Home / Privacy Policy
Privacy and data

Privacy Policy

Wafi respects the privacy of visitors to wafiportal.com. This Privacy Policy explains how Personal Data may be collected, used and protected when you visit the Website, contact us, request a demo, request support or interact with Wafi Smart.

Policy scopeThis Policy applies to the official Website, wafiportal.com, and the services and functions made available through it.
Your rightsSubject to applicable law, you may have rights relating to your Personal Data.
ContactPrivacy requests may be submitted to info@wafiportal.com.
Last updated: 21 September 2026

Privacy Policy details

Last updated: 21 September 2026

1. Who We Are

Wafi is a product owned and operated by Abu Hijazi for Trade and Business SPC, a company registered in the Sultanate of Oman under Commercial Registration No. 1623856.

This Policy applies to the official Website, wafiportal.com, and the services and functions made available through it.

2. Personal Data We May Process

Depending on how you use the Website, we may process information you provide, including:

Name.

Email address.

Telephone number.

Country.

Organisation or business information.

Demo or support request details.

Message subject and content.

Subscription or marketing preferences where selected.

When you use Wafi Smart, we may process the messages and questions you submit, the responses generated, necessary conversation context and information associated with the relevant session or page.

We may also process technical and operational information such as device type, browser, operating system, IP address, usage records, errors and information about pages visited.

Please do not submit passwords, payment card details, identity documents, health information or other unnecessary sensitive information through public forms or the assistant.

3. How We Use Personal Data

We may use Personal Data to:

Respond to enquiries.

Process contact, demo and support requests.

Send communications related to a request you submitted.

Operate and improve the Website.

Operate Wafi Smart and maintain necessary conversation context.

Protect the Website against automated submissions and abuse.

Diagnose technical issues and improve performance.

Manage subscriptions and communications.

Comply with applicable legal obligations.

Submitting an enquiry or support request does not, by itself, constitute consent to marketing communications.

4. Consent and Marketing

Where consent is required by law, it will be requested clearly and for a specific purpose.

If you choose to receive marketing communications, you may unsubscribe at any time using the available unsubscribe method or by contacting us.

Withdrawal of consent does not affect Processing lawfully carried out before withdrawal.

5. Wafi Smart and Artificial Intelligence

Wafi Smart is an automated intelligent assistant available through the Website.

Your messages and information necessary to understand the conversation may be processed using OpenAI services to generate responses where the relevant function requires it.

Responses generated by the assistant should not be treated as a binding contractual commitment or final commercial offer. Where formal confirmation is required, please rely on the Wafi team or the relevant approved commercial documents.

6. Browser Storage and Security Technologies

The Website uses browser storage technologies such as Local Storage and Session Storage to support certain functions and maintain session continuity.

Public forms also use Cloudflare Turnstile to protect against automated and abusive submissions.

Technical and operational records may also be processed where necessary for Website security and performance.

If additional technologies requiring legal consent are introduced in the future, appropriate notice and consent will be provided before they are used.

7. Sharing Personal Data

We share Personal Data only where necessary to operate the Website and services or comply with legal obligations.

The Website uses technology providers including:

Vercel for Website hosting and operation.

Supabase for Website-related data storage and operation.

Zoho Mail for email communications.

OpenAI for Wafi Smart where required.

Cloudflare Turnstile for form protection.

Using these providers does not mean that each provider receives all categories of Personal Data.

Information may also be disclosed where required by law or pursuant to a lawful request from a competent authority.

8. International Data Transfers

Because international cloud and technology services are used, some Personal Data may be processed or stored outside the Sultanate of Oman.

Any cross-border transfer of Personal Data is handled in accordance with applicable legal requirements and appropriate safeguards.

9. Retention

We retain Personal Data only for as long as necessary for the purpose for which it was collected, taking into account:

Completion of the relevant enquiry or request.

The associated business relationship.

Operational and security requirements.

Legal obligations.

The establishment, exercise or defence of legal claims.

When there is no longer a legitimate need to retain Personal Data, it will be deleted or anonymised as appropriate.

10. Your Rights

Subject to applicable law, you may have the right to:

Be informed about the Processing of your Personal Data.

Request access to your Personal Data.

Correct inaccurate Personal Data.

Request deletion where permitted by law.

Withdraw consent where Processing relies on consent.

Object to or restrict certain Processing where recognised by law.

Lodge a complaint with the competent data protection authority.

Some rights may be subject to lawful exceptions.

11. Privacy Requests

Privacy requests may be submitted to:

info@wafiportal.com

Please describe your request and provide sufficient contact information to help us identify the relevant records.

We may request proportionate information to verify identity and protect Personal Data from unauthorised disclosure.

12. Security

We use appropriate technical and organisational measures designed to protect Personal Data against unauthorised access and unlawful use.

However, no Internet-connected service can be guaranteed to be completely free from security risk.

13. Children

The Website is intended to provide information about business services and is not directed at children.

We do not intentionally request children's Personal Data through general Website forms without an appropriate legal or operational reason.

A parent or legal representative who believes that a child's Personal Data has been submitted inappropriately may contact us.

14. External Links

The Website may contain links to third-party websites or services.

When you use an external service, your information is governed by that service provider's own terms and privacy practices. Wafi is not responsible for the independent practices of third parties outside its control except where liability is imposed by applicable law.

15. Changes to this Policy

We may update this Policy when laws, services or Personal Data Processing practices change.

Any updated version will be published on this page with a revised “Last updated” date.

16. Contact

Operator: Abu Hijazi for Trade and Business SPC

Product: Wafi

Commercial Registration: 1623856

Address: P.O. Box 200, Postal Code 140, Muscat, Sultanate of Oman

Email: info@wafiportal.com

Website: wafiportal.com