How GBN handlesyour personal data.

1. Who is responsible for your data

This Privacy Policy is issued by GBN (Gulf Business Names), a business accelerator and part of Bayan Group, whose office is at Office 301, Globex Business Center, Panorama Mall, Ghoubra, Muscat, Sultanate of Oman. Commercial registration details are available on request.

GBN is the controller of the personal data described in this policy: it decides why and how that data is processed and is responsible for protecting it. In this policy, “you” means anyone who visits gbnplanet.com, completes its contact form or contacts GBN by WhatsApp, telephone or email, and any client or client representative GBN works with.

Questions and requests for GBN's data protection officer go to info@gbnplanet.com, with “Data protection” in the subject line, or by post to the office address above.

2. What this policy covers

This policy covers the personal data GBN collects through gbnplanet.com, through the WhatsApp, telephone and email channels shown on it, and in the course of diagnostic sessions and client engagements. It does not cover websites or services operated by others, including WhatsApp, Google Maps and the Partner Network professionals you contract with directly; each of them handles personal data under its own policy.

Where your engagement terms with GBN include specific data protection terms, those terms apply alongside this policy.

3. The laws that apply

GBN is established in the Sultanate of Oman and processes personal data in accordance with the Personal Data Protection Law issued by Royal Decree 6/2022, as amended by Royal Decree 68/2026 (in force since 7 September 2026), and its Executive Regulations issued by Ministerial Decision 34/2024, as amended. The competent authority is the Ministry of Transport, Communications and Information Technology.

GBN also observes the Electronic Transactions Law issued by Royal Decree 69/2008, the Consumer Protection Law issued by Royal Decree 66/2014, and the record-keeping duties of Omani commercial and tax law.

Because gbnplanet.com is open to visitors from across the GCC, Egypt, Europe, the United Kingdom and the United States, other data protection laws may also apply to some processing. Section 16 explains how GBN handles that.

4. The personal data GBN collects

Through the contact form: your full name, email address, phone number with its country dial code, nationality, country of residence, preferred language for your session (and the language you name if you choose “Other”), the package you are interested in, your message, and your confirmation of the consent checkbox. The email that carries your enquiry to GBN also records the date and time it was sent and the IP address it was sent from.

To protect the form from automated abuse: a hidden field that people do not see and automated programs tend to fill in, the time the form was opened, and a short-lived record, linked to a coded form of your IP address, that counts submissions made in the last 10 minutes. These items are used only to block spam and repeated submissions.

Through the Launch Builder: the choices you make are kept only in your own browser's session storage (sessionStorage), so that the contact form can be prefilled for you. They are not sent to GBN unless you submit the form, and they are cleared when you close the tab or once the form is sent.

Through WhatsApp, telephone and email: your phone number or email address, the name and any profile details your account shows, and the content of what you send.

During a diagnostic session or an engagement: the business information you choose to share, such as the intended activity, legal form, ownership and candidate names, the details of the people you name as contacts or as Riyada Knowledge Bank users, and any documents you provide for a service you have requested.

When you visit the website: the hosting provider's servers automatically log technical data such as your IP address, browser and device type (user agent), the page requested and the date and time of the request. The host keeps these logs to operate and secure the service.

GBN does not ask for payment card details, health information or other sensitive personal data, and asks you not to send them through the website. If a service later requires an identity document, GBN will explain why it is needed and how it will be protected.

5. How GBN uses your data

GBN uses personal data only for these purposes: to answer your enquiry and continue the conversation you started; to arrange and hold a diagnostic session in your preferred language, including an interpreter if you ask for one; to prepare your Launch Brief and quotation; to deliver, invoice and support the services you engage GBN for; to introduce you to a Partner Network professional when you ask, or when a service you have requested requires it; to keep the records Omani law requires; to protect the website, the form and GBN's systems; and to establish, exercise or defend legal claims.

GBN does not use your data to build advertising profiles, does not sell or rent it, and does not use it for any purpose incompatible with the one for which it was collected.

6. The legal grounds GBN relies on

Under Oman's Personal Data Protection Law, GBN relies on your explicit consent, which you give by ticking the consent box when you submit the contact form. You may withdraw it at any time, as section 14 explains.

When you contact GBN directly by WhatsApp, telephone or email, you provide your details so that GBN can reply. GBN uses them for that purpose only, and asks for your explicit consent before processing them for anything further.

Without consent, GBN processes personal data only where the law allows it: where processing is necessary to perform a contract to which you are a party, such as your engagement with GBN; where it is required to meet a legal obligation, such as commercial and tax record-keeping; or where it is necessary to protect someone's vital interests.

