Privacy Policy

This Privacy Policy explains how Gateway to Oman, a subsidiary of Alazizi Global Projects (AGP) (“Gateway to Oman”, “we”, “us”) — License 80962, P.O. Box 1727, Postal Code 132, Way 4756, Building 4477, Al Atta Street, Suite 13, South Mawalih, Al Seeb, Muscat, Sultanate of Oman — collects, uses, shares, and protects personal information when you use our website (gatewaytooman.com and gateway-to-oman.vercel.app), the businesses-for-sale marketplace, our AI assistant, and related services (together, the “Service”).

We are the data controller of the personal information we collect about you.

1. Information we collect

When you use the Service, we collect:

• Information you provide directly: your name, email address, phone number, country, and any messages, enquiries, or preferences you share through forms, the AI chatbot, sign-up, account profile, or contact requests.
• Account information (marketplace): if you create a marketplace account, your email, hashed password, full name, phone, country code, and whether your email is verified and access is activated.
• Lead and qualification data: information you share during qualification (intent, timeline, budget bracket, business goals), the segment and tier we assign you, and any internal notes admins make about your enquiry.
• Chat transcripts: messages exchanged with our AI assistant (“Omar”) and any signals derived from them (e.g. interest area).
• Marketplace enquiry data: enquiries you submit on individual listings (message, contact details).
• Technical information: IP address, browser type, device type, referring page, and timestamps, collected automatically when you interact with the Service.
• Sign-in identifiers: if you sign in with Google, basic profile information Google shares with us (your Google account ID, email, and name).

We do not collect special-category data (such as health, religious, or biometric data) intentionally; please do not include this in messages or forms.

2. How we use your information

We use your information to:

• respond to your enquiries and provide consultancy or marketplace services;
• operate, secure, and improve the Service, including the AI assistant;
• qualify leads and route them to the right team member;
• authenticate marketplace accounts and grant/revoke marketplace access;
• send transactional communications (e.g. sign-in codes, booking confirmations, access updates);
• comply with legal obligations and enforce our Terms.

3. Legal bases (GDPR)

Where GDPR applies, we rely on: your consent (for marketing communications and the marketplace sign-up consent checkbox); contract (to deliver services you have requested, including marketplace access); legitimate interests (to operate, secure, and improve the Service, qualify leads, and prevent abuse); and legal obligation (where required by law).

4. Who we share your information with — sub-processors and recipients

We use the following service providers to operate the Service. They process personal information on our behalf under appropriate contractual safeguards:

In addition, our internal team (admins authorised by Gateway to Oman) can view information you submit through the Service in order to respond to you, qualify your enquiry, and operate the marketplace. We do not sell your personal information, and we do not share it with advertising networks.

We may also disclose information when required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, with notice to you where required.

5. International transfers

Your information is processed outside the Sultanate of Oman (notably Turso in Japan, and Vercel / Groq / Google / our email provider in the United States and other regions). Where we transfer personal data internationally, we rely on appropriate safeguards required by the Oman Personal Data Protection Law (Royal Decree 6/2022) (“PDPL”) and, where applicable, the EU/UK GDPR — including the recipient's adequacy, contractual safeguards, or your explicit consent.

6. Retention

We retain personal information only as long as necessary for the purposes set out in this Policy, or as required by law. As a general rule: lead and enquiry data is retained for as long as it is useful to follow up on your request and for a reasonable period afterwards for legitimate business records; marketplace accounts are retained while active and for a reasonable period after closure; chat transcripts are retained for service-improvement and quality-assurance purposes. You may request deletion at any time (see “Your rights”).

7. Security

We protect your information with administrative, technical, and physical safeguards, including: HTTPS encryption in transit across the Service; bcrypt password hashing (cost 12) so we never store plaintext passwords; HttpOnly, time-limited session cookies for authenticated areas; role-restricted admin access; and our database held in our own controlled cloud account. No method of transmission or storage is perfectly secure, but we work to apply industry-standard practices.

8. Your rights

Subject to applicable law (including the Oman PDPL and the GDPR where it applies), you have the right to: access your personal information, correct inaccurate information, delete your information (“right to erasure”), object to or restrict certain processing, withdraw consent at any time where we rely on consent, portability of information you provided to us, and lodge a complaint with the relevant supervisory authority (in Oman, the Ministry of Transport, Communications and Information Technology / National Centre for Personal Data Protection; in the EU/UK, your local data protection authority).

To exercise any of these rights, write to us at our registered address (see Section 13). We will respond within the timeframe required by applicable law.

9. Cookies

We use only strictly-necessary session cookies (for authentication and sign-in flows). See our Cookie Notice for details.

10. Children

The Service is not directed at individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Automated decision-making

Our AI assistant assigns a qualification “tier” (hot / warm / cold) and a numeric lead score to support our team's follow-up. This does not produce legal or similarly significant effects about you on its own, and an authorised admin reviews leads before any meaningful action. You may request a human review of any qualification decision by contacting us.

12. Changes to this Policy

We may update this Policy from time to time. The “Effective date” at the top will reflect the latest version. Material changes will be communicated where required by law.

13. Contact

Questions, requests, or complaints about this Policy or our handling of your personal information may be sent by post to:

Gateway to Oman, a subsidiary of Alazizi Global Projects (AGP)
License 80962
P.O. Box 1727, Postal Code 132, Way 4756, Building 4477, Al Atta Street, Suite 13, South Mawalih, Al Seeb, Muscat, Sultanate of Oman