Privacy Policy

Mustajer Platform and Application

Version 2.0 — Effective from the date of publication

Welcome to the Mustajer platform and application (hereinafter referred to as the “Platform”). This policy explains how we handle your personal data when you use the Platform. We recommend that you read it carefully before using any of our services.

Sabaq Digital Solutions and Business Company (hereinafter referred to as “we”, “the Company”, or “the Operator”) respects your privacy and the privacy of all users and visitors. We are committed to protecting personal data collected when using the Platform, website, or any of our services.

1.2 This policy explains the types of data we collect, the legal basis for collection, how we use, share, and protect it, and your rights and choices regarding it.

1.3 By using the Platform, creating an account, or communicating with any party through it, you acknowledge that you have read and agreed to this policy, including the use of cookies in accordance with its terms.

1.4 This policy is governed by the applicable laws of the Sultanate of Oman, including but not limited to the Personal Data Protection Law issued by Royal Decree No. 6/2022 and its executive regulations, the Electronic Transactions Law, the Cybercrime Law, and any other applicable legislation.

1.5 If you do not agree to any part of this policy, you must immediately stop using the Platform and refrain from providing us with any personal data.

2.1 Data Controller: Sabaq Digital Solutions and Business Company, the entity responsible for determining the purposes and means of processing personal data on the Platform.

2.2 This policy applies to all uses of the Platform through mobile applications (Android and iOS), the website, associated dashboards, and any official channels of the Platform.

2.3 This policy does not apply to third-party websites, applications, or services that may be linked to or integrated with the Platform. Such third parties have their own privacy policies, and we are not responsible for them.

“Personal Data”: Any data that identifies a natural person or can directly or indirectly identify them, such as name, ID number, phone number, or IP address.

“Sensitive Data”: Data revealing racial or ethnic origin, religious or political beliefs, health, biometric or genetic data, criminal records, or financial status.

“Non-Personal Data”: Data that does not identify a user on its own, such as aggregated or anonymized data.

“Processing”: Any operation performed on data such as collection, recording, storage, modification, retrieval, use, disclosure, transfer, or deletion.

“Lessor”: A user who lists an item or asset for rent on the Platform, whether an individual or an entity.

“Lessee”: A user who browses listed items and contacts the lessor to rent them.

“KYC (Know Your Customer)”: Identity verification procedures for individuals and entities before enabling certain services.

“Cookies”: Small files stored on your device that help operate the Platform and improve user experience.

We collect different types of data depending on how you use the Platform, as follows:

Account creation and management data: name, phone number, email, city/region, profile picture (optional), password (encrypted).

Lessor/service provider data: business name, commercial registration number, tax ID (if applicable), authorized signatory details, branch addresses.

Listings and item data: images, descriptions, category, pricing, availability, rental terms, geographic location of the item.

Communication data: internal messages between users through the Platform and related notes.

Ratings and reviews you publish about lessors, lessees, or listed items.

Support data: reports, complaints, support tickets, and communications through official channels.

For individuals: ID card or passport data, document images, selfie verification when required, phone number verification via OTP.

For entities: commercial registration, licensing documents, authorization proof for representatives.

These data are used strictly for identity verification, risk management, fraud prevention, and regulatory compliance.

We only collect payment data related to purchasing subscription packages and services offered by the Platform. We do not intervene in any financial transactions between lessor and lessee outside the Platform and do not collect data related to such transactions.

Payment data is processed through our approved payment provider under PCI-DSS security standards.

We do not store sensitive card data (such as full card number or CVV).

We retain records of package purchases, amounts, dates, and refund status (if any).

Device and browser data: IP address, device type, operating system, language, device identifiers, network type.

Location data: approximate location via IP or precise GPS location with your permission (can be disabled anytime).

Usage data: pages visited, session duration, referral sources, navigation paths, performance errors, interface interactions.

Notification data: push notification status and identifiers.

We may receive data from service partners (SMS providers, analytics providers, fraud prevention services, mapping services) or government databases for verification purposes, as required to provide and improve services and ensure user safety.

If you provide data relating to another individual, you confirm that you have legal authorization to do so, and that we may process it under this policy. You are responsible for the accuracy and lawful collection of such data.

We generally do not request sensitive data. If such data is required for a specific service, we will only process it with your explicit consent.

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor without guardian consent, we will delete it immediately and close the account.

We process your personal data based on one or more of the following legal grounds:

Your explicit consent: when you give clear permission for a specific purpose (e.g., marketing messages).

