Privacy Policy

1. Who We Are

Al Sahl Al-Mumtani SPC ("Taim Academy", "we", "us", "our") is the data controller responsible for your personal data. We operate:

• taim.om — our main academy platform (course registration, training, consulting, data resources)
• beta.taim.om / ai.taim.om — Taim AI Lab, a bilingual AI training platform connecting students with AI models (Claude, and others) for educational use
• Assessment and survey tools (AI Readiness Assessment, Data Story Quiz, Taim Pulse, Team AI Quiz, AI Health Check)

Data Controller Contact:
Al Sahl Al-Mumtani SPC · Muscat, Sultanate of Oman
CR: 1251921 · Email: info@taim.om

2. What Personal Data We Collect

We only collect data that is necessary for the purpose stated at the point of collection:

We do not collect sensitive personal data (health, religion, political opinions, biometric data) unless you voluntarily disclose it in a free-text field, in which case it is treated with the same protections.

3. Legal Basis for Processing (RD 6/2022 Art. 7)

We rely on the following lawful bases:

• Contract performance — processing your registration, delivering training, issuing certificates, processing payments.
• Legitimate interests — improving our services, security monitoring, preventing fraud, sending relevant course updates to existing students.
• Consent — marketing emails, quiz/pulse lead follow-up sequences, newsletter subscription. You may withdraw consent at any time (see Section 7).
• Legal obligation — maintaining financial records as required under Omani commercial law.

4. How We Use Your Data

• Process and confirm course enrolments and payments
• Deliver training content and issue certificates of completion
• Grant access to Taim AI Lab (beta.taim.om / ai.taim.om) via secure single sign-on
• Send course reminders, schedule updates, and post-course resources
• Provide AI Readiness Assessments, Data Story Quiz results, and similar personalised reports
• Send follow-up email sequences where you have consented (quiz leads, pulse leads)
• Respond to your enquiries and support requests
• Generate anonymised analytics to improve our programmes
• Comply with legal and regulatory obligations

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Taim AI Lab — Additional Notice

When you use the Taim AI Lab (beta.taim.om / ai.taim.om):

• Your identity is verified via a secure server-to-server token from taim.om (your session credentials are never shared in plain text).
• Conversations and prompts you submit to AI models within the Lab are transmitted to and processed by the respective AI model provider (Anthropic, Google, xAI, DeepSeek, OpenAI, or others as added) under their own privacy policies and terms of service. This constitutes a cross-border data transfer to jurisdictions outside Oman. We recommend not entering personally identifiable or sensitive information into AI prompts.
• We log session activity (start time, model used, credit usage) for platform management and abuse prevention. We do not retain the content of AI conversations on our servers beyond the active session unless you explicitly save or export them.
• AI Lab access is granted per course enrolment and deactivated when your enrolment expires.

6. Data Sharing

We share data only where necessary:

• Thawani Technologies — payment processing (Oman-based). Card data is processed directly by Thawani and never passes through our servers.
• AI model providers — the Taim AI Lab connects to multiple large language model APIs, currently including Anthropic (Claude), Google (Gemini), xAI (Grok), DeepSeek, and OpenAI (ChatGPT). When you submit a prompt in the AI Lab, that text is transmitted to the relevant provider's API and processed under their own privacy policy and data usage terms. These providers are based in the United States and other jurisdictions outside Oman — by using the AI Lab you acknowledge this cross-border processing. We maintain an up-to-date list of active AI providers at taim.om/privacy. We recommend not entering personally identifiable or sensitive information into AI prompts.
• Hostinger — web hosting provider. Our servers are located in data centres operating under applicable data protection standards.
• Corporate clients — if you are enrolled via a corporate training programme (e.g., a government entity), your enrolment status and completion data may be shared with the contracting organisation as part of the training agreement.
• Legal authorities — if required by Omani law, court order, or to protect our legal rights.

All third-party processors are required to handle your data securely and only for the stated purpose.

7. Your Rights Under Omani Law (RD 6/2022)

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request erasure of your data where we no longer have a lawful basis to retain it
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To unsubscribe from marketing emails, use the unsubscribe link in any email or contact us directly.
• Data portability — request your data in a structured, commonly used format
• Lodge a complaint — with the competent supervisory authority in the Sultanate of Oman

To exercise any right: email info@taim.om with your full name and the nature of your request. We will respond within 15 business days.

8. Data Retention

9. Security

We implement appropriate technical and organisational measures including:

• HTTPS encryption on all pages and API endpoints
• Password hashing (bcrypt) — we never store plain-text passwords
• Role-based access controls — staff access to personal data is limited to what their role requires
• Secure token-based authentication for portal access and payment signing
• Regular security reviews of publicly accessible endpoints

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant authority and affected individuals in accordance with Article 19 of RD 6/2022.

10. Cookies & Analytics

We use session cookies essential for platform operation (login state, language preference, CSRF protection). We may use basic analytics (page views, device type) to improve the site. We do not use third-party advertising cookies or tracking pixels. If you disable cookies, core functionality including login and course access will not work.

11. Children's Privacy

Our services are intended for professionals and are not directed at persons under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately at info@taim.om and we will delete it promptly.

12. Changes to This Policy

We may update this policy to reflect changes in our services or applicable law. Material changes will be notified via email (for registered users) and a prominent notice on this page. The "Last updated" date at the top will always reflect the current version.

13. Contact & Complaints

For any privacy-related request or concern:
Al Sahl Al-Mumtani SPC
Muscat, Sultanate of Oman · CR: 1251921
📧 info@taim.om
We aim to resolve all requests within 15 business days. If you are unsatisfied with our response, you have the right to escalate to the competent data protection authority in Oman.