FoneZone Oman app and website privacy

This page covers customer data in FoneZone Oman and FoneZone.co. Contact sales@fonezone.co for privacy questions and data requests.

Data and purposes

When you create or update an account or place an order, the store processes your name, email, phone, delivery and billing addresses, account identifiers, and order and invoice history. These support account management, purchases, delivery and customer service. Sign-in information is processed to authenticate your account. Support correspondence may contain information you choose to send.

The app sends search queries and product-page requests to the website to display the catalog. The website uses cookies for sessions, shopping bags, language and preferences, and may process usage data as described below. The app's local favorites and browsing history stay on the device and can be removed by clearing app data or uninstalling. The current Android release does not request camera, microphone, contacts or precise-location permissions.

Payments and recipients

Choosing a payment option may take you to a payment provider to process the transaction under its policy. Do not email passwords or payment-card details to support.

Access is limited to authorised FoneZone staff and service providers to the extent needed for the service you use: the Odoo hosting/platform provider for operating the store and accounts; the payment provider selected for your transaction for processing payment; and fulfilment/delivery providers where needed to deliver your order. If you choose an external instalment, bank or financing application, the named provider's own process and privacy notice apply; advertising an option does not mean all customers' data is sent to that provider. Support initiated through WhatsApp or email is processed through that communication service. The website uses cookies for shopping, performance and traffic analysis as described in its cookie notice. We do not publish a blanket claim that these providers receive no data. For information about the provider involved in your own order or data request, contact sales@fonezone.co. Hosting is configured in Europe; applicable safeguards and requirements for transfers outside Oman must be observed. Production configuration includes enabled Thawani Payment and SmartPAY – Bank Muscat providers. Information is sent to the provider used for your transaction, not automatically to every configured provider. Delivery methods are configured as store collection or fixed-price delivery; no external carrier integration was identified in that configuration.

Retention and deletion

We keep account profile and contact information while needed to provide your account and requested services. You may request deletion of your FoneZone Oman account and associated data at any time. Our operational target is to process your request within 30 calendar days of receipt, subject to any shorter applicable legal deadline. We may ask only for information reasonably needed to verify identity. If verification or a lawful exception prevents completion, we explain the reason and expected completion or review date. We delete or irreversibly anonymise personal data that is no longer necessary; disabling sign-in alone is not completion. We retain only records necessary for applicable accounting/tax duties, outstanding transactions, warranty obligations, disputes or substantiated security/fraud needs, restrict their use to that purpose, and explain the affected data, reason and applicable retention or review period in our response. Retention is reviewed when the relevant obligation or dispute ends. We request corresponding action from service providers where applicable. Copies remaining in protected backups are not used for normal business and must be addressed under the hosting backup lifecycle; any restore must reapply completed deletion requests. Locally stored favourites and browsing history can be removed by clearing app data or uninstalling. Where Oman VAT record-keeping rules apply, tax invoices and required accounting records are retained for at least ten years following the end of the relevant tax year, or longer where a specific lawful requirement applies; this does not justify retaining an unrelated customer profile indefinitely. Odoo.sh documents a standard production backup rotation of seven daily, four weekly and three monthly backups; downloaded or exceptional backups require separate review.

Request account and associated data deletion on the deletion request page. We may verify your identity to protect the account. Submitting a request does not mean deletion has completed immediately. Disabling sign-in alone does not erase all data.

Your choices and security

You can browse the catalog without an account, update details in My account, manage browser cookies, and contact support for correction or deletion requests. App connections use HTTPS and reject unencrypted content. No system can guarantee absolute security.