payment provider, not by us), order history.
  • Communications — chat messages, contact-form submissions, product reviews and seller-marketplace messaging.
  • Seller application data — for users who apply to sell on the Marketplace: company name, Commercial Registration number, tax identification number and supporting attachments.

2.2 Data collected automatically

  • Browsing data — pages viewed, time spent, referrer URL.
  • Device data — IP address, user-agent string, operating system, browser, approximate location derived from the IP address.
  • Cookies and similar technologies — see the Cookie Policy.

2.3 Data received from third parties

  • Payment providers (transaction status, last four digits of the card, fraud signals).
  • Logistics partners (delivery status, proof of delivery).
  • Federated identity providers, where you sign in using such a service (name and email address only).

3. Legal Basis (PDPL Oman)

We process personal data under the bases set out in the Personal Data Protection Law of Oman (Royal Decree 6/2022, and instruments adopted under Royal Decree 12/2024 where applicable):

  • Performance of a contract — to fulfil orders placed with us.
  • Consent — for marketing communications, optional cookies and any sensitive processing.
  • Legitimate interest — for fraud prevention, security, basic analytics and product improvement.
  • Legal obligation — for tax, customs, anti-money-laundering and consumer-protection compliance.

4. Purposes of Processing

We use personal data for the following purposes:

  • order fulfilment, delivery, returns and customer support;
  • account management and authentication;
  • marketing communications (only where you have given explicit consent);
  • fraud prevention, security monitoring and abuse detection;
  • analytics, statistical reporting and product improvement;
  • compliance with legal and regulatory obligations.

5. Data Sharing

We share personal data only as strictly necessary, and only with the following recipients:

  • Sellers — your name, delivery address and phone number for the specific order, for the sole purpose of fulfilment.
  • Logistics partners — name, delivery address, phone number and order content, for the sole purpose of delivery.
  • Payment providers — order amount and authentication data, mediated by the relevant payment gateway under its own terms.
  • Cloud-hosting and infrastructure providers — under written data-processing agreements that bind them to our security and confidentiality requirements.
  • Government bodies and regulators — where, and only where, we are legally required to do so, for example by court order or tax inquiry.

We do not sell personal data to third parties.

6. International Transfers

Personal data may be processed in jurisdictions outside the Sultanate of Oman where our infrastructure providers are located. Where this happens, we apply contractual safeguards and other measures consistent with PDPL requirements to protect the data during the transfer.

7. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with applicable law:

  • Account data — while the account is active, plus a residual period of five (5) years after closure for tax-law purposes.
  • Order data — ten (10) years, in line with commercial-law record-keeping requirements.
  • Marketing-consent records — until consent is withdrawn.
  • Chat and support logs — ninety (90) days, after which they are archived in aggregated form.
  • Cookies — see the Cookie Policy.

8. Your Rights

Subject to the conditions of the PDPL, you have the right to:

  • access a copy of the personal data we hold about you;
  • rectify inaccurate or incomplete data;
  • erase your data ("right to be forgotten"), subject to legal retention obligations;
  • restrict processing in certain circumstances;
  • portability — receive your data in a structured, machine-readable format;
  • object to processing carried out under legitimate-interest grounds, including direct marketing;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • complain to the competent supervisory authority in the Sultanate of Oman.

To exercise these rights, write to sales@seanoor.market. We will respond within thirty (30) days.

9. Security

We protect personal data using a combination of technical and organisational measures, including:

  • HTTPS/TLS encryption for all data in transit;
  • modern password hashing (Argon2id);
  • encryption at rest for sensitive data stores;
  • role-based access control on a need-to-know basis;
  • regular security audits and penetration testing;
  • a documented breach-notification procedure with a maximum target of seventy-two (72) hours, in line with PDPL.

No system is perfectly secure; we cannot guarantee absolute security but we apply industry-standard safeguards.

10. Children

The Marketplace is not directed at, and is not intended for use by, persons under the age of eighteen. We do not knowingly collect personal data from children. A parent or guardian who believes that their child has nevertheless registered may contact sales@seanoor.market and we will delete the account.

11. Cookies

We use a limited number of cookies and similar technologies to operate the Marketplace, remember your preferences and (with your consent) provide analytics and marketing. Detailed information is set out in the Cookie Policy. You can manage cookie preferences from the cookie banner displayed on first visit, and at any time from /legal/cookie-settings.

12. Changes to this Policy

We may update this policy from time to time. Material changes will be notified by email at least thirty (30) days before they take effect, and the policy will always carry an "effective date" so you can identify the version in force at any moment.

13. Contact

For any privacy question or to exercise your rights:

You may also lodge a complaint directly with the competent supervisory authority in the Sultanate of Oman.