Skip to main content
Privacy Notice (PDPL) — First Global Link

Privacy Notice

How First Global Link LLC collects, uses, and protects your personal data under the Oman Personal Data Protection Law (PDPL).

Effective Date: 1 September 2026

1 Introduction & Scope

First Global Link LLC ("FGL", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, process, store, and share your personal information when you use our website, submit an enquiry (RFQ), apply to become a partner, or interact with us commercially.

This notice complies with the Oman Personal Data Protection Law (PDPL), which has been in full enforcement since 5 February 2026, overseen by the Ministry of Transport, Communications and Information Technology. It applies to all visitors, customers, suppliers, and partners based in Oman or the GCC region.

2 Data Controller & Data Protection Contact

Data Controller: First Global Link LLC, registered in the Sultanate of Oman, with our principal place of business in Muscat.

Data protection contact: Questions about this notice and requests relating to your personal data are handled by our data protection contact. You can reach them at:

Email: info@fgloman.com
Postal Address: First Global Link LLC, Muscat, Sultanate of Oman (Attn: Data Protection).

Our DPO is the primary point of contact for all data subjects exercising their rights under the PDPL.

3 What Personal Data We Collect

We collect the following categories of personal data depending on your interaction with us:

  • Identification Data: Full name, company name, job title, and business contact details.
  • Contact Data: Email address, telephone number, and delivery or billing address.
  • Enquiry Data: Product categories, specifications, quantities, packaging preferences, and delivery requirements (submitted via RFQ or partnership forms).
  • Technical Data: IP address, browser type, device information, and cookies (see our Cookie Policy for details).
  • Consent Records: Your preferences for receiving commercial updates and marketing communications.

We do not collect sensitive personal data (such as health, biometric, or financial payment details) through this website. All financial and transactional information is handled offline through direct commercial agreements.

4 Purposes of Processing

We process your personal data for the following legitimate commercial purposes:

  • Responding to Enquiries: To process your RFQs, partnership applications, and general contact submissions.
  • Commercial Communications: To send you quotes, proposals, and follow-up communications regarding your specific requirements.
  • Contractual Performance: To fulfil our obligations under any commercial agreements or purchase orders.
  • Marketing (with consent): To share product updates, sector insights, and commercial opportunities if you have explicitly opted in.
  • Legal Compliance: To meet our regulatory and compliance obligations under Omani law, including tax, customs, and trade reporting.
  • Service Improvement: To analyse website usage and enquiry patterns to improve our offerings and user experience.

5 Legal Basis for Processing

Under the Oman PDPL, we rely on the following legal bases to process your data:

  • Your explicit consent (for marketing communications and cross‑border data transfers, where applicable).
  • Performance of a contract (to take steps at your request before entering into a commercial agreement or to fulfil an existing contract).
  • Compliance with a legal obligation (to which FGL is subject under Omani law).
  • Legitimate interests (to respond to commercial enquiries, manage our business operations, and maintain security).

We always balance our legitimate interests against your privacy rights and ensure that processing is necessary and proportionate.

6 Cross-Border Data Transfers

FGL operates internationally. To process your enquiries and manage our commercial relationships, your personal data may be transferred to, stored at, or processed in countries outside the Sultanate of Oman, including (but not limited to) countries where our hosting infrastructure, commercial system, email service providers, or supplier partners are located.

We ensure that any cross‑border transfer of your personal data is conducted in accordance with the Oman PDPL. Where we transfer data to jurisdictions that do not provide an adequate level of protection, we implement appropriate safeguards, such as standard contractual clauses (SCCs) or binding corporate rules, to ensure your data remains protected.

Your explicit consent is obtained at the point of data collection (via our RFQ, partner, and contact forms) for these cross‑border transfers. You have the right to withdraw this consent at any time.

7 Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

General retention periods:

  • Enquiry Data (RFQs, partnership applications): Retained for up to 3 years from the date of your last interaction, unless a commercial relationship is established (in which case, data is retained for the duration of the contract plus 5 years).
  • Marketing Data: Retained until you withdraw your consent or unsubscribe.
  • Technical Data (logs, IP addresses): Retained for up to 12 months for security and analytics purposes.

At the end of the retention period, your data will be securely deleted or anonymised in accordance with our data destruction policies.

8 Your Rights Under PDPL

Under the Oman Personal Data Protection Law, you have the following rights regarding your personal data. FGL is committed to responding to any request within the time limit set by the PDPL.

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of any inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): Request deletion of your data where there is no compelling legal reason for its continued processing.
  • Right to Withdraw Consent: Withdraw your consent for marketing or cross‑border transfers at any time.
  • Right to Data Portability: Request a copy of your data in a structured, commonly used format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Restrict Processing: Request that we temporarily restrict the processing of your data in certain circumstances.

To exercise any of these rights, please contact our DPO at info@fgloman.com. We will respond within 45 calendar days of verifying your identity.

9 Consent & Withdrawal

Where we rely on your consent for processing (e.g., for marketing communications and cross‑border transfers), we obtain it through an explicit, affirmative action — such as checking an unticked consent box on our enquiry forms. Pre‑ticked consent boxes are not used on any FGL website forms, in full compliance with the PDPL.

You may withdraw your consent at any time by:

  • Clicking the "unsubscribe" link in any marketing email.
  • Contacting our DPO directly at info@fgloman.com.
  • Updating your preferences through the contact form on our website.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

10 Security & Breach Notification

FGL maintains robust technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:

  • Encryption of data in transit (HTTPS) and at rest.
  • Role‑based access controls and strict least‑privilege principles for our internal teams.
  • Regular security audits, dependency updates, and vulnerability monitoring.
  • Clear audit logging of who accesses form‑submission data and when.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the Ministry of Transport, Communications and Information Technology (the regulator) within the time required by the PDPL and its implementing regulations.
  • Communicate the breach to you without undue delay if it poses a high risk to your privacy.

Our breach‑notification process is fully documented and tested, ensuring we meet the PDPL's strict timeframes.

11 Updates to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be posted on this page with an updated "Effective Date" at the top.

We encourage you to review this notice periodically. Your continued use of our website and services after any updates constitutes your acceptance of the revised terms.

12 Contact & Complaints

If you have any questions, concerns, or wish to exercise your rights under the PDPL, please contact our Data Protection Officer:

First Global Link LLC
Attn: Data Protection Officer
Muscat, Sultanate of Oman
Email: info@fgloman.com

If you are not satisfied with our response, you have the right to lodge a complaint with the competent Omani supervisory authority (Ministry of Transport, Communications and Information Technology) in accordance with the PDPL.