Privacy Notice

1. Data Controller Information

United Finance Company SAOG
P.O. Box 3652, PC 112
Ruwi, Muscat, Sultanate of Oman
Email: dpo@ufc.om
Toll-Free: 80008322

2. Contact of the Data Protection Officer (DPO)

Email: dpo@ufc.om
Phone: +968 24577314

The DPO is responsible for ensuring UFC's compliance with the PDPL and for addressing all inquiries related to the processing of personal data.

3. Consent to Data Processing

By using our website or submitting personal data to us (through inquiries, loan applications, or other means), you provide explicit consent for UFC to collect, store, and process your personal data for purposes including:

• Financial and insurance service provision
• Risk assessment and regulatory compliance
• Customer service and marketing (with separate opt-in)

You may withdraw your consent at any time by contacting the DPO at: dpo@ufc.om.

4. Personal Data We Collect

We may collect the following types of data:

• Name, contact information, civil ID/passport number
• Financial information (salary, account details)
• Employment history, income, and credit history
• IP address, browser/device information
• Website browsing behavior and preferences

This data is collected via online forms, website interactions, and communications with our staff.

5. Purposes of Processing

We process personal data to:

• Assess and provide financial services
• Conduct credit and regulatory checks (e.g., Mala'a, CBO)
• Prevent fraud and ensure identity verification
• Manage customer relationships and service delivery
• Send communications, updates, and marketing (with consent)
• Ensure compliance with applicable laws and regulations

6. Legal Basis for Processing

Our processing is based on:

• Your explicit consent
• Contractual necessity
• Compliance with legal obligations

We will not process your personal data beyond the purpose for which it was collected, unless legally required or permitted.

7. Your Rights Under PDPL

As a data subject, you have the following rights:

• Access: Request a copy of your personal data held by UFC
• Correction: Request correction of inaccurate or outdated data
• Erasure: Request deletion of your data under specific circumstances
• Deletion: Request erasure of your personal data, for example if consent is withdrawn or the data is no longer necessary.
• Withdrawal of Consent: Revoke previously given consent at any time.
• Restriction: Request temporary halt of processing under specific conditions
• Data Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing for direct marketing or other reasons.
• Complaint: Lodge a complaint with the DPO or the Ministry if your rights are violated

To exercise any of these rights, please contact: dpo@ufc.om

8. Retention of Personal Data

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or as required by law, including:

• 10 years post-relationship for regulatory, auditing, and record-keeping purposes

Data no longer required will be securely deleted or anonymized.

9. Sharing of Personal Data

UFC may share personal data with:

• Government/regulatory bodies (e.g., CBO, Mala'a, NCFI)
• External service providers (e.g., IT, cloud, analytics)
• Auditors, legal counsel, and advisors

All third parties are subject to strict data protection obligations and written agreements.

10. Cookies and Tracking Technologies

UFC's website uses cookies for essential functionality and performance monitoring.

• Cookies do not store personally identifiable information.
• You can disable cookies via browser settings; however, some features may not function properly.

To learn more:
www.allaboutcookies.org
To opt-out of Google Analytics: Google Analytics Opt-Out

11. Analytics Usage

We use Google Analytics to analyze user behavior and improve website performance. Data is anonymized or pseudonymized, and no personally identifiable information is shared.

You may withdraw consent for analytics tracking by contacting: dpo@ufc.om

12. Data Security

We maintain robust technical and organizational measures to safeguard your data, including:

• SSL-encrypted forms
• Firewalls and intrusion detection
• Access controls and audit trails
• Staff training and internal privacy governance

13. Breach Notification

In case of a personal data breach:

• UFC will notify the Ministry of Transport, Communications and Information Technology (MTCIT) within 72 hours.
• Affected data subjects will also be informed without undue delay if there is a risk to their rights or freedoms.

14. Policy Updates

We may update this Privacy Notice from time to time to reflect legal or operational changes. The latest version will always be available on our website.

15. Complaints and Contact Information

If you believe your personal data has been mishandled or your privacy rights violated, please contact:

Data Protection Officer
Email: dpo@ufc.om
Toll-Free: 80008322

Or write to:
United Finance Company SAOG
P.O. Box 3652, PC 112
Ruwi, Muscat
Sultanate of Oman

We will promptly acknowledge your complaint and inform you of the actions taken.