Scope and identity
This policy applies to the 3000Host website, pre-sales enquiries, billing relationships and services operated under the 3000Host brand. The contracting legal entity is identified in the applicable service agreement and invoice. Information stored by a customer within their hosting space is generally processed on that customer’s instructions, as further described in the Data Processing Agreement.
Information we collect
Depending on the interaction, information may include names, business names, contact details, account identifiers, orders, invoices, service configuration details, support correspondence, IP addresses, security and access logs, and payment status. We do not ask customers to send passwords, one-time codes or full payment-card details by ordinary email.
Purposes and lawful conditions
We process data to respond to enquiries, arrange contracts, provide and secure services, maintain records, investigate misuse, issue invoices and satisfy legal obligations. We obtain explicit consent where required; processing without that consent is confined to exceptions permitted by applicable Omani law, including qualifying contractual or legal obligations. We document the applicable condition for each processing purpose.
Direct marketing
Commercial promotional messages are sent only when valid explicit consent has been obtained, where required. Each applicable marketing channel will provide a practical means to withdraw consent or stop messages. Essential service, billing and security notices are distinguished from promotional communications.
Recipients and international transfers
Information may be shared on a need-to-know basis with contracted infrastructure, payment, domain, email and support providers, subject to appropriate safeguards. We do not sell personal information. Transfers outside Oman, if necessary, must satisfy applicable legal requirements and contractual controls. See our Data Disclosure Policy for government and other third-party requests.
Retention and erasure
We retain personal data only for a documented, lawful purpose. When that purpose ends, data is erased in accordance with the current Personal Data Protection Law, except where retention is required because of an existing dispute or a legally imposed obligation. Deletion and backup handling are further described in our Data Retention, Erasure & Backups Policy.
Individual rights
Subject to the law, individuals may request information about processing, access, correction, deletion, withdrawal of consent and other applicable rights. A person may object to an automated decision and request human review where the law provides. Requests are verified to prevent unauthorised disclosure and can be submitted to info@3000host.com.
Protection and incidents
Access to personal information is restricted according to business need and privilege. We use proportionate technical and organisational controls, maintain incident-response procedures and give notices to competent authorities or affected individuals when legally required. No electronic service is represented as entirely risk-free.
Contact and updates
Privacy enquiries and rights requests may be sent to info@3000host.com. We record the request, verify authority, assess the legal basis and respond through an appropriate channel. Material changes to this policy will be identified by a new version and effective date.