Privacy & discretion
Your information,
handled with care.
A clear account of what Global Wealth Investments collects, why we use it, when it may be shared, and the choices you retain.
Purpose-led
We collect only what is reasonably relevant to a stated purpose.
Never sold
GWI does not sell or rent personal data to third parties.
Need-to-know access
Access is limited to appropriate people and service providers.
Your control
You may exercise the rights available under Omani law without charge.
01 · Scope & controller
Privacy, made
understandable.
This Policy is designed to be read before you submit information to GWI. It applies to our website, enquiries, correspondence, meetings and service relationships.
1. Who is responsible for your data?
Global Wealth Investments (“GWI”, “we”, “us” or “our”), operating from Muscat, Sultanate of Oman, determines the purposes and means of processing described in this Policy and acts as the controller of that personal data.
This Policy applies when you visit gwi-me.com, submit a private enquiry, email or message us, attend a meeting, request an introduction, engage our coordination services, or otherwise interact with GWI in a professional capacity.
Providing information or making an enquiry does not create a client, advisory, fiduciary or other professional relationship. GWI provides concierge, coordination, introduction and facilitation services. Regulated, legal, tax, immigration, financial or investment services—where needed—are supplied by appropriately authorised third parties under their own terms and privacy notices.
2. Applicable framework
We intend to process personal data in accordance with the Personal Data Protection Law promulgated by Oman Royal Decree 6/2022, its Executive Regulation issued by Ministerial Decision 34/2024, and other mandatory laws that apply to a particular processing activity. Where a non-waivable rule of another jurisdiction applies, we will address it to the extent required.
This Policy is a transparency notice. It does not limit rights that cannot lawfully be limited, and does not create obligations beyond those imposed by applicable law or an express written agreement.
02 · Information we handle
Only what the
purpose calls for.
“Personal data” is information that identifies you or can reasonably be linked to you, directly or indirectly. What we hold depends on how you interact with GWI.
Identity & contact
Name, title, organisation, country, email address, phone or WhatsApp number, preferred contact route and language.
Enquiry & relationship
Your objectives, requirements, priorities, messages, correspondence, meeting notes, service history and feedback.
Professional & transaction
Business role, company details, instructions, engagement records, invoices and payment status. We do not intentionally store full payment-card credentials.
Due-diligence material
Only when separately and lawfully required: identification, nationality, authority, eligibility or onboarding information needed for an engagement or third-party introduction.
Website & device
IP address, browser and device type, approximate location derived from IP, referring page, visited pages, timestamps, security events and similar technical identifiers.
Preferences & consent
Communication choices, consent records, withdrawals, marketing preferences, policy version and the time and source of a preference.
Where information comes from
Primarily from you. It may also come from an authorised representative, your organisation, a referring contact, a professional partner, public sources or our website and security systems. If another person provides your data, they must be authorised to do so and should make this Policy available to you.
Sensitive information
Do not send passwords, account credentials, full bank or card details, or highly sensitive financial material through the public form. GWI does not seek genetic, biometric, health, racial-origin, sexual-life, political or religious-belief, criminal-conviction or security-measure data through the Website.
If sensitive data is necessary
We will process Article 5 data only where necessary, after obtaining the required Ministry permit and explicit consent or another permission required by law. Unsolicited sensitive data may be redacted, access-restricted or securely deleted where lawful.
03 · Use, disclosure & retention
Considered use.
Controlled access.
