Privacy Policy.

How Gulf Calibration & Safety Inspection Services collects, uses and protects your personal data under Oman PDP Law and GDPR. Plain-English explanation.

Last updated:

Who we are

Gulf Calibration & Safety Inspection Services LLC ("GCS", "we", "us") is a calibration, NDT, inspection and training company registered in the Sultanate of Oman. Our headquarters is in Muscat, with a branch in Duqm and service hubs in Sohar, Nizwa, Salalah, Sur and Ibri. For all data-protection enquiries you can reach us at info@gcs-om.com or +968 92706810.

The law that governs this policy

We process personal data in line with the Oman Personal Data Protection Law (Royal Decree No. 6/2022, in force February 2024) and supporting executive regulations. For visitors and clients in the European Economic Area or the United Kingdom we also apply the relevant provisions of the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 where they offer the visitor a higher standard.

What we collect

We only collect personal data we genuinely need to run the business. In normal use of gcs-om.com that means:

  • Information you give us directly — name, employer, job title, work email, phone number and the message you send when you request a quote, enrol in a course or apply for a job.
  • Information collected automatically when you visit the site — IP address (truncated for analytics), browser and device type, the pages you visit, time on page and approximate location at city level. The full list of cookies is on the Cookie Policy page.
  • Information from third parties — if you sign in through a social provider for example, or if a colleague refers you. We only ingest what is strictly necessary for the originating request.

Why we process your data

  • Responding to enquiries — lawful basis: performance of a contract, or legitimate interest in handling business correspondence.
  • Sending quotes, contracts and certificates — lawful basis: performance of a contract.
  • Issuing technical certificates and training certificates — lawful basis: legal obligation under accreditation rules (ISO/IEC 17025, ISO/IEC 17020, OPITO, IPAF, LEEA) and performance of a contract.
  • Improving the website — lawful basis: consent, withdrawable at any time via the Cookie Policy page.
  • Marketing communications — lawful basis: consent. You can unsubscribe in one click from any email we send you.

How long we keep your data

Quote enquiries and unsuccessful job applications are deleted after 24 months. Contract, project, certificate and training records are retained for ten years to satisfy accreditation, audit and tax requirements, after which they are securely destroyed.

Who we share data with

We do not sell personal data. We share it only with:

  • Sub-contractors and partner laboratories that need it to deliver a service you have engaged us for — under written confidentiality and data-processing terms.
  • Accreditation bodies, regulators and auditors when they exercise a right of inspection.
  • IT and analytics providers (email, web hosting, web analytics) under data-processing agreements that restrict them to acting on our instructions.
  • Law enforcement when we are legally required.

International transfers

Most of our processing happens in Oman. Where data leaves Oman — for example because our email provider operates servers in the EU or US — we use providers offering contractual safeguards aligned with the Oman PDP Law and the GDPR Standard Contractual Clauses.

Your rights

You have the right to:

  • Request a copy of the personal data we hold about you.
  • Have inaccurate data corrected, or out-of-date data erased.
  • Object to or restrict our processing.
  • Withdraw consent for marketing or analytics at any time.
  • Lodge a complaint with the Oman Ministry of Transport, Communications and Information Technology (or your local data-protection regulator if you are outside Oman).

To exercise any of these rights, email info@gcs-om.com with "Data request" in the subject line. We respond within 30 days.

Security

We use encryption in transit (TLS 1.2+), encryption at rest for sensitive records, access controls based on least privilege, periodic vulnerability scans, and a documented incident-response process aligned with ISO 27001 controls.

Changes to this policy

If we make a material change we will update the "last updated" date at the top of this page and, where the change affects how we use your data, notify you by email if we have one on file.

Contact

Data protection enquiries — info@gcs-om.com
Phone — +968 92706810 (Admin) · +968 24902330 (HQ)
Post — Gulf Calibration & Safety Inspection Services LLC, Muscat, Sultanate of Oman.