1. General Provisions and Definitions

Tamluk is a fintech startup based in Oman, preparing to launch a crowdfunding platform. Tamluk's privacy policy is designed in accordance with international principles and requirements for personal data protection, ensuring the privacy of individuals and safeguarding their data during processing.

The following definitions apply as per data privacy regulations:

Personal Data

Any information relating to an identified or identifiable person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or other information related to the individual's physical, physiological, genetic, mental, economic, cultural, or social identity.

Activity and Usage Data

Personal data generated, collected, or processed while using Tamluk's services.

Processing

Any operation performed on personal data, whether by automated or non-automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, use, disclosure by transmission, dissemination, or destruction.

Data Controller

The entity that determines the purposes and means of processing personal data.

Data Processor

The entity that processes personal data on behalf of the data controller.

Data Subject

The individual to whom personal data relates.

Tamluk recognizes the importance of privacy and is committed to taking necessary technical and organizational measures to protect individuals' personal data from any unlawful processing in accordance with applicable laws.

2. Processing of Personal Data

As both the data controller and processor, Tamluk ensures that personal data is processed securely and provides protection against unauthorized processing, accidental loss, destruction, or damage. Appropriate technical and organizational measures are applied according to the following principles:

Lawfulness, Fairness, and Transparency

Data is processed in a lawful, fair, and transparent manner concerning the data subject.

Purpose Limitation

Data is collected for specified, explicit, and legitimate purposes and is not processed further in ways incompatible with those purposes.

Data Minimization

Data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

Accuracy

Data is kept accurate and updated where necessary.

Storage Limitation

Data is retained for no longer than is necessary for the purposes defined.

Integrity and Confidentiality

Data is processed in ways that ensure appropriate security, including protection against unauthorized access, unlawful processing, or data loss.

Personal data is processed only if one or more of the following conditions apply:

Contractual Obligation

Processing is necessary for the performance of a contract between Tamluk and the data subject, or to take steps at the data subject's request before entering into a contract.

Legal Obligation

Processing is necessary for compliance with a legal obligation to which Tamluk is subject.

Consent

Tamluk has obtained consent from the data subject for specified purposes, and this consent may be withdrawn at any time.

3. Purposes of Processing Personal Data

Tamluk provides digital services through its crowdfunding platform aimed at SMEs and procurement financing. Personal data is collected, processed, and stored for the following purposes:

• To ensure the proper functioning and delivery of Tamluk's services.
• To comply with this privacy policy or any other agreements with Tamluk's clients.
• To ensure Tamluk's systems can be audited and to prevent fraud.
• To calculate fees and provide services to Tamluk's clients.

The data collected by Tamluk includes, but is not limited to:

Personal Information

Such as name, email address, ID number, occupation, nationality.

Employment and Financial Data

Such as employer details, source of income, bank account information.

Activity and Usage Data

Such as interactions with Tamluk services, technical details.

Data is also used to facilitate communication in case of security concerns, technical issues, or for legitimate business purposes.

Tamluk may receive additional personal data from third parties (such as credit bureaus, ministries) for credit checks, financial evaluations, or to comply with legal requirements.

4. Data Subject Rights

Users whose personal data is processed (data subjects) have the following rights concerning their data:

Right to Information

The data subject has the right to be informed about the processing of their data.

Right to Access Data

The data subject has the right to request access to their personal data and obtain details of the processing.

Right to Rectification

The data subject has the right to request the correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten")

The data subject has the right to request the deletion of their data if certain conditions are met.

Right to Restrict Processing

The data subject has the right to request the restriction of data processing under specific circumstances.

Right to Data Portability

The data subject has the right to receive their data in a structured, commonly used, and machine-readable format and to transfer it to another controller.

Right to Object to Processing

The data subject has the right to object to data processing, and Tamluk must cease processing unless there are legitimate grounds that override the objection.

Right to Seek Judicial or Administrative Remedies

The data subject has the right to seek recourse with relevant authorities or courts if their rights are violated.

5. Disclosure of Personal Data

Tamluk may disclose personal data to the following categories:

Data Subjects

Individuals using Tamluk's services.

Legal Authorities

Entities that are entitled to access data under the law.

Contractual Parties

Entities involved in contractual obligations with Tamluk.

6. Handling Complaints

Tamluk is committed to handling complaints promptly, effectively, fairly, and confidentially. Users are encouraged to contact Tamluk with any inquiries or complaints, and Tamluk will provide the necessary assistance.