Privacy Policy

Who we are

This website is operated by Marhaba Consulting and Investment LLC, trading as Marhaba Business Solutions, a company registered in the Sultanate of Oman under commercial registration number 1650061, with its office in Bowshar, Muscat. Marhaba is part of Missing Link Group.

For the purposes of Oman's Personal Data Protection Law (Royal Decree 6/2022) and the EU General Data Protection Regulation, we are the controller of the personal data described in this policy. You can reach us at info@marhaba-business.com or +968 9894 2482.

What we collect

We collect two quite different categories of data, and it is worth keeping them separate in your mind.

Enquiry data. When you contact us — by form, email, WhatsApp or telephone — we collect your name, contact details, nationality, and whatever you tell us about the business you intend to set up. You choose what to share; nothing beyond a way to reply to you is required.

Engagement data. If you become a client, company formation in Oman obliges us to collect and submit documents that are, by nature, sensitive: passport copies, national identity documents, proof of address, educational or professional certificates where an activity requires them, shareholder and beneficial ownership details, and source-of-funds information where a bank or regulator requires it. We collect these because Omani authorities and banks require them, not because we want them.

Website data. Our website is deliberately minimal. It sets no cookies, runs no advertising or social media trackers, and does not build a profile of you. See our Cookie Policy for the detail.

Why we process it, and on what basis

• To answer your enquiry — on the basis of your consent, and of steps taken at your request before entering a contract.
• To deliver the services you engage us for — on the basis of our contract with you.
• To submit applications to Omani authorities (MoCIIP, Royal Oman Police, the Tax Authority, OCCI, Ministry of Labour, free zone authorities) and to banks on your behalf — on the basis of our contract with you and your explicit consent to each submission.
• To meet our own legal obligations — including anti-money-laundering and know-your-client requirements, tax record keeping, and responses to lawful requests from Omani authorities.
• To send you occasional updates about regulatory changes or the Founders Table — only where you have separately opted in, and you can withdraw at any time.

We do not sell personal data. We do not share it with advertisers. We do not use it to train any automated system.

Who we share it with

We disclose personal data only where delivering your service requires it, and only to the extent required:

• Omani government authorities — MoCIIP for registration, the Royal Oman Police for residency, the Tax Authority, OCCI, the Ministry of Labour, and the relevant free zone authority.
• Banks — where you have asked us to make an introduction, and only the KYC pack you have approved.
• Licensed PRO partners and notaries — where a step legally requires a licensed intermediary. These parties are bound by confidentiality obligations.
• Our professional advisers — auditors and legal counsel, where necessary.

We will never disclose your data to a third party for that party's own marketing purposes.

Transfers outside Oman

Our email, document storage and communications tools are provided by international suppliers, so some data is processed outside the Sultanate. Where that happens, we assess the level of protection in the destination country and use suppliers offering protections equivalent to those required under the PDPL. For personal data of individuals in the European Economic Area, we rely on the appropriate safeguards permitted under Chapter V of the GDPR.

How long we keep it

Enquiries that do not become engagements: up to 24 months from your last contact with us, then deleted.

Client and engagement records: for the duration of the engagement and for a minimum of ten years afterwards, or longer where Omani commercial, tax or anti-money-laundering law requires it. We cannot delete records we are legally required to retain, even at your request.

Marketing consents: until you withdraw them, plus a record of the withdrawal itself so we can honour it.

Your rights

Under the PDPL and, where it applies, the GDPR, you may:

• Ask what personal data we hold about you, and receive a copy in a readable format.
• Ask us to correct anything inaccurate or incomplete.
• Ask us to delete data, where we are not legally required to keep it.
• Withdraw a consent you previously gave, at any time, without affecting anything done before the withdrawal.
• Ask us to transfer your data to another provider.
• Object to processing, or ask us to restrict it, in the circumstances the law allows.

Write to info@marhaba-business.com with "Data request" in the subject line. We respond within 45 days as required by the Executive Regulations to the PDPL, and usually much sooner. There is no charge. If we refuse a request in whole or in part, we will tell you why in writing.

Security

We keep client documents in access-controlled storage, limit access to the people working on your engagement, use encrypted transmission for document exchange, and do not keep identity documents on portable devices. No system is perfectly secure, and we do not claim otherwise — but if a breach occurs that poses a risk to your rights, we will notify the Ministry of Transport, Communications and Information Technology within 72 hours, and we will notify you directly where the risk to you is serious.

Children

Our services are for adults acting in a business capacity. We do not knowingly collect data from anyone under 18, except where a child is named as a dependent on a family visa application — in which case the data comes from the sponsoring parent or guardian, is limited to what the immigration authority requires, and is used for nothing else.

Complaints

If you are unhappy with how we have handled your data, tell us first — most issues are a misunderstanding we can resolve in a day. If you remain unsatisfied, you may complain to the Ministry of Transport, Communications and Information Technology in Oman, or, if you are in the European Economic Area, to your national data protection authority.

Changes to this policy

We update this policy when our practices or the law change. The effective date at the top of this page always reflects the current version. Material changes affecting existing clients will be communicated directly rather than only posted here.

Contact

Marhaba Consulting and Investment LLC (trading as Marhaba Business Solutions)
CR 1650061 · Bowshar, Muscat, Sultanate of Oman
info@marhaba-business.com · +968 9894 2482
Sunday–Thursday, 08:30–17:30