Presumption of confidentiality
Customer data and account information are treated as confidential. 3000Host does not disclose customer-hosted content for curiosity, marketing data sales or an informal request from an unauthorised person. Every disclosure must have a documented, legitimate basis.
Customer-authorised disclosure
A customer may direct a lawful transfer or disclosure within the rights and authority it holds. We verify that the requesting person is authorised and limit the information to the stated purpose. Where personal data belongs to other individuals, their rights and applicable law remain relevant.
Service providers
Operational disclosures to infrastructure, payment, domain, messaging or support providers are limited to what is necessary to deliver the contracted service, and subject to relevant confidentiality, security and processing requirements.
Competent legal requests
Requests from public authorities are examined for the requester’s legal authority, the form of the demand, the scope and the applicable Omani or other binding law. We disclose only information lawfully required and reasonably within the request’s scope, and document the review. An unsupported informal request is not automatically sufficient.
Emergency circumstances
An emergency request is assessed under the specific applicable legal rule and documented by authorised personnel. Urgency alone does not remove verification, minimisation or confidentiality requirements.
Customer notice and restrictions
Where lawful and practicable, affected customers are informed of a compelled disclosure. Notice may be delayed or withheld when prohibited by law or a competent order, or where doing so would lawfully compromise an investigation.
Record keeping and challenges
We maintain an appropriate record of each request, authority, scope, information disclosed and decision. Manifestly defective or overbroad requests may be clarified or challenged through lawful procedures. Retention of request records is governed by the Data Retention Policy.
Cross-border transfers and transparency
International transfers, if required, are assessed against the applicable privacy rules and safeguards. We do not publish a customer’s confidential records as proof of compliance. General updates to this policy will identify the published version and effective date.