Privacy Policy

Global Business Drilling LLC ("GBD", "we", "our", or "us") is a limited liability company registered and operating in the Sultanate of Oman. We are the Data Controller in respect of personal data collected through this website (gbdoman.llc) and through our business enquiry and service operations.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we retain it, and what rights you have under the Sultanate of Oman Personal Data Protection Law (PDPL), Royal Decree No. 6/2022 and its implementing regulations.

This Policy applies to all visitors, prospective clients, existing clients, suppliers, contractors, job applicants, and other individuals ("Data Subjects") whose personal data we process in connection with our website and business activities.

By accessing our website or submitting information to us, you acknowledge that you have read and understood this Privacy Policy.

The Data Controller responsible for your personal data is:

For all privacy-related enquiries, data subject access requests, or complaints, please contact our designated Privacy Officer at the email address above.

We collect personal data in the following categories, limited to what is necessary for the stated purpose:

3.1 — Data You Provide Directly

• Contact Form Submissions: Full name, company name, email address, telephone number, and the content of your enquiry or project description.
• Business Communications: Email correspondence, meeting notes, and contractual documentation shared during pre-contractual and contractual dealings.
• Supplier & Vendor Registration: Company details, authorised representative identity, tax identification numbers, banking information, and compliance certifications where required.
• Employment Applications: Curriculum vitae, academic and professional qualifications, work history, reference contact details, and identity documents submitted when applying for positions with GBD.

3.2 — Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, referring URL, and pages visited on our website.
• Usage Data: Time and date of visits, duration of page views, clickstream data, and aggregate behavioural analytics.
• Cookies & Similar Technologies: See Section 9 (Cookie Policy) for full details.

3.3 — Sensitive Personal Data

We do not intentionally collect sensitive personal data (including health data, biometric data, or racial/ethnic origin) through this website. If such data is required in a specific operational or employment context, it will only be processed with your explicit written consent or as required by law, and will be subject to heightened protection measures.

Under the Oman PDPL, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Consent (Article 12 PDPL): Where you have voluntarily submitted information via our contact form or newsletter subscription, and where non-essential cookies require your agreement.
• Contractual Necessity (Article 12 PDPL): Where processing is necessary to enter into or perform a contract with you, including pre-contractual steps taken at your request (e.g., evaluating a service proposal or tender response).
• Legal Obligation (Article 12 PDPL): Where we are required to process your data to comply with Omani law, including tax, anti-money laundering, HSE reporting, or regulatory requirements.
• Legitimate Interests (Article 12 PDPL): Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms — including security monitoring, fraud prevention, and improving our website.

We use your personal data strictly for the following purposes:

• Responding to Enquiries: To process and respond to service enquiries, requests for proposals, or project discussions submitted through our website or via direct communication.
• Service Delivery & Contract Performance: To manage ongoing commercial relationships, issue quotations, coordinate operations, and fulfil contractual obligations.
• Vendor & Supplier Management: To onboard, evaluate, and manage our supply chain, including compliance and due diligence checks.
• Recruitment: To evaluate job applications, arrange interviews, and maintain talent pools for future openings (only with your consent).
• Website Operation & Security: To maintain the functionality and security of our website, detect and prevent fraudulent or unauthorised activity, and perform analytics to improve user experience.
• Legal & Regulatory Compliance: To meet our obligations under Omani law, including tax filings, HSE reporting, and responses to lawful authority requests.
• Business Communications: To send relevant service updates, safety advisories, or company announcements where you have opted in or have an existing relationship with us.

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

We do not sell, rent, or trade your personal data. We may disclose personal data only in the following limited circumstances:

• Service Providers: Third-party vendors who provide IT infrastructure, website hosting, email services, analytics, or CRM systems on our behalf, bound by data processing agreements consistent with PDPL requirements.
• Professional Advisors: Legal, financial, insurance, and audit professionals engaged in the ordinary course of business, who are bound by professional confidentiality obligations.
• Regulatory & Government Authorities: Where required by applicable Omani law or by lawful order of a competent authority, court, or government body (e.g., Ministry of Energy and Minerals, Royal Oman Police, Oman Tax Authority).
• Business Transfers: In connection with a merger, acquisition, joint venture, restructuring, or sale of assets involving GBD, subject to the receiving party maintaining equivalent data protection standards.
• Group Entities: Where applicable, to affiliated entities within the GBD group, strictly for the purposes described in this Policy.

