ENع
Privacy & data protection
How we collect, use, share and protect your personal data — and the rights you have over it under Oman’s Personal Data Protection Law and, where applicable, the GDPR.
On this page
Who is responsible for your personal data and which services this notice covers.
Equator Group (“Equator Private”, “we”, “us”), 18th November St, Al Ghubra, Muscat, Oman, is the controller of the personal data described in this notice. Last updated: 13 September 2026.
This notice covers equatorprivate.com and the secure customer portal at secure.equatorprivate.com. Where an account, payment or settlement service is provided by our licensed partner bank, Sohar International Bank, that bank acts as controller for the regulated banking records it is required to hold; its own privacy notice applies alongside this one. See our regulatory page for how the two roles are separated.
We process personal data in line with Oman’s Personal Data Protection Law (Royal Decree 6/2022) and, where it applies to visitors in those regions, the EU/UK GDPR.
We collect only what we need to open an account, keep it safe and meet our legal obligations.
01 Identity
Full name, date of birth, nationality, government identity documents, proof of address, tax residency and, where required, source of funds and wealth. Much of this is collected because anti-money-laundering rules require it.
02 Contact
Email address, telephone number, postal address, the credentials you set for the secure portal, your language preference and your communication history with our team.
03 Technical
Transaction and balance data made available to us by the partner bank, card activity, plus IP address, device and browser type, approximate country and security logs from the portal.
Every use below is tied to a specific and lawful reason.
| Purpose | Legal basis |
|---|---|
| Opening and running your account | Performance of the contract between you and us, and steps taken at your request before it. |
| Identity verification, sanctions and AML screening | Compliance with legal obligations applying to us and to our licensed partner bank. |
| Fraud prevention, security monitoring and audit logs | Our legitimate interest in keeping accounts and the platform secure. |
| Customer support and complaint handling | Performance of the contract and compliance with legal obligations. |
| Service emails about your account | Performance of the contract. These are not marketing and cannot be switched off while the account is open. |
| Marketing emails, where we send them | Your consent. You can withdraw it at any time using the link in the message. |
We do not sell personal data. We share it only with the parties listed here.
Sohar International Bank, our licensed partner bank, which provides the regulated account, payment and settlement services made available through the platform.
Identity, sanctions and anti-fraud providers engaged to verify customers and screen transactions, and card scheme and card-issuing partners where you hold a card.
Technology suppliers that host and protect the platform, acting on our documented instructions and bound by confidentiality and security obligations.
Regulators, courts and law-enforcement authorities where we or our partner bank are legally required to disclose information, and professional advisers (auditors, lawyers) under a duty of confidentiality.
Where your data goes, and how long we keep it.
Some of our suppliers process data outside Oman. Where that happens we put appropriate safeguards in place, including contractual protections and, for transfers covered by the GDPR, standard contractual clauses.
We keep customer identification and transaction records for at least ten years after the end of the relationship, because anti-money-laundering rules require it. Records of applications that do not proceed are kept for a shorter period. Security and access logs are kept for a rolling period proportionate to their purpose. When a retention period ends we delete the data or irreversibly anonymise it.
How to see, correct or restrict what we hold, and where to complain.
Subject to the limits the law places on financial institutions, you may ask us to access the personal data we hold about you, correct it if it is inaccurate, delete it where we are not required to keep it, restrict or object to certain processing, receive it in a portable format, and withdraw consent where consent was the basis we relied on.
We cannot delete identification and transaction records that anti-money-laundering law obliges us to retain, and refusing to provide KYC information means we cannot open or maintain an account.
To exercise a right, write to [email protected]. We respond within 30 days. If you are not satisfied you can use our complaints procedure, and you may complain to Oman’s Ministry of Transport, Communications and Information Technology, or to your local supervisory authority if you are in the EU or the UK.
How we protect the data, and who to write to.
Access to customer data is restricted to staff who need it, protected by authentication controls and logged. Data is encrypted in transit and at rest, and the secure portal is separated from this public website. Read more on our security page.
No system can be guaranteed to be perfectly secure. If you believe your account or credentials have been compromised, contact us immediately on +968 7702 7990.
Privacy questions: [email protected] · Equator Group, 18th November St, Al Ghubra, Muscat, Oman.
We may update this notice. Material changes will be announced on this page and, where the change affects you directly, by email.
