What this site collects, why, how long it is kept, and how to make us delete it. Written to be read rather than to be survived.
Last updated 16 September 2026
Baseerah builds automation, ERP and CRM systems for businesses in Oman. This notice covers this website and the two forms on it — the contact form and the job application form. It does not cover systems we build and hand over to clients: in those, the client is the controller of the data and their own notice applies.
We are the controller of the personal data described here. Oman's Personal Data Protection Law (Royal Decree 6/2022) and its Executive Regulations (Ministerial Decision 34/2024) are the framework we work to, and the Ministry of Transport, Communications and Information Technology is the regulator.
The short version
- This site sets no cookies unless you say yes. Two tools from Vercel, the company that hosts it, count page views and page speed without identifying you. A third, Microsoft Clarity, records how pages are used and sets cookies to do it — it runs only if you accept cookies on the banner, and you can turn them off again on this page.
- We only hold personal data you deliberately send us: a contact message, or a job application with a CV attached.
- We do not sell data, we do not build a marketing list, and we do not send anything you did not ask for.
- You can ask us for a copy of what we hold, or to delete it, and we will answer within 45 days.
What we collect, and why
Four things, and no more than four. The first two are what you type into a form; the third is the unavoidable technical record any website leaves behind; the fourth is how the site is used, from the three measurement tools described in the next section.
Where it comes from What it is Why we have it Contact form Your name, email address, company if you give one, the topic you pick and the message you write To read your enquiry and reply to it. Consent, given when you submit the form. Application form Your name, email address, any links you add, what you write about your work, and the CV file you attach To assess your application and reply to it. Consent, given when you submit the form. Server logs IP address, browser user agent, the page requested and the time of the request To serve pages, keep the site available and investigate abuse. Necessary to operate the service. Usage measurement The page viewed and the site that linked to it, your country and city, browser, operating system and device type, connection speed and how quickly the page loaded; with Clarity, if you allowed it, also where you click, scroll and move the pointer, and a pseudonymous ID in a cookie that links your page views together To see which pages are read, how fast the site is, and where a page confuses people. Vercel's two: our legitimate interest in running a working website. Clarity: your consent, given by accepting cookies on the banner and withdrawable here. A CV is your document, so it contains whatever you chose to put in it. Please do not include data you would rather we did not hold — a photograph, a national ID number, marital status, health information or anything else in the sensitive categories under the Personal Data Protection Law. We do not need any of it to read your application, and we do not ask for it anywhere on this site.
How long we keep it
- Enquiries: 24 months after our last exchange with you, then deleted. If the enquiry becomes an engagement, the project record is governed by the contract instead.
- Applications: 12 months after the role is closed or filled, then deleted. If we would like to keep your CV on file beyond that, we ask you first — and no is a complete answer.
- Server logs: 90 days, then deleted.
If you ask us to delete something sooner, we do, unless a specific law requires us to keep it — which for an enquiry or an application it generally does not.
Who else can see it
Inside Baseerah, only the people who need to: whoever would actually work on your enquiry, or the people hiring for the role you applied to. Outside Baseerah, the service providers that operate our infrastructure — the company that hosts this site, which also holds the aggregated page analytics described above, Microsoft, which holds the Clarity session recordings, and the provider that carries our email — can hold the data in the course of running those services. They act on our instructions under contract, and they are not permitted to use it for anything else.
We do not sell personal data, we do not share it with advertisers or data brokers, and we do not pass your enquiry to a partner or reseller. If a legal authority in Oman lawfully requires disclosure, we comply, and we tell you unless we are prohibited from doing so.
Where your data is processed
We operate from Muscat, and we prefer infrastructure in the region. Some of the providers behind a modern website process data outside Oman, and where that is the case we rely on providers that offer protections equivalent to those required under the Personal Data Protection Law and contract with them accordingly. You can ask us where a specific piece of your data currently sits, and we will tell you.
Your rights, and how to use them
Under the Personal Data Protection Law you can ask us to do all of the following, and none of it costs anything.
- Withdraw the consent you gave, at any point, without giving a reason.
- Get a copy of the personal data we hold about you.
- Have it corrected or updated if it is wrong.
- Have it deleted, or its processing blocked.
- Have it transferred to you or to someone else in a usable format.
Write to support@baseerah.co and say what you want. We will confirm receipt, and answer within 45 days — the period set by the Executive Regulations. We may ask you to confirm your identity first, which for an emailed request usually means replying from the address you originally used; that check protects you, not us.
How we protect it
The site is served over HTTPS, so what you type into a form is encrypted in transit. Submissions reach a small number of named people and are not copied into shared drives, spreadsheets or chat threads. CVs are opened by the people hiring and nobody else. Accounts that can reach any of it use multi-factor authentication.
No control is absolute, and we would rather say that plainly than claim otherwise. What we can promise is that we hold as little as possible for as short a time as possible, which is the only security measure that never fails.
If something goes wrong
If personal data we hold is exposed in a way that could put your rights at risk, we notify the Ministry of Transport, Communications and Information Technology within 72 hours of becoming aware of it. Where the breach could cause you serious harm, we tell you too, in the same window, in plain language: what happened, what data was involved, what we have done and what you should do.
Children
This site is aimed at businesses and at people applying for jobs. It is not directed at children, and we do not knowingly collect data about anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this notice
When this notice changes, the date at the top of the page changes with it. We do not make changes retroactive: if we ever wanted to use data we already hold for something new, we would ask you first rather than quietly update this page.
Contact and complaints
Questions, requests and complaints all go to the same place: support@baseerah.co. A person reads it.
If you are not satisfied with how we handle something, you have the right to complain to the Ministry of Transport, Communications and Information Technology, which regulates personal data protection in the Sultanate of Oman. We would rather you told us first so we can fix it, but that route is yours either way.