Last updated 24 September 2026
This policy explains how Daymaniyat Norana Tours ("we", "us") collects, uses and protects your personal data when you visit our website, book a trip or contact us. We process personal data in line with the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022).
Who we are
Daymaniyat Norana Tours, Muscat, Sultanate of Oman. For any privacy question or request, contact us at mmtoman2@gmail.com or on +968 9451 0101.
What we collect
When you book a trip
- your name, email address, phone number and country
- the trip, date and departure time you choose
- the number of adults and children in your group
- any special requests you tell us about, such as dietary needs, a celebration or a medical condition relevant to your safety
- promo codes used and the amount paid
When you create an account
- your name, email address, phone number and a password (stored in encrypted form — we can't read it)
- your booking history
When you pay
Card payments are handled by our payment provider, Paymob. We receive a confirmation of the payment and its reference, but we never see or store your full card number or security code.
When you contact us
The messages you send us by WhatsApp, email or phone, and our replies.
When you use our website
Basic technical information, such as your IP address, browser type and the pages you visit, recorded in our server logs for security purposes.
How we use your data
We use your personal data to:
- take and manage your booking: confirm it, process payment, send reminders and contact you about changes, such as a weather cancellation
- keep you safe: brief the crew about special requests and relevant medical information, and give passenger lists to the authorities when required
- provide customer service: answer your questions and handle cancellations and refunds
- run your account, if you have one
- protect our website and customers against fraud and misuse
- meet our legal obligations, such as accounting and tax records
We only send you marketing messages if you've agreed to receive them, and you can opt out at any time.
We process your data because it's necessary to provide the booking you asked for, because we have a legal obligation to, or with your consent. Where we rely on consent, you can withdraw it at any time.
We use WhatsApp to send booking confirmations and reminders and to answer your questions, because it's how most of our guests prefer to be contacted. WhatsApp is provided by Meta, and messages sent through it are also subject to WhatsApp's privacy policy. If you'd rather we contact you by email only, just tell us.
Who we share your data with
We only share your data when necessary, with:
- Paymob, to process your card payment
- Meta (WhatsApp Business), to send you messages about your booking
- our email and hosting providers, who store and send data on our behalf
- the captain and crew of your trip
- government and maritime authorities, when the law requires it, such as passenger lists
We never sell your personal data.
Some of these providers may process data outside Oman. When that happens, we make sure appropriate protection is in place, as required by law.
How long we keep your data
- Booking and payment records: for as long as the law requires for accounting and tax purposes
- Account data: while your account is active; you can ask us to delete it at any time
- Messages: for as long as needed to deal with your enquiry or booking
- Server logs: for a short period, for security
Cookies
Our website uses only the cookies it needs to work: a session cookie that keeps you signed in and remembers your booking during checkout, and a security cookie that protects forms against misuse. We don't use advertising cookies.
Some pages show content from other services, such as an embedded Google Map on trip pages. These services may set their own cookies when you view that content.
How we protect your data
Our website uses an encrypted (HTTPS) connection. Access to booking data is limited to staff who need it, and passwords are stored in encrypted form. No system is completely secure, but we take reasonable steps to protect your data and will tell you if a breach affects you, as the law requires.
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct inaccurate data
- ask us to delete your data, where we don't need to keep it for legal reasons
- withdraw your consent to marketing or other consent-based processing
- object to how we use your data
To make a request, email mmtoman2@gmail.com. We may need to confirm your identity first. If you're not satisfied with our answer, you can complain to the Ministry of Transport, Communications and Information Technology, which oversees personal data protection in Oman.
If you have an account, you can update most of your details yourself under Profile & security.
Children
Children can join our trips with their parents or guardians, but bookings must be made by an adult. We only collect the number of children in a group, plus any details a parent chooses to share for safety reasons.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.