Any international transfer of personal data outside Oman will only occur where adequate safeguards are in place as required by the Oman PDPL and its implementing regulations.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Enquiry / Contact Form Data: Retained for up to 2 years from the date of initial contact, unless a commercial relationship develops, in which case the contractual retention period applies.
• Contractual & Commercial Records: Retained for a minimum of 10 years from contract termination, in accordance with Omani commercial and tax law.
• HSE & Operational Records: Retained per the requirements of applicable Omani HSE regulations and operator contracts, typically 10–15 years.
• Recruitment Data: Retained for 12 months after a recruitment process concludes for unsuccessful applicants, unless consent is given for longer retention in a talent pool.
• Website Technical Logs: Retained for up to 12 months for security and troubleshooting purposes.
• Cookie Data: As specified in Section 9 below.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so it can no longer be associated with an identifiable individual.

Subject to applicable law and certain limited exemptions, you have the following rights regarding your personal data:

• Right of Access: To obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to Rectification: To have inaccurate or incomplete personal data corrected without undue delay.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to overriding legal retention obligations.
• Right to Restriction: To request that we limit the processing of your data in certain circumstances, such as while accuracy is contested.
• Right to Object: To object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the competent supervisory authority in Oman as designated under the PDPL.

To exercise any of these rights, submit a written request to privacy@gbdoman.llc. We will respond within 30 calendar days of receipt. We may request proof of identity before processing your request. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

Our website uses cookies and similar tracking technologies to operate correctly, analyse usage, and improve your experience.

9.1 — What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to website operators.

9.2 — Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function. These cannot be disabled. They do not store any personally identifiable information beyond session identifiers.
• Performance & Analytics Cookies: Used to understand how visitors interact with our website (e.g., pages visited, traffic sources). Data is aggregated and anonymised. These require your consent.
• Functional Cookies: Enable enhanced functionality and personalisation such as remembering your preferences. These require your consent.

We do not use advertising or tracking cookies for third-party remarketing purposes.

9.3 — Managing Cookies

You can control and/or delete cookies through your browser settings. For instructions, visit aboutcookies.org. Disabling strictly necessary cookies may impair website functionality.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include:

• Encrypted data transmission using TLS (Transport Layer Security) for all data exchanged between your browser and our website.
• Access control systems ensuring that personal data is accessible only to authorised personnel with a business need to know.
• Regular internal reviews of data handling practices, access logs, and security configurations.
• Physical and logical security controls for IT infrastructure holding personal data.
• Contractual obligations imposed on all third-party processors to maintain appropriate security standards.

Notwithstanding these measures, no method of Internet transmission or electronic storage is entirely secure. If you become aware of any potential vulnerability or have a security concern, please contact us immediately at privacy@gbdoman.llc.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the competent supervisory authority without undue delay, as required by the Oman PDPL.

Our website may contain links to third-party websites or services. This Privacy Policy applies solely to gbdoman.llc and does not cover the privacy practices of any third-party site. We encourage you to review the privacy policies of any external websites you visit. We are not responsible for the content or privacy practices of such websites.

Our website and services are directed exclusively at businesses and professionals in the energy sector. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected without appropriate consent, we will take immediate steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Effective Date" at the top of this page indicates when the current version was last revised.

For material changes, we will take reasonable steps to notify you, which may include posting a prominent notice on our website prior to the change taking effect. Your continued use of our website after the effective date of any revision constitutes your acceptance of the updated Policy.

This Privacy Policy is governed by and construed in accordance with the laws of the Sultanate of Oman, including the Personal Data Protection Law (Royal Decree No. 6/2022) and all implementing regulations. Any dispute arising from or relating to this Policy shall be subject to the exclusive jurisdiction of the competent courts of Muscat, Sultanate of Oman.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Privacy Officer:

We are committed to resolving privacy concerns promptly and in good faith.