Privacy notice

1. Who we are

Mulhim connects schools and universities with factories, farms and other inspiring workplaces across Oman, for educational field visits.

Mulhim has no registered legal entity yet. Until it has one, the person responsible for your data is Saif Al-Riyami, and the address below reaches him. The day the entity is registered we update this notice and tell account holders.

Saif Al-Riyami is also Mulhim's data protection officer. Anything about your data, including a request under section 7, reaches him at the address below.

Email: info@mulhim.om

We publish no postal address and no phone number. There is no registered company yet to carry an address, and a personal mobile number does not belong on a public page. Email reaches the person responsible for your data, who is also the data protection officer, and it is the way to reach us. A postal address arrives with the company's registration, and this notice will carry it that day.

2. What we collect, and why

If you register a workplace as a Mulhim: the name of the place and of the body behind it, a login email and a hashed password, a contact person and their number, a public contact email if you give one, the governorate, wilayat, address and the gate's location on a map, and a scan of your commercial registration with its expiry date. We collect it to build your public page, and to be sure the place is real before a school bus turns up at it.

If you register a school as a Catalyst: the school's name and type, a login email and a hashed password, a contact person and their number, the governorate, wilayat and address, and a scan of your official document. The school's public page shows its name, type, governorate, wilayat, address and map location. The contact person, their number and the school's email go only to the Mulhim your school visits, so it knows who is coming.

If you asked us to register your organization for you: the names in Arabic and English, the sector or the type of school, the governorate and wilayat, the contact person and their number, a public email and each place's booking mail if you gave them, and the email address the account signs in with. Nobody outside Mulhim's team sees them until you open the account from the link in our email. That link shows you what will be public before you choose a password, and opening the account is your agreement to it. If the account is not opened, we delete what we prepared three months after our last invitation.

If you book a visit: the school, the number of students, the grade and the teacher leading the trip with their number when you give them, the date and the status of the booking, and whatever you write in the visit report afterwards. We use it to manage seats, to put the request in front of the Mulhim inside the 48-hour window, and to issue certificates. The teacher's name and number go to the Mulhim so it can reach the class on the day of the visit.

Students' names: the free certificate is typed into your school's own browser and printed from there, so the name never reaches us at all. A name reaches Mulhim on one path only — a school ordering printed certificates — and only with the school's declaration that the guardians agreed. With it comes the student's own two lines about the visit, if they are to be printed. Students have no accounts and we ask them for nothing. See section 8.

If you write to us or send feedback: your message, the page you sent it from, and your email address if you leave one.

If you let us pass a message on to a Mulhim or a school you share a booking with, they receive your words, your organization's name, the place and the date of the visit.

If you leave your details on an interest form: your organization's name, your name, and your phone or email — so we can come back to you, and for nothing else.

If we wrote to you first: we keep your organization's name and its published contact details, and whether our message was opened and its link clicked, so we know which messages arrive and which do not. Every one of those messages carries an unsubscribe link at its foot, and one press on it stops them; your mail program may show the same thing as an unsubscribe button beside the sender. Writing to the address in section 10 stops them too.

Not settled yet. What lawful basis covers writing to an organization that never asked to hear from us, and recording what it did with the message. The question is with a lawyer.

If you use the Mulhim app: it keeps your sign-in in your phone's protected storage, and the last copy of your lists in the app's own folder on the phone, so the day's visits can still be read with no signal. It also keeps there what you have typed and not yet sent, such as a reason for declining a request or a message to us, so you find it again if the phone closes the app while you are in another one. All of it is removed when you sign out, or when another account signs in on the same phone. A message you send us from the app carries the app's version and your phone's system.

If something goes wrong inside the app, for example a part of a screen it cannot show or a reply from our server it cannot read, it sends us a short report by itself: the app's version, the phone's system, the screen where it happened, and the technical text of the error with email addresses and phone numbers taken out. Nothing in the report points to you or your account, and it is deleted 90 days after that error last happened.

What is recorded automatically: the server logs needed to run and protect the platform, which are deleted after 90 days. There is no third-party analytics tool, no advertising pixel and no tag manager anywhere on the site.

3. On what basis

On two: what the service you asked for actually needs — an account without an email does not work, a visit without a number of students cannot be booked — and your consent, where we asked for it plainly. You can withdraw it whenever you like.

And if we ever need your consent for something extra, we will ask for it where it happens, in words, not bury it in this notice.

Not settled yet. The first-contact outreach described in section 2 sits under neither of those two. We would rather write that down than leave you to find it: the basis is with a lawyer, and until it comes back, one press on the link at the foot of any of those messages stops them, and so does one line from you.