Where the EU or UK General Data Protection Regulation applies, the corresponding grounds are consent (Article 6(1)(a)), steps taken at your request before a contract and the performance of a contract (Article 6(1)(b)), legal obligation (Article 6(1)(c)), and GBN's legitimate interest in keeping the website and form secure and free of spam (Article 6(1)(f)).

7. Cookies, browser storage and embedded content

gbnplanet.com uses no advertising or analytics cookies, no tracking pixels and no cross-site tracking. Its fonts are hosted on GBN's own website, so loading a page does not send your data to a font provider.

The only information the website keeps in your browser is the Launch Builder's session storage described in section 4. It is strictly necessary to carry your choices to the contact form, and it disappears when the tab closes.

The map on the contact page does not load until you click to load it. Once you do, Google receives technical data such as your IP address and applies its own terms and privacy policy. The link that opens the location in Google Maps works the same way.

If GBN ever adds analytics or any other non-essential technology, it will update this policy first and ask for your consent before that technology runs.

8. WhatsApp conversations

The WhatsApp buttons open a conversation in WhatsApp, a service operated by Meta, with GBN's Oman line (+968 9141 2315) or its Egypt line (+20 127 043 2222). WhatsApp processes your messages and account data under its own terms and privacy policy, which GBN does not control. GBN uses what you send only to reply to you and to continue your enquiry, and does not add you to broadcast lists without your separate consent.

9. Who receives your data

GBN shares personal data only where necessary, and only with: the providers that host and operate the website, form and email systems for GBN, currently including Hostinger; the Bayan Group companies that develop, operate and support GBN's systems; the team that supports GBN's Egypt WhatsApp line; a Partner Network professional, such as a lawyer, sanad office or interpreter, when you ask for an introduction or when a service you have requested needs one; GBN's professional advisers, such as auditors and lawyers, who are bound by confidentiality; and public authorities or courts, where the law requires disclosure.

Every recipient that processes data on GBN's behalf must use it only on GBN's instructions, keep it confidential and protect it. A Partner Network professional you contract with directly becomes responsible for your data under its own obligations.

GBN does not sell personal data and does not share it for advertising.

10. Transfers outside Oman

Some personal data leaves the Sultanate of Oman in the normal course of GBN's work: the website, form and email systems are hosted by Hostinger on servers that may be located outside Oman; messages to the Egypt WhatsApp line are handled from Egypt; and WhatsApp and Google Maps run on global infrastructure.

Oman's Executive Regulations generally require your express consent before personal data is transferred outside the Sultanate. By ticking the consent box on the contact form, or by choosing to message the Egypt line, you agree to the transfers described here. Before relying on a provider abroad, GBN assesses whether the protection it offers is no lower than Omani law requires, and keeps that assessment available to the Ministry on request.

Where the GDPR or UK GDPR applies, please note that Oman has no adequacy decision from the European Commission or the United Kingdom. Transfers to GBN take place because you send your data to GBN directly in order to receive its services, on the basis that they are necessary to answer you and to perform the contract you request, or on your explicit consent.

11. How long GBN keeps data

Enquiries that do not lead to an engagement, including form submissions and WhatsApp and email conversations, are kept for 24 months after your last contact with GBN, then deleted or anonymized.

Client records, including Launch Briefs, invoices, correspondence and delivery records, are kept for the duration of the engagement and afterwards for the period that Omani commercial and tax law requires.

Form security records, such as the anti-spam data described in section 4, are kept for no more than 90 days, and the rate-limit record counts only submissions made in the last 10 minutes. Server logs are kept by the hosting provider for security purposes under its own retention schedule.

Data is kept longer only where a dispute is under way or where a law, judgment, court order or decision of a competent authority requires it, and is erased once that reason ends.

12. How GBN protects data

GBN protects personal data with technical and organizational measures suited to its nature, including encrypted (HTTPS) connections to the website, spam and abuse controls on the form, access restricted to the people who need it, and confidentiality obligations for everyone who handles it. Credentials handed over to clients are delivered in a documented credential vault.

No system can be made completely secure. If you need to send GBN something particularly sensitive, ask first for the safest way to share it.

13. Data breaches

If a breach of personal data could harm your rights, GBN notifies the Ministry of Transport, Communications and Information Technology within 72 hours of becoming aware of it, as the Executive Regulations require. Where the breach is likely to cause you serious harm, GBN also notifies you, explains what happened and what it has done, and tells you what you can do to protect yourself. Other laws that apply to your data may set their own notification duties, and GBN follows them.

GBN keeps a record of every breach, its causes and consequences, and the measures taken in response.