Except where Omani law permits processing without consent, GWI requests clear, explicit consent before processing personal data and keeps appropriate evidence of that consent.
| Purpose | What this includes | Processing condition |
|---|---|---|
| Responding to you | Reviewing an enquiry, authenticating the sender, contacting you and arranging a meeting. | Your explicit consent and steps you request before a possible engagement. |
| Providing services | Managing instructions, coordinating specialists, making authorised introductions, maintaining service and payment records. | Performing a contract with you, taking requested steps, and consent where required. |
| Safety & compliance | Identity checks, fraud prevention, access security, record keeping, complaints, disputes and responding to lawful authorities. | Applicable legal obligations, court decisions, protection of vital interests, public data, contract performance or consent, as permitted by law. |
| Improving GWI | Service quality, internal reporting, website performance and aggregated or de-identified analysis. | Consent where personal data is involved; otherwise data that cannot identify you. |
| Marketing | Sending GWI news, invitations or service information that you expressly choose to receive. | Separate, documented written or electronic marketing consent. Enquiry consent alone is not used for marketing. |
3.1
Consent and your choices
Where consent is the basis for processing, it must be freely given by a person with legal capacity, clear, specific and capable of being evidenced. You may withdraw it at any time. Withdrawal does not invalidate processing completed before withdrawal, and we may continue limited processing where a legal exception or obligation applies.
Marketing requires a separate opt-in. Every marketing message will identify the communication route and provide a clear, free way to stop. We will stop promotional communications immediately after receiving a valid opt-out, while retaining a minimal suppression record where needed to respect that choice.
3.2
Who may receive data
We may disclose the minimum relevant information to:
- authorised GWI personnel and contractors who are subject to confidentiality duties;
- hosting, email, communications, CRM, document, IT, security, analytics, accounting and professional service providers acting under appropriate instructions;
- independent professional partners or service providers when you ask for, approve or reasonably expect a specific introduction;
- banks, insurers, auditors, advisers, regulators, courts or law-enforcement bodies where lawfully required;
- a genuine purchaser, successor or restructuring participant, subject to confidentiality and lawful safeguards.
We do not disclose personal data merely for a third party's independent marketing.
Transfers outside the Sultanate of Oman
Some technology providers, communications platforms, professional partners or their infrastructure may be located outside Oman. Before transferring identifiable personal data outside Oman, GWI will obtain the data subject's explicit consent unless a legal exception applies, assess the recipient and transfer risks, and seek protection no lower than that required by Omani law. We will not make a transfer that would prejudice national security, the State's higher interests, or unlawfully harm the data subject.
Sensitive personal data will not be stored or processed outside Oman without any additional approval required from the Cyber Defence Centre or other competent authority. Anonymised transfers and transfers required by an international obligation may be handled as Omani law permits.
3.3
How long we keep information
We retain records only for a defined, legitimate period proportionate to their purpose, then delete, anonymise or securely archive them unless a lawful reason requires preservation.
A shorter or longer period may apply where required by law, court order, regulator, contract, fraud prevention, accounting, tax, insurance, audit or the establishment, exercise or defence of legal claims. Backup copies are isolated from ordinary use and expire through controlled rotation.
04 · Protection & your rights
Safeguarded in practice.
Controlled by you.
GWI uses proportionate technical and organisational safeguards, while preserving the choices and remedies available to each data subject.
4.1
Security and confidentiality
Measures may include role-based and least-privilege access, confidentiality commitments, secure configuration, encryption in transit where appropriate, protected backups, recovery procedures, vendor review, logging, testing, staff awareness and an incident-response process.
No internet transmission or storage method can be guaranteed absolutely secure. GWI therefore cannot promise that unauthorised access will never occur, particularly where a person circumvents safeguards, uses an insecure device or sends sensitive information through ordinary email or a third-party messaging platform. This does not reduce duties that apply to GWI under mandatory law.
Breach response
If a personal-data breach may threaten data-subject rights, GWI will notify the competent MTCIT department within the legally required period. If the breach may cause serious harm or high risk, affected data subjects will also be notified within the legally required period, with practical information to help reduce harm.
Withdraw consent
Revoke consent for future processing without invalidating lawful processing already completed.
Access & copy
Ask whether we process your data and receive a clear electronic or paper copy that does not expose another person's data.
Correct or update
Request correction, updating or blocking of inaccurate, incomplete or disputed information.
Pause processing
Ask us to suspend processing while a valid rights request is being considered.
