Privacy Notice (Oman).

This Privacy Notice explains how Metacircles Technologies Private Limited ("Culture Circle") collects, uses, shares, stores and protects the personal data of customers ordering from a Oman delivery address. Culture Circle processes personal data in a manner consistent with the Oman Personal Data Protection Law (Royal Decree No. 6/2022) and with India's Digital Personal Data Protection Act, 2023.

This Notice applies to personal data collected through the Culture Circle Oman storefront, its mobile interfaces, its customer-support channels, and any order placed for delivery in Oman. It sits alongside the Terms of Service at /om/terms.

Culture Circle processes personal data on the following bases: a) Performance of a contract: to accept, ship, clear through customs, deliver and support your Order. b) Legal obligation: to meet customs, tax, and anti-money-laundering requirements in India and Oman. c) Legitimate interest: fraud prevention, platform security, and service improvement. d) Consent: marketing communications, and optional analytics or personalisation cookies. Consent can be withdrawn at any time.

a) Identity and contact data: name, email address, mobile number. b) Delivery data: full address, governorate, landmark where provided. c) Order data: items purchased, size, order value, order history, payment status. d) Payment metadata: the last four digits and card network of the instrument used, and the gateway transaction reference. Culture Circle does not store full card numbers, CVV or banking credentials. e) Verification data: where a high-value or COD Order requires it, identity documents supplied for verification. f) Technical data: IP address, device and browser identifiers, and page-view events.

Your Order is fulfilled from India, so personal data necessary to fulfil it is transferred from Oman to India and processed there. Delivery data is additionally shared with our cross-border logistics partners and with customs authorities in India and Oman, because customs clearance cannot happen without it. Transfers are made under contractual data-processing terms requiring confidentiality, security, and use limited to the purpose of fulfilling your Order.

Culture Circle shares personal data with the following categories of processor, only as far as necessary: a) Payment gateways: payment processing. Receive the card and bank metadata needed to process or refund the transaction. b) Logistics partners: shipping, customs clearance and last-mile delivery. Receive name, phone, full delivery address and order contents. c) Communication platforms: transactional and marketing email, SMS and WhatsApp. Receive email, phone and order metadata. d) Analytics providers: anonymised usage analytics. Receive device identifiers and aggregated event data. e) Cloud infrastructure providers: hosting. Each processor is bound by contractual terms requiring confidentiality, security, and limited use.

a) Order, invoice and customs records are retained for the period required by Indian tax and customs law, and by applicable Oman law. b) Marketing contact data is retained until you withdraw consent or opt out. c) Technical and analytics data is retained in aggregated or anonymised form. d) Verification documents supplied for a high-value or COD Order are deleted once the Order is delivered and the verification purpose is exhausted, unless retention is legally required.

Subject to the Oman Personal Data Protection Law (Royal Decree No. 6/2022), you may request: a) access to the personal data Culture Circle holds about you; b) correction of inaccurate or incomplete data; c) deletion of data no longer necessary for the purpose collected; d) restriction of, or objection to, specific processing; e) withdrawal of consent for marketing or optional cookies; f) portability of data you provided, in a machine-readable format. To exercise any of these, email customersupport@culture-circle.com with the subject line "Data Subject Request" and a copy of a government-issued identity document for verification. Culture Circle will respond within 30 days. If you are not satisfied with the response, you may complain to the Oman Consumer Protection Authority.

Culture Circle applies encryption in transit, access controls scoped to job function, logged administrative access, and contractual security obligations on every processor. No system is perfectly secure, and Culture Circle does not represent that transmission over the internet is free of risk.

The Platform uses strictly necessary cookies for cart, session and checkout, and optional analytics and personalisation cookies. Optional cookies are set only where you consent, and consent can be withdrawn through your browser settings at any time. Withdrawing consent for strictly necessary cookies will break checkout.

In the event of a personal-data breach likely to result in risk to you, Culture Circle will notify affected customers and the competent supervisory authority in Oman without undue delay, in line with the Oman Personal Data Protection Law (Royal Decree No. 6/2022).

The Platform is not directed at children under 18. Culture Circle does not knowingly collect personal data from a child. Where such data is identified, it is deleted.

Culture Circle may update this Notice. Material changes are notified by email or by prominent notice on the Platform. The effective date at the top of this page always reflects the current version.

Grievance Officer, Culture Circle Email: customersupport@culture-circle.com Acknowledgement: within 48 hours of receipt Resolution: within 15 days of receipt, subject to complexity If a grievance remains unresolved, you may escalate to the Oman Consumer Protection Authority. Operating Entity: Metacircles Technologies Private Limited Registered Office: Plot no. 9, 4 Bay, Institutional Area, Sector 32, Gurugram, Haryana - 122001 CIN: U62099HR2023PTC114763 | GSTIN: 06AARCM2647M1ZV