Skip to content
وسم
Book
Draft — this policy is waiting for the studio's approval and may change.

Privacy policy

Last updated [date]

1. Who we are

[Legal name of the business], trading as Wasem, [commercial registration number], [address], Muscat, Sultanate of Oman ("we"). We run the studios and this website, and we are responsible for the personal data described here under the Personal Data Protection Law (Royal Decree 6/2022) and its executive regulation.

2. What we collect

  • When you book: your name, mobile number and email; the studio, date, time and extras you choose; and anything you write in "What will you film?".
  • When you pay: the amount, whether the payment went through, and the payment reference from Thawani. Your card details go to Thawani; we never see or store your card number.
  • Door access: the door code issued for your booking and the time window it works in.
  • Messages: a record of the WhatsApp messages and emails we send you (door code, receipt, reminders) and whether they were delivered.
  • If you create an account: how you sign in (your Google account's name, email and Google ID, or the number or email we sent a code to), whether your number is confirmed, and the devices you are signed in on.
  • Technical data: your IP address and browser type, kept in security logs to stop abuse (for example, too many code requests).

3. Why we use it

  • To take and manage your booking, send your door code and receipt, and help you if something goes wrong. We need this to provide the service you asked for.
  • To keep financial and tax records, because the law requires it.
  • To keep the website and the studios secure and to prevent fraud.
  • To run your account, if you choose to have one.

We do not sell your data. We do not send you advertising unless you have agreed to it, and you can withdraw that agreement at any time.

4. Who we share it with

Only the companies that help us provide the service, and only what each one needs:

  • Thawani (Oman): to take your payment.
  • Meta (WhatsApp): to send you WhatsApp messages and codes.
  • [email provider, e.g. Google Workspace]: to send you emails.
  • Google: only if you choose "Continue with Google". Google tells us your name and email; we tell Google nothing about your bookings.
  • Tuya (smart-lock provider): receives the door code and its time window, not your name, number or email.
  • [Hosting provider]: stores our database and website.

We may also share data when the law requires it.

5. Where your data is stored

Our database is hosted [in / outside] Oman, at [provider, country]. Some of the companies above process data outside Oman (for example WhatsApp, [email provider] and Google). We use them only with safeguards that the law requires.

6. How long we keep it

  • Bookings and payments: [10] years, because tax and financial law requires it. If you delete your account, we remove your name, number and email from these records and keep the rest.
  • Your account: until you delete it.
  • Sign-in sessions: 30 days, or until you sign out.
  • Verification codes: a few minutes; we never store the code itself.
  • Security logs: [90] days.
  • Message delivery records: [period].

7. Your rights

You have the right to:

  • access your data and get a copy: use "Download my data" in your account, or ask us;
  • correct your data: edit your details in your account, or ask us;
  • delete your data: use "Delete my account", or ask us. We keep only what the law requires (see section 6), without your name, number or email;
  • withdraw consent to anything you agreed to;
  • object to marketing;
  • be told if a breach puts your data at risk;
  • complain to the Ministry of Transport, Communications and Information Technology.

We reply to requests within [period]. We may ask you to confirm it is you before we act on one.

8. Cookies

We use only the cookies the website needs to work: your language, your booking while you pay, and (if you sign in) your account session. We do not use advertising or tracking cookies. [Confirm before publishing.]

9. Security

Codes and links are protected, payment is handled by Thawani, and access to our systems is limited to the people who need it. No system is perfectly secure. If something goes wrong that affects you, we will tell you.

10. Children

Bookings are made by adults. If you are under 18, ask a parent or guardian to book for you. [Confirm.]

11. Changes

If we change this policy, we will update the date at the top. If a change matters, we will tell you before it applies.

12. Contact us

[Name or role], [email], WhatsApp [number], [address].