Erase
Request deletion when the purpose has ended, consent is withdrawn or processing is unlawful, subject to lawful retention exceptions.
Transfer
Request transfer to another controller where GWI is legally required and technically able to do so.
Stop marketing
End advertising or commercial messages immediately and free of charge through the stated opt-out route.
Complain
Raise a concern with GWI first and, if unresolved, complain to Oman's competent Ministry department.
Exercising a right
A clear route, without charge.
Email [email protected] with the subject “Personal Data Rights Request”, identify the right you wish to exercise and describe the relevant interaction. We may request proportionate information to verify identity and authority. Do not email a passport or full identity document unless we specifically request it through a secure route.
GWI will decide a valid written request within 45 days of receipt. Requests are free. Where law permits, we may refuse all or part of an unreasonably repetitive request or one requiring extraordinary effort, and will explain the reason. Erasure may also be refused where data is needed for a legal obligation, court decision or an existing dispute.
05 · Online services & other matters
The practical
details.
Website technology, third-party channels and professional introductions each have distinct privacy implications. This section makes those boundaries clear.
5.1 Cookies, analytics and technical services
The Website may use essential storage or similar technology for security, functionality and preference management. With valid consent where required, measurement tools may process device, page-view, referral, timing, approximate-location and IP-derived information to understand performance and detect abuse.
GWI's Website currently uses externally delivered services such as Cloudflare performance/security technology and Google-hosted font resources. These providers may receive technical request information, including an IP address and browser details, and may process it outside Oman. Non-essential analytics or advertising technologies should not activate until the required consent is recorded. Browser controls may remove or block storage, but doing so can affect site functionality.
5.2 Email, WhatsApp and external channels
If you choose email, WhatsApp or another external channel, that provider independently processes technical and account data under its own terms. GWI receives the content you send and uses it for the stated purpose. Please use the website form or an agreed secure route for information that should not travel through ordinary messaging.
5.3 Independent specialists and third-party links
A professional introduced by GWI—such as a lawyer, tax adviser, immigration specialist, regulated financial firm, insurer, bank, education provider, travel supplier or property professional—normally acts as an independent controller for information supplied directly to it. Its privacy notice governs that processing. GWI does not control third-party websites, security or privacy practices and is not responsible for them except to the extent mandatory law provides.
5.4 Children
The Website and private-enquiry route are intended for adults with legal capacity and are not directed to children. If processing a child's information becomes necessary for a family-related service, GWI will first obtain explicit consent from the parent or lawful guardian and apply the purpose, minimisation, access and disclosure controls required by Omani law.
5.5 Automated decisions
GWI does not use Website data to make decisions based solely on automated processing that produce legal or similarly significant effects. Routine spam filtering, security scoring and aggregate analytics may operate automatically but do not replace personal review of a genuine enquiry.
5.6 Changes to this Policy
GWI may update this Policy to reflect changes in law, services, technology, providers or internal procedures. The revised version will be posted here with a new effective date. Unless law requires another method, changes take effect on publication. If a change requires renewed consent, GWI will request it before relying on the changed processing.
Privacy contact
Questions deserve a
personal response.
For a privacy question, consent withdrawal or rights request, contact GWI's appointed Privacy Officer. We aim to acknowledge correspondence within one business day; statutory request periods remain as stated above.
Personal Data Protection OfficerPrivacy Officer · Global Wealth Investments
Email[email protected]
LocationMuscat, Sultanate of Oman
Contact the Privacy Officer ↗If you believe processing is unlawful, you may submit a complaint or report to the Personal Data Protection Department at the Ministry of Transport, Communications and Information Technology. Under the Executive Regulation, a complaint should generally be filed within 30 days of certain knowledge of the alleged violation.
Oman privacy framework
Grounded in current
Omani law.
The legal structure of this Policy tracks Oman’s Personal Data Protection Law, its Executive Regulation and the Ministry’s current compliance guidance. These official resources are provided for transparency; mandatory law prevails if it differs from this summary.