4. Who else sees it

• The Mulhim your school is visiting, which sees the school's name, contact person, phone number, email, address and map location, the number of students, the grade and the teacher leading the trip with their number when you give them, and the visit report once you send it. It never sees the students' names. They are not sent to it at all. If a report you sent names a student, write to us and we will take the name out.
• Anyone who opens a public page, once the team has approved the account. A Mulhim's page shows its name, sector, governorate and wilayat, the contact person, the phone number, the public contact email if there is one, the address and the map location. A Catalyst school's page shows its name, type, governorate, wilayat, address and map location, and leaves out its contact person, phone and email.
• Mulhim's own team, as far as running the platform and answering what you write to us requires: account details, scans of registrations and official documents, and the names a school sends with a printed order.
• Our hosting provider, on whose servers the platform runs. See section 5.
• Our email provider, through which the platform's messages pass; it sees the recipient, the subject and the body.
• Our mailbox provider, which holds the messages we exchange with you.
• A printing partner, if your school orders printed certificates: the names to be printed and the delivery address.
• The authorities, where the law requires it.

Not settled yet. Which printing partner. None has been chosen. No school has ordered a printed certificate, and no name has left the platform.

We do not sell your data, we do not rent it, and we do not hand it to an advertiser or a sponsor. Mulhim has no sponsor today, and no sponsorship agreement has been signed. This is a rule we hold ourselves to, whether or not a contract ever says it: no student's name or image appears in a sponsor's promotional material without the written consent of both the school and the guardian.

A Mulhim's page shows its location on a map embedded from OpenStreetMap, and loading it sends your IP address there. We chose it because it does not track visitors.

5. Where your data is held

Plainly: our servers are currently outside Oman, in India. We treat that as temporary rather than settled, and moving to hosting inside the Sultanate is a commitment we are working through.

What protects your data meanwhile: an encrypted connection on every page; scans of registrations and official documents kept away from the files the site serves publicly, opened only by the account holder who uploaded them once signed in, or by Mulhim's team, and never through a link the platform does not know, however well-formed it looks; and nightly backups.

Not settled yet. A contractual guarantee from the hosting provider of protection not less than Omani law requires. We have not asked for one and nothing is signed. It belongs here the day it exists, and saying so is better than describing a safeguard you do not have.

6. How long we keep it

Not settled yet. Five of these periods are decided. Server logs, and the copy of the database taken before each update, are kept for 90 days, then deleted. Students' names and their own words, which reach us only with a printed certificate order, are erased 30 days after the certificates are delivered, or 30 days after the order is cancelled. If an order is never paid, they are erased 90 days after it was placed. Names that reach us with no order, because placing it failed, are erased after one day. Nightly backups are deleted from the server after 14 days and from our second copy, in Oman, after 60 — longer on purpose, so that copy can still bring the platform back after something that takes the server away and goes unnoticed for weeks. Error reports from the app are deleted 90 days after the error last happened. Any copy held with an outside storage service has no period decided yet. The rest are not decided yet either. We are working them out, and this notice will carry each answer the day it exists. Until then, none of the rest is deleted on a timer: ask us and we erase what you ask about.

7. Your rights

• To see what we hold about you, and to get a copy of it.
• To have it corrected or brought up to date.
• To ask us to erase it.
• To withdraw your consent at any time, without that undoing what happened before you withdrew it.
• To complain to the competent authority if our answer does not satisfy you.

Write to the address in section 10. We may ask for something that shows the data is yours — to protect it, not to slow you down.

Not settled yet. How quickly we answer. We have not set a time we commit to, and we will not publish one we cannot yet keep: every request is carried out by hand today. What we will do is answer, and tell you when it is done.

8. Students

Students have no Mulhim accounts, never use the platform, and are asked for nothing. The school writes the names, and on the free certificate they never leave the school's browser.

• A name stays between your school and us. The Mulhim does not see it and is not sent it.
• We never use a student's name or their words in marketing, ours or a sponsor's.
• Visit albums are not published at all for now, and stay that way until the rule below is built. Photographs a Mulhim or a school uploads to a visit album stay inside that account and appear on no public page. Pictures of an organization itself, which the account holder chooses for its own page, still appear there.

Not settled yet. The rule that no picture in which a student is identifiable is published without the guardian's consent, given through the school. It is written and it is not yet built into the platform, so it is not a promise we can make here. Until it is, visit albums stay off every public page, and if any other picture shows a student, write to us and it comes down.

When a picture is removed from a page, or replaced, its file is erased from our server too, unless the same file is still in use elsewhere on the platform. A copy that someone opened shortly before may stay in their browser, or in a cache along the way, for up to a day.

If you are a guardian and want to know what we hold about your child, or want it erased, write to us directly at the address in section 10.

9. Cookies

Only what the site needs to work. No advertising cookie, no analytics cookie:

• A session cookie, so you stay signed in.
• A CSRF cookie, so a request cannot be forged in your name.
• A language cookie, so the site opens in Arabic or English as you chose.
• A selected-place cookie, if your account holds more than one place — one year.
• A cookie that opens the site before it launches, if you arrived through an invitation link, and a plain flag beside it that tells a page which links to show — 90 days.

10. Contact us

Write to us about anything in this notice, including a request under section 7, and we answer from the same address.

info@mulhim.om

11. Changes to this notice

If something material changes — where your data is held, who sees it, how long we keep it — we update this notice, change the date at the top, and tell account holders by email.