Contract performance: when processing is necessary to perform the user agreement or take pre-contractual steps.

Legal obligation: when required by applicable laws or regulations in the Sultanate of Oman.

Legitimate interest: when we or a third party have a legitimate interest, provided it does not override your rights (e.g., fraud prevention, service improvement).

Vital interests: in exceptional cases to protect a person’s life or safety.

We use data exclusively for the following purposes:

Account creation, identity verification (KYC), and access management.

Operating Platform services: publishing listings, displaying items, and enabling communication between users.

Processing subscription and package payments and sending related notifications.

Communicating with you about updates, confirmations, and operational notices.

Technical support and issue resolution.

Fraud prevention and Platform security.

Improving user experience and generating aggregated analytics.

Direct marketing (only with explicit consent, with opt-out options).

Compliance with legal obligations and protection of rights.

6.1 Some data may be publicly visible, such as username, profile picture, city, reviews, and number of listings.

6.2 KYC data is never publicly displayed and is used only for verification and risk management.

6.3 Minimal necessary data is shared between lessor and lessee for communication purposes only.

6.4 Users must not misuse or share others’ data outside the Platform.

We do not sell your personal data. We may share it only with:

Authorized employees and representatives under confidentiality obligations.

Operational service providers (cloud hosting, SMS/email services, analytics, fraud prevention, support tools, mapping services).

Payment gateway providers for package transactions only.

Regulatory, judicial, or security authorities when legally required.

Business transactions (mergers, acquisitions, asset sales) under confidentiality protections.

Third-party processing is governed by their own privacy policies.

8.1 Your data may be processed or stored inside or outside the Sultanate of Oman.

8.2 We implement appropriate safeguards such as contractual clauses and compliance with Omani data protection law.

8.3 By using the Platform, you consent to the transfer of your data as necessary for service delivery.

9.1 We retain data only as long as necessary for the intended purposes or legal requirements.

Account data: retained while active and up to 12 months after closure.

Financial records: at least 10 years.

Complaint records: at least 5 years.

KYC data: as required by regulators.

Logs: typically 6–12 months.

Reviews: may be retained long-term.

9.3 After retention periods, data is securely deleted or anonymized.

10.1 We apply technical and organizational security measures including:

TLS/HTTPS encryption

Secure password storage

Access control (least privilege)

Security audits and penetration testing

Backups and disaster recovery

10.2 No internet transmission is 100% secure.

10.3 You are responsible for protecting your login credentials.

11.1 In case of a data breach, we will:

Contain and mitigate the breach

Investigate its scope

Notify regulators when required

Inform affected users when necessary

Document the incident

You have the right to:

Access your data

Correct inaccurate data

Delete data (where applicable)

Restrict processing

Object to processing

Data portability

Withdraw consent

File complaints with authorities

We respond within 30 days, subject to extensions for complex cases.

You may opt out via:

Email unsubscribe link

Replying “Unsubscribe” to SMS

App settings

Support contact

Operational messages will still be sent.

14.1 You may request account closure at any time.

14.2 Data will be deleted or anonymized within 90 days, except legally required data.

14.3 Pending disputes may delay closure.

We may use automated tools for fraud detection and recommendations.

We do not make fully automated decisions with legal effects unless permitted by law, and safeguards apply.

Do not share login credentials.

Use strong passwords and 2FA.

Log out from shared devices.

Review privacy settings regularly.

Use official communication channels only.

17.1 We use cookies and similar technologies.

17.2 Types include:

Essential cookies

Functional cookies

Analytics cookies

Security cookies

Marketing cookies (with consent)

17.3 You may control cookies via browser or platform settings.

We are not responsible for third-party privacy practices.

19.1 We may update this policy.

19.2 Users will be notified of major changes at least 15 days in advance when possible.

19.3 Continued use constitutes acceptance.

19.4 Last update date will always be stated.

20.1 You confirm that your data is accurate.

20.2 You are responsible for lawful provision of third-party data.

20.3 We are not liable for damages due to incorrect data or misuse.

20.4 Continued use indicates acceptance of this policy.

21.1 This policy is governed by the laws of the Sultanate of Oman.

21.2 Disputes are first resolved amicably, otherwise through Omani courts.

Sabaq Digital Solutions and Business Company

Email: Info@Mustajer.net

Phone: 77005077

In-app support: “Support” section

We respond as soon as possible within legal timeframes.

Last Update Date: 01/06/2026