Privacy Policy

White Light Services and Trading LLC, a company operating in the Sultanate of Oman, provides IVMS, WFM Track, vehicle monitoring, fleet telematics, GPS tracking, driver behavior monitoring, video telematics support, mobile applications, web dashboards, integrations, and related support services. This Privacy Policy describes how we collect, use, disclose, retain, protect, and otherwise process information when you use our websites, portals, tracking platforms, devices, applications, APIs, customer support channels, and related services.

This policy is intended to align with applicable laws in Oman, including the Personal Data Protection Law issued by Royal Decree 6/2022 and its Executive Regulation issued by Ministerial Decision 34/2024, and with the operational controls normally expected for OPAL-aligned IVMS and oil and gas fleet safety programs. Where a customer contract, OPAL or client HSE requirement, government instruction, or written data-processing agreement imposes stricter obligations, the stricter obligation will apply to the relevant service.

1. Information We Collect

Depending on the service, we may collect account details, company details, user credentials, driver names or identifiers, employee numbers, mobile numbers, email addresses, vehicle registration numbers, fleet identifiers, device serial numbers, SIM information, installation records, service tickets, billing and contract information, and communications with our teams.

Our IVMS, GPS, telematics, video telematics, mobile application, and tracking systems may collect vehicle and operational data such as live and historical location, speed, route, trip start and stop events, harsh braking, acceleration, cornering, idling, ignition status, geofence events, seatbelt events where configured, driver identification, maintenance alerts, odometer data, fuel or sensor readings, images or video metadata where enabled, crash or incident events, and compliance reports.

Our web applications and mobile applications may collect device and technical information such as IP address, browser type, operating system, app version, device model, language settings, login timestamps, access logs, cookies or similar technologies, diagnostic logs, crash logs, push notification tokens, and permission status. Where the mobile application uses camera, photo upload, storage, location, or notification permissions, those permissions are used only to provide the requested feature, evidence upload, trip tracking, support workflow, or safety function.

2. How We Use Information

We use information to provide and operate IVMS and tracking services, authenticate users, display live and historical fleet data, generate reports, configure devices, support OPAL and customer HSE compliance, investigate alerts or incidents, support journey management, manage service requests, maintain system security, improve performance, prevent misuse, comply with contracts, comply with legal obligations, and communicate with customers and authorized users.

Telemetry and driver behavior data may be used to help fleet operators improve road safety, monitor compliance with speed, route, working-hour, client-site, journey-management, and vehicle-use rules, respond to emergencies, detect device tampering, support audits, and maintain records required by customers, regulators, insurers, site operators, or OPAL-aligned IVMS programs.

3. Legal Basis and Consent

We process personal data where processing is necessary to provide contracted services, where the data subject or customer has given consent, where processing is required for legal or regulatory compliance, where processing supports vital safety interests, where processing is necessary for legitimate operational interests that do not override the rights of individuals, or where another lawful basis is available under applicable law.

Customer organizations are responsible for notifying their drivers, employees, contractors, and authorized users that IVMS, GPS, telematics, dash camera, mobile application, or related monitoring is active, and for obtaining any required consent or authorization before assigning a person to a monitored vehicle, device, account, or mobile application.

4. Sharing and Disclosure

We may share information with the customer that owns or administers the fleet account, authorized account users, approved subcontractors, hosting providers, telecommunications providers, payment or billing providers, analytics and security providers, device manufacturers, map and routing providers, support tools, professional advisers, and government, judicial, regulatory, law-enforcement, site-operator, or emergency authorities when required or permitted by law, contract, safety obligation, or customer instruction.

We do not sell personal data. We do not disclose driver or vehicle tracking data to unrelated third parties for their independent marketing purposes.

5. International Transfers

Some systems, vendors, cloud infrastructure, support tools, or backup environments may be located outside Oman. Where information is transferred outside Oman, we apply contractual, technical, and organizational controls intended to protect the data in accordance with Oman data-protection requirements and customer contractual requirements.

6. Retention

We retain personal data, telemetry, logs, reports, support records, and account information for as long as needed to provide the services, meet contractual commitments, support safety investigations, satisfy OPAL or customer audit requirements, comply with legal obligations, resolve disputes, prevent fraud, and maintain business records. Retention periods may differ by customer, data type, service plan, and legal requirement. When data is no longer required, we delete, anonymize, archive, or restrict it using reasonable procedures.

7. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These controls may include access control, role-based permissions, authentication, encryption in transit where supported, secure hosting, monitoring, backups, audit logs, staff confidentiality obligations, and incident-response procedures. No electronic system is completely secure, and customers must also protect their passwords, user accounts, mobile devices, SIMs, installed devices, and authorized access.

8. Data Subject Rights

Subject to applicable law and contractual arrangements, individuals may request access, correction, deletion, restriction, withdrawal of consent, objection to processing, or information about how their personal data is processed. Because many IVMS and fleet records are controlled by the customer organization, we may direct requests to the relevant employer, fleet owner, contractor, or account administrator. We will support customers in responding to valid requests where required.

9. Children

Our IVMS, web, and mobile services are designed for business and fleet operations and are not intended for children. We do not knowingly collect personal data from children through our services except where a lawful customer use case requires protected transport or safety monitoring and the required guardian or legal authorization has been obtained.

10. Cookies and Similar Technologies

Our websites and portals may use cookies, local storage, analytics, session identifiers, and similar technologies to keep users signed in, remember preferences, secure sessions, detect misuse, measure performance, and improve the service. Users may control cookies through browser settings, but disabling them may affect login, dashboard, or support features.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, OPAL or customer requirements, technology, product features, or business operations. The updated version will be posted on this website with a revised effective date. Continued use of the services after an update means the updated policy applies, subject to any separate written agreement.

12. Contact

For privacy questions, data-protection requests, or concerns about collection, storage, retention, disclosure, or use of information, contact White Light Services and Trading LLC: