1. Scope

HUTCHISON PORTS SOHAR (‘Oman International Container terminal LLC’, 'OICT', 'We', 'Us',) is committed to protecting the privacy of individuals ('You', 'Your',) in compliance with applicable Laws and regulations including the Personal Data Protection Law of Oman (PDPL) and its Executive regulations while securing the personal information.

This Privacy Notice outlines:

• How OICT collects, uses, discloses, stores and transfers your personal information.
• Your rights to access and correct your personal information.
• How to lodge complaints about Privacy breaches and our process for handling them.

Please note that these Privacy Policy may be amended from time to time without prior notice. You are advised to check them on a regular basis. The latest version of this Privacy Notice will appear on OICT’s website at: (Privacy Notice). If you do not agree with the terms of this privacy notice, please do not access the website and/or submit your information to us.

This Notice is not limited to the use of this website but covers all other information we may collect or receive through our website, Job applications made thru our portal, business interactions, application usage and other engagements. This Privacy notice does not apply to OICT employee records or other Hutchison Ports Group entities.

2. What kinds of personal information do we collect?

2.1. The type of personal information OICT collects depends on your relationship and interactions with us. We may collect personal information from job applicants, clients, customers, suppliers, tenants (lessees and licensees), contractors, service providers, business visitors and other stakeholders while performing our functions and activities.

Personal data includes any information identifying an individual (a "data subject") either directly or indirectly, by reference to an identifier such as a name, identification number, email address, phone number, date of birth, etc.

2.2. Personal information that we may collect include:

• Personal and/or professional contact details (e.g., name, title, Identity details, address, email,, phone number, mobile number etc.,)
• Details of your presence in the Port area or participation in any Port events
• Information about your involvement in any incident in the Port area.
• Complaints or feedback you provide.
• Employment history, professional and educational qualifications (for Job applications).
• Certain identification documents (e.g., driver’s license, passport, Gate Pass Card) for system or site access.

2.3. We may also collect sensitive information that is a subset of your personal information such as health details, race, ethnic origin, facial images, trade or professional organization memberships, criminal record with your consent or as required by law in certain circumstances during job applications or incident investigations at the Port.

3. When do we collect your personal information?

We collect your personal information when you:

• Contact us, apply for a job, or register at our website,
• Use our mobile apps, interact on our social media pages (currently only LinkedIn is available), or enter the Port.
• Interact as a customer, supplier, business visitor, stakeholder or contracted service provider
• Apply for a Port Gate Pass, lease, or tender services for the provision of goods or services.

4. How do we collect your personal information?

• Direct Collection: We aim to directly collect your information in a fair and non-intrusive way wherever possible.
• Indirect Collection: In some cases, we may gather information from:
  • Job referees, academic institutions, or police checks for job applicants.
  • Public sources like LinkedIn or other service providers.
• Cookies – Our website uses cookies that are small text files placed on your computer to enhance user experience while you visit website. Some expire after each session, while others persist longer to support while you return to our website, to provide a better user experience. However, you can adjust your browser settings to block cookies if preferred.

5. Why do we collect your personal information and how do we use or disclose it?

We collect your personal information while carrying out the functions in relation to managing, operating and developing the Port and its services and includes:

• Manage and ensure the safety of the Port area
• Ensure safe landside transport.
• Provide storage, terminal loading & unloading activities and other incidental activities.
• Communicate with the community, government and other stakeholders
• Comply with legal and reporting requirements
• Manage incidents and insurance claims etc.,

6. Can you choose to remain anonymous when dealing with us?

You may choose to remain anonymous or use a pseudonym unless it is impractical or unlawful, such as during legal obligations, incident investigations, complaints, or when applying for jobs or services.

7. Who do we disclose your personal information to?

• We comply with all the applicable laws including Personal Data Protection Law of Oman and its Executive regulations and retain your information only for its intended purpose.
• Your personal information (including, in certain limited circumstances, your sensitive information) under the duty of confidentiality to us may be shared with third party service providers, agents, contractors (financial, legal, administrative, mailing houses, software developers, IT maintenance providers, lawyers etc.,) or its related companies and affiliates, or regulatory agencies as needed and with your explicit consent, except as required by law.
• All disclosures are done confidentially and in compliance with applicable regulations
• Overseas disclosure of Personal information: OICT may disclose personal information overseas if necessary for its operations as outlined above and in compliance with Omani Laws, including Personal Data Protection law of Oman. Data provided via online survey tools like Google Surveys may be stored by third party survey provider overseas.

8. Do we use and disclose your personal information for direct marketing activities?

With your explicit consent, OICT may use your personal information to inform you about our Port services and projects via phone, email, post, SMS or a combination of these. To opt out of direct marketing, you may contact us using the details in section 13.

9. How do we secure your personal information?

OICT stores personal information in a combination of electronic and hard copy formats using organizational, physical, and technical safeguards to protect it from misuse, unauthorized access, or loss. Security measures include protocols, controls and policies tailored to data risks and securing data.

If you suspect a data breach, notify us immediately. We will assess and respond per the guidelines in Section 12.

10. How long we hold your Personal information?

We retain your personal data as long as needed for its original intended purpose or further processing, in compliance with applicable laws, standards and policies. Once no longer required, data is erased unless subject to statutory retention periods, in which case it is restricted instead of erased.

11. What are your rights under PDPL:

Under PDPL, the data subject may request for providing access, correction, erasure, objection, withdrawal of consent to the personal data as shared. You may request access to or correction of your personal information by contacting us at any time at the details below. We will need to verify your identity and aim to respond within 45 (forty five) days from the date of receipt of such request. Access may be denied if:

• The request is repetitive or burdensome
• Law permits rejection in part or whole

If access is refused, we will provide written reason within 45 days. If you believe the information is inaccurate or incomplete, you may request correction. If we disagree, we will explain our reasons.

12. How do you make a privacy complaint?

If you believe your personal information has been mishandled, you may file a complaint by contacting us. We will:

• Acknowledge receipt promptly and verify your identity.
• Investigate and respond with a resolution within a reasonable time, following applicable laws.

If unsatisfied, you may escalate to the Ministry of Transport, Communication and Information Technology (MTCIT) within 30 days of discovering the issue. The process includes:

• MTCIT notifying OICT within 7 days of receiving the compliant.
• OICT responding to the compliant, after which MTCIT will issue a decision within 60 days.

If dissatisfied with the decision, you may file a grievance with MTCIT within 60 days. The grievance will be resolved within 30 days or deemed rejection if no response is received within this period.

13. Contact details:

OICT welcomes any comments or questions about this Privacy Notice or to report a privacy breach:

Privacy related queries or Compliants: PDPO@hutchisonportssohar.com