Study in OmanStudy in Oman

Legal

Privacy Policy

What we collect when you use Study in Oman, who we share it with, and how it is protected.

Last updated 27 July 2026

1. Who we are

Study in Oman is a platform for discovering accredited universities, colleges and training institutes in the Sultanate of Oman. It is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS, OMAN].

For any question about this policy or about your personal data, contact info@studyinoman.om.

2. The short version

  • You do not need an account to browse the site or to send an enquiry.
  • When you send an enquiry, the details you type are passed to the institution you chose so they can reply to you.
  • We record page views to tell institutions how many people viewed their profile. For those records we store a one-way hash of your IP address, never the address itself.
  • We do not sell your personal data.

3. What we collect

When you send an enquiry

You give us:

  • Your name, email address and country
  • Your phone number, if you choose to provide it — this field is optional
  • The message you write

Alongside it we record automatically:

  • The institution, and where relevant the programme, that the enquiry relates to
  • Your IP address and your browser's user-agent string, kept to detect and prevent abuse of the form
  • The page you enquired from. Only addresses on this website are stored — an address from any other site is discarded rather than recorded.

When you browse

We record a view against an institution or programme page so that institutions can see how much interest their listings attract. Each record holds the page viewed, the referring website address, and a salted one-way hash of your IP address. The raw IP address is not stored in these records and cannot be recovered from the hash; the hash exists only so that repeat views from the same visitor within an hour are counted once.

If you create an institution account

Institution accounts are for staff representing an institution. We collect the account email address, your name, and the profile content you enter — including contact details, campus images and programme information — which you publish deliberately. Passwords are handled by our authentication provider and are never visible to us in readable form.

Documents you upload to support a registration or an ownership claim are stored in private storage that is not publicly readable. They are accessible only to our administrators, and only through short-lived expiring links.

Cookies

If you sign in to the institution portal or the admin area, we set cookies that keep you signed in. These are essential — the service cannot work without them.

Where analytics are enabled, we load Google Tag Manager, which may set its own cookies. Browsing the public site does not require you to accept any non-essential cookie, and we do not use cookies to identify you personally.

Outstanding: if a cookie-consent banner is required for the audiences this site serves, this section must describe it and the analytics tag must be gated on that consent. No consent banner is implemented today.

4. Why we use it

  • To pass your enquiry to the institution you selected, and to email you a confirmation that we received it
  • To show an institution its own enquiries and its own audience statistics
  • To operate the site, including rate limits and spam prevention
  • To review institution registrations and ownership claims
  • To keep an internal record of administrative actions taken on listings

5. Who we share it with

The institution you enquire to

They receive your name, email address, phone number if you gave one, your country and your message — by email and in their portal inbox. They do not receive your IP address or your browser details; those are never shown to institutions.

What an institution then does with your details is governed by their own privacy practices, not ours. If you would rather not share a detail with them, do not enter it — only your name, email and country are required.

Service providers

We use third parties to run the service. They process data on our instructions:

  • Supabase — database, authentication and file storage
  • Resend — sending the emails described above
  • Vercel — website hosting
  • Google — Tag Manager and analytics, where enabled

Otherwise

We do not sell your personal data. We may disclose information where we are required to by law, or to protect the security of the service.

6. How long we keep it

Outstanding — retention periods must be set before launch. Enquiries, page-view records and institution accounts are currently retained indefinitely, because no deletion schedule has been decided. State a period for each of: enquiry records, page-view records, closed institution accounts, and uploaded verification documents.

7. Your choices and your rights

Write to info@studyinoman.om to ask for a copy of the personal data we hold about you, to have it corrected, or to ask us to delete it. Tell us the email address you used so we can find the record.

Bear in mind that once an enquiry has been passed to an institution, we cannot delete it from that institution's own systems — you would need to contact them directly.

Outstanding: the statutory rights that apply, the law they arise under, the response deadline we commit to, and the complaints route for users who are unhappy with our answer.

8. How we protect it

  • The site is served over an encrypted connection
  • Access is restricted so that one institution cannot read another's enquiries or listings
  • Uploaded verification documents sit in private storage and are surfaced only as short-lived expiring links
  • IP addresses in page-view records are stored only as a salted one-way hash

No service can promise perfect security, but we treat the enquiry record as information about a real person and limit who can see it accordingly.

9. Children

Outstanding: applicants to higher education may be under 18. A minimum age for using the enquiry form, and whether parental consent is required below it, is a decision that has not been made.

10. Changes to this policy

If we change how we handle personal data we will update this page and the date shown at the top of it.