Privacy Policy

Privacy Notice

Last updated: 06 Jul 2026.

National Mineral Water Company (SAOG) is the data controller responsible for determining the purposes and means of processing personal data in accordance with Royal Decree 6/2022 - Personal Data Protection Law (PDPL) and its Executive Regulations. We are committed to protecting the privacy of our customers and employees.

By using our services, you acknowledge that you have read and understood this notice.

What This Notice Explains

• What personal data we collect.
• How and why we process it.
• Your rights under the law.
• How to contact us regarding your personal data.

Personal Data and Processing

Personal data is any data, regardless of source or form, that can identify you directly or indirectly, such as name, location data, or contact details.

Processing means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.

These meanings follow Article 1 of the Personal Data Protection Law (PDPL).

How We Collect Your Data

We collect personal data directly from you through applications, the mobile app, call centers, public records where permitted by law, approved payment gateways, and in-person service centers.

What We Collect

• Identity information, such as full name.
• Contact information, such as phone number, address, and email.
• Account details and service history.
• Payment data: We do not collect or store credit or debit card details. Payment information is processed directly by authorized payment service providers, such as ThawaniPay, in compliance with applicable security standards.

Why We Process Personal Data

• To supply water and other product delivery services.
• To manage customer enquiries, complaints, and service requests.
• To meet regulatory and legal requirements.
• To ensure security and maintenance of infrastructure.
• To send customer service-related push notifications.

How We Protect and Store Personal Data

We implement physical, technical, and administrative safeguards to protect personal data against loss, misuse, unauthorized access, or disclosure.

• Secure hosting in accredited data centers within Oman.
• Access controls and role-based permissions.
• Encryption of data at rest and in transit where appropriate.
• Regular security reviews and risk assessments.

Retention and Consent

We retain personal data only for as long as necessary for the purposes stated, unless a longer period is required by law. When no longer needed, we securely delete or anonymise the data.

Where processing is based on consent, we obtain it in clear, specific terms. You may withdraw consent at any time; however, this may affect our ability to provide certain services.

If you provide personal data of another person, you are responsible for ensuring that the person has authorized the disclosure and is informed of this notice.

Contact Us

For questions, concerns, or to exercise your data protection rights, please contact us via email at contact@tanufwater.com.