Privacy notice
We keep the minimum data that a certificate needs, under the Oman Personal Data Protection Law, Royal Decree 6/2022 (text on Qanoon.om), and its executive regulation.
نحفظ أقل قدر من البيانات تحتاجه الشهادة، وفق قانون حماية البيانات الشخصية في عُمان الصادر بالمرسوم السلطاني رقم 6/2022 ولائحته التنفيذية.
Who controls the data
The issuer (the training centre, employer, event or school) is the data controller. The issuer collects the holder's consent before it sends us the list; we give the issuer the consent wording. Thabit processes the data for the issuer only.
What we keep
On the register: the holder's name, the course, the date and the certificate code. The verify page shows the name in part only (for example M*** Al B***). We use the phone number and email only to send the certificate; they never show on the verify page. We keep no ID numbers, grades or photos.
Why
To issue, send and verify certificates, and to revoke or re-issue them when the issuer asks. We do not sell data or use it for marketing.
Your rights
A holder can ask us on WhatsApp or by email to see, correct or hide their record. When a page is hidden, a scan shows that the record exists but is not public. We tell the issuer about each request.