14. Your rights

Oman's Personal Data Protection Law gives you the right to: withdraw your consent at any time, without affecting processing that took place before; ask for your data to be corrected, updated or blocked; obtain a copy of the personal data GBN processes about you; have your data transferred to another controller; ask for your data to be erased once it is no longer needed for the purpose for which it was collected; be notified of a breach that affects your data and of the measures taken; and object to a decision based on automated processing and have it reviewed by a person.

Where another law applies to your data, you also have the rights it grants, which may include the rights to object to processing, to restrict it and to be told how your data is used. Section 16 summarizes them. GBN honors each of these rights wherever it can lawfully do so, whichever country you write from.

Some rights have legal limits. For example, GBN must keep invoices and other records for the period the law requires even if you ask for them to be erased, and will tell you when a limit of this kind applies.

15. How to exercise your rights or complain

Send your request to info@gbnplanet.com with “Data protection” in the subject line, or in writing to the office address. To protect you, GBN may ask you to confirm your identity, usually by writing from the email address or phone number you used before. There is no charge for these requests.

GBN replies within 45 days of receiving your written request, the period set by Oman's Executive Regulations, or within any shorter period set by another law that applies, such as one month under the GDPR.

If you are not satisfied with the reply, you may complain to the Ministry of Transport, Communications and Information Technology in the Sultanate of Oman, or to the data protection authority in your own country, as listed in section 16. GBN welcomes the chance to resolve your concern first.

16. Visitors from outside Oman

European Union and United Kingdom: the GDPR and the UK GDPR can apply to a business outside Europe that offers its services to people in the EU or the UK. Where they apply, you have the rights in section 14, together with the rights to restrict processing and to object to processing based on legitimate interests, and you may complain to the supervisory authority where you live or work; in the UK, that is the Information Commissioner's Office (ICO).

Egypt: Egypt's Personal Data Protection Law (Law 151 of 2020) and its Executive Regulations give you the rights to know about and access your data, withdraw your consent, have your data corrected or erased, limit its processing, object to processing and be notified of a breach. Complaints are made to the Personal Data Protection Center.

United Arab Emirates: Federal Decree-Law 45 of 2021 on the Protection of Personal Data applies to the processing of data of people in the UAE and grants rights of access, portability, correction, erasure, restriction and objection, including objection to automated processing. Its regulator is the UAE Data Office.

Saudi Arabia: the Personal Data Protection Law issued by Royal Decree M/19 of 1443 AH, as amended, grants the rights to be informed, to access your data, to request its correction and to request its destruction once it is no longer needed. Its regulator is the Saudi Data and Artificial Intelligence Authority (SDAIA).

United States: GBN does not sell personal information, does not share it for cross-context behavioral advertising and does not use sensitive personal information to infer characteristics about you. State privacy laws, such as the California Consumer Privacy Act as amended by the California Privacy Rights Act, apply only to businesses that meet their thresholds. Whether or not they apply, visitors from the US may use the rights in section 14, and GBN will not treat anyone differently for doing so.

Other countries: if you live in another country with its own data protection law, GBN applies the rights that law gives you to the extent it applies to GBN's processing.

17. Marketing messages

Agreeing to be contacted about your enquiry is not agreeing to marketing. Omani law requires explicit consent before commercial advertising or marketing material is sent, so GBN sends news, offers or Riyada Knowledge Bank updates only if you have separately and explicitly agreed to receive them. Every such message explains how to stop them, and you can opt out at any time by replying or by writing to info@gbnplanet.com.

18. Automated decisions

GBN does not make decisions about you by automated means alone and does not profile visitors. The package the Launch Builder suggests is calculated in your browser from your own choices; it is a guide only, carries no legal or similar effect, and every engagement is agreed with a person at GBN. If GBN ever introduces automated decisions that affect you, it will tell you first, and you may object and have the decision reviewed by a person.

19. Children

The website and GBN's services are intended for adults acting in a business capacity and are not directed at anyone under 18. GBN does not knowingly collect personal data from minors. If you believe a minor has sent GBN personal data, contact info@gbnplanet.com and it will be deleted. Where a parent or guardian engages GBN on a minor's behalf, GBN processes the minor's data only with the guardian's prior written consent.

20. Changes to this policy

GBN reviews this policy whenever its services, its systems or the law change. The current version is always published on this page with the date of its last update. If a change materially affects how your data is used, GBN will announce it on the website before it takes effect and, where the law requires, ask for your consent again.

21. Contact

GBN (Gulf Business Names), Office 301, Globex Business Center, Panorama Mall, Ghoubra, Muscat, Sultanate of Oman. Email: info@gbnplanet.com. Telephone and WhatsApp (Oman): +968 9141 2315. WhatsApp (Egypt): +20 127 043 2222. Hours: Sunday to Thursday, 09:00–17:00, Gulf Standard Time (UTC+4).

Last updated: 21 October 2026