Privacy Statement

• You have read and understood the Privacy Statement.
• You consent to the collection, use, storage, and processing of your personal data for the specific purposes described.
• You understand that you may withdraw your consent at any time by contacting us.
• You are aware of your rights under the Personal Data Protection Law (PDPL), including the right to access, rectify, erase, and restrict processing of your personal data.
• You consent to receive marketing communications from Ooredoo.

1.1. We will only collect your personal data lawfully, fairly and with your explicit consent, unless another lawful basis applies (such as compliance with a legal obligation or performance of a contract).

1.2. Personal data we may collect includes:

• Personal identification information given to the Company during registration, such as name, national ID number, passport number, address, email, nationality and gender;
• Credit or debit-card information, or other payment information;
• History of customer contact with the Company such as through emails, call centre, customer care centre;
• Usage information such as time and duration of usage, data usage, incoming or outgoing phone calls;
• Information the Company gets from customer use of services or websites (such as IP address, operating system, browser type, the URLs of the pages you visit on the website, and when the service was used.)

1.3 We will only process your personal data for specified, clear and legitimate purposes, and subject to any preferences indicated by you. Your personal data will not be used for purposes incompatible with those originally stated.

1.4 We may also collect other non-personal information about your visit to our Website, based on your browsing activities. This information may include the pages you browse and services viewed for example. This helps us to better manage and develop our sites and to provide you with a more enjoyable, customized service and experience in the future.

2.1 We may process your personal data for purposes including:

• The processing of services, such as orders and payments;
• Meeting Ooredoo Oman legal and regulatory requirements;
• Carrying out market and product analysis and marketing our products and services;
• Offering new products and services that are relevant to the customer;
• Dealing with requests, enquiries or complaints and other customer care related activities;
• Evaluating our products and services performance; Providing protection by confirming identity.
• Verify your identity prior to delivering services;
• Communicate with you regarding service-related matters or inquiries;
• Generate and issue billing statements and usage summaries;
• Conduct data analytics to gain insights that enhance customer experience and optimize service delivery;
• Inform you about our latest products, offers, and those of trusted third-party partners, with the option to opt-out of such communications;
• Deliver location-based services and notifications related to changes in services or products;
• Manage loyalty and rewards programs;
• Address network, service, or product-related questions and issues;
• Comply with legal, governmental, or regulatory obligations, including matters related to fraud prevention and legal proceedings;
• Include your details in directories or directory enquiry services, subject to your preferences;
• Develop tailored and innovative products through research and statistical analysis of network and service usage, either anonymously or on a personalized basis;
• Maintain and improve the quality and security of our services and infrastructure;
• Facilitate financial settlements with service providers associated with our offerings;
• Carry out internal training, quality control, and system monitoring and maintenance.

2.2 We may also undertake selected marketing about our products or services or carefully selected third parties based on your use of our services. This may include contacting you with information about new developments, offers, services and special promotions.

2.3 By providing data to us, you consent to us using your data in accordance with our Privacy Statement.

2.4 You can contact us to update your information or to otherwise tell us how you would like to receive or limit information about Ooredoo and / or third party offers and services.

3.1. We will not disclose your Personal Data to third parties unless:

• Required by law, judicial authority or the Ministry of Transport, Communications and Information Technology (MTCIT);
• Necessary for service provision under contract, subject to confidentiality obligations;
• You have given your prior explicit consent.

3.2. As part of providing you with telecommunication subscription related services and the management and/or operation of the same, we may be required or need to disclose information about you to the following internal/external partners/interested parties:

• Law enforcement agencies
• Government agencies
• Companies and/or organizations that assist us in processing and/or otherwise fulfilling transactions and providing you with telecommunication subscription related services that you have requested
• Ooredoo Group Affiliates including Oman OFT international SAOC (“OFTI or “walletii”) and “Duqm Data Center SAOC (“data2cloud”)
• Other parties in respect of whom you have given your explicit consent

4.1. We may collect non-personal data relating to your browsing activity through cookies and similar technologies to improve website functionality and user experience.

4.2. You will be informed about the use of cookies and provided with an option to consent and/or manage preferences.

5.1. We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law.

5.2. Once retention is no longer justified, your data will be securely deleted or anonymized.

6.1. Under the PDPL, you have the right to:

• Access your personal data;
• Request rectification of inaccurate or incomplete data
• Request erasure where applicable
• Restrict or object to processing of your personal data
• Withdraw consent to share your personal data at any time
• File a complaint with MTCIT if you believe your rights have been violated.

Such requests can be made using the contact details provided in Section 8 of this Privacy Statement.

7.1. We adopt technical, organizational and administrative measures to protect your personal data against loss, unauthorized access, alteration, disclosure or destruction. However, we note that Internet-based communications are not fully secure and cannot be guaranteed against interception beyond our reasonable control.

8.1 You have specific rights regarding the processing of your personal data, which you may exercise at any time by contacting our Data Protection Officer. Below is a summary of these rights:

• Right to Confirmation and Access – You are entitled to receive clear, transparent, and easy-to-understand information about your personal data and how it is processed, subject to applicable company policies and conditions.
• Right to Rectification – You have the right to request correction or updates to your personal information whenever necessary.

8.2 You are responsible for ensuring that any personal information you provide to us—whether about yourself or others—is accurate and complete. It is your duty to update this information promptly if it becomes incorrect or outdated by contacting us through the details below or other specified channels. This responsibility is a condition of receiving our services.

8.3 If you provide personal data relating to family members (such as a spouse or children) or, in cases where you act as an authorized representative of an organization or company, confirm that you have:

• Obtained the necessary consent or have the legal right to share their personal data with us for processing, and
• Informed them of our Privacy Statement available on our website.

If you have any questions, requests or complaints regarding your personal data, you may contact us through our internal Data Protection Officer:

Email dpo@ooredoo.om

Address: P.O. Box 874, P.C 111, Central Post Office, Sultanate of Oman.

We may update this Privacy Statement to remain compliant with changes in law, regulations, or business practices. Any updates will be published on our website.