Privacy Notice

1. Who is responsible for your information?

Bareframe Studio is responsible for deciding how the personal information covered by this notice is used. You can contact us at malik@bareframestudio.com or ahmed@bareframestudio.com, visit bareframestudio.com, or write to us in Muscat, Sultanate of Oman.

This notice applies to our public website, course enquiries, registrations, learning services, events, employment applications and related communications.

2. Information we may collect

• Identity and contact information, such as names, age or date of birth, email address, phone number and city.
• Parent or guardian details and confirmation of authority where a student is under 18.
• Course interests, availability, education information, questions, accessibility needs and communications with us.
• Registration, attendance, assignments, feedback, completion, certificate, invoice and payment-status records for enrolled students.
• Emergency, health or safeguarding information only where it is necessary and appropriate for safe participation.
• Employment application information, including skills, experience, availability and documents submitted by applicants.
• Technical and security information, such as IP address, browser data, authentication records and audit logs when the service supports these functions.

3. Why we use information

We use personal information to:

• recommend courses, respond to enquiries and contact you about registration;
• assess eligibility, manage capacity, confirm enrolment and deliver courses;
• support students, communicate with guardians and protect health, safety and safeguarding;
• manage attendance, learning materials, feedback, completion and certificates;
• issue invoices, record payments and meet accounting or legal obligations;
• review employment applications and administer employee or volunteer relationships;
• protect accounts, investigate misuse and maintain service and audit records; and
• send marketing only where a person has separately chosen to receive it.

4. Consent and other reasons for processing

Where consent is required, we ask for it clearly before processing. This includes explicit parent or guardian consent for a child's information where applicable and separate permission for marketing. You may withdraw consent for future processing, although this does not invalidate processing that occurred before withdrawal.

We may also process information where it is necessary to take requested steps before enrolment, perform an agreement, meet a legal obligation, protect a person's vital interests, establish or defend legal claims, or operate a safe and secure service as permitted by applicable law.

5. Children and guardian information

We take additional care with children's personal information. A parent or legal guardian must authorise an enquiry for a student under 18 and must provide accurate contact information. We limit access to authorised personnel and use the information only for appropriate educational, administrative, safety and communication purposes.

6. Optional marketing

Course requests do not require marketing permission. If you opt in, we may send updates about Bareframe courses, camps and events using the contact details you provide. You can opt out at any time by using an unsubscribe option where provided or contacting us. Opting out does not affect an active enquiry or enrolment.

7. Who may receive information?

Information is accessed only by people who need it for their authorised work. We may use carefully selected providers for website hosting, secure cloud storage, email and communications, course delivery, payment processing, accounting or technical support. Providers may process information only for agreed purposes and must apply appropriate confidentiality and security safeguards.

We may disclose information where required by law, a competent authority, an emergency involving health or safety, or a business reorganisation with suitable protections. We do not sell personal information.

8. International transfers

Some service providers may store or process information outside Oman. Before making such a transfer, we consider the destination, provider safeguards, contractual protections, security and any consent or other steps required by Omani law.

9. How long we keep information

We retain information only as long as necessary for the purpose collected and any legal, accounting, safeguarding, dispute or audit requirement. Retention is based on the type and sensitivity of the information, the relationship with you, operational need and legal obligations.

Course enquiries that do not lead to enrolment are periodically reviewed and deleted or anonymised when no longer needed. Marketing contact details are kept until consent is withdrawn or the record is no longer useful. Enrolment, finance, certificate, safeguarding and employment records may need to be retained for longer under the relevant retention schedule.

10. Security

We use reasonable organisational and technical safeguards appropriate to the information, including access controls, private document storage, authentication, encrypted connections, backups, logging and restricted staff access where those systems are used. No online system can be guaranteed completely secure, but suspected incidents are assessed and notifications are made where required.

11. Your rights

Subject to applicable law, you may ask us to explain our processing, provide access or a copy, correct or update information, block or erase information, transfer information where applicable, or withdraw consent. You may also object to or stop marketing at any time.

To make a request, email malik@bareframestudio.com or ahmed@bareframestudio.com. We may need to verify identity or guardianship before responding. You may also raise a concern with Oman's Ministry of Transport, Communications and Information Technology.

12. Cookies and website technology

The website may use essential cookies or similar storage for security, authentication and core functionality. We do not use optional advertising cookies on the current public site. If optional analytics or advertising technology is introduced, this notice and any required consent controls will be updated.

13. Legal framework and updates

This notice is designed with Oman's Personal Data Protection Law, Royal Decree 6/2022, and its Executive Regulation, Ministerial Decision 34/2024, in mind. You can read the official Personal Data Protection Law and Executive Regulation.

We may update this notice when our services, providers or legal duties change. The latest version will remain available at this page.

14. Related terms

See our Terms & Conditions for the rules that apply to website use and course expressions of interest.