How Prima handles
personal data
This notice explains what personal data Prima Artificial Intelligence LLC collects, why, how long we keep it, and the rights you have. It is written to meet the Personal Data Protection Law of the Sultanate of Oman — Royal Decree 6/2022 and its Executive Regulations under Ministerial Decision 34/2024.
01Who we are
Prima Artificial Intelligence LLC is a company registered in the Sultanate of Oman under commercial registration CR 1575008, with its registered address at Duqm, Al Wusta Governorate, Sultanate of Oman. We develop and operate AI-ready data centre capacity in the Gulf, and we are part of the PetroCompute consortium.
For anything in this notice, or to exercise any right described below, contact our Data Protection Officer at info@primasecurity.ai. You may also complain directly to the Ministry of Transport, Communications and Information Technology, which supervises data protection in Oman.
We do not hold or process our customers' data. Prima provides dedicated bare-metal compute and colocation. Customers administer their own systems and hold their own credentials, and we have no technical route into what runs on them. We are neither controller nor processor of customer workload data, because there is no processing at all. The personal data described below is our own — about the people we employ, work with, host on site, and correspond with.
02What we collect, and why
| What | Why we hold it | How long |
|---|---|---|
| Your name, company, work email and enquiry — when you request capacity | To respond to your enquiry and, if you become a customer, to administer the relationship. | Relationship + 2 years |
| Your work email — when you request a site brief or spec sheet | To send you the document you asked for, and to follow up once on it. Nothing else. We do not sell or share it. | 24 months |
| Correspondence | To handle what you wrote to us about, and to keep a record of what was agreed. | Relationship + 2 years |
| Employment and contractor records | To employ and pay people, meet obligations under Omani labour, tax and social insurance law, and evidence competence for the roles they hold. | Term + 7 years |
| Site access records and video surveillance — if you visit a facility | To control and evidence who was in a secure area and when. Our customers require this of us. | Access 12 months, video 90 days |
| Website usage, in aggregate | To understand how many people visit and which pages are read. See section 07 — this involves no cookies and no personal data. | Aggregate only |
03Our lawful basis
Omani law rests principally on your explicit consent. Where you give us your details — an enquiry, a document request, a visitor registration — we rely on the consent you give at that moment, and we tell you what it covers.
For some processing the law does not require consent because it applies differently: employing and paying people, meeting tax and social insurance obligations, keeping statutory corporate records, and complying with export-control requirements are all obligations imposed on us by law. We rely on that footing rather than asking for a consent you could not meaningfully refuse.
What we never do
- We do not sell personal data, and we do not share it for anyone else's commercial purposes.
- We do not send marketing without separate written consent, which Omani law requires expressly.
- We do not make automated decisions about people.
- We do not collect data about children.
- We do not use access records or video to monitor staff performance.
04Who we share with, and whether data leaves Oman
We share personal data only where it is necessary, and only with parties who are bound to protect it:
- Service providers that host our website, deliver our email, and send the documents you request. Some of these operate outside Oman, and giving us your email address to receive a document involves a transfer outside the Sultanate on that basis.
- Consortium partners and professional advisers, where a named individual's business contact details are needed for a specific matter, under confidentiality obligations.
- Screening providers, where export-control law requires us to check a name against restricted-party lists.
- Authorities, where we are legally required to disclose. We do not volunteer data, and a request from a foreign authority is handled through the proper Omani legal route rather than answered directly.
Four categories never leave Oman. Video recordings, site access logs, biometric access templates and occupational health records are held in the Sultanate and are not replicated, backed up or exported outside it. This is a deliberate design decision, not an accident of where our systems happen to sit.
05Your rights
Under Omani law you may ask us to do any of the following. We answer within 45 days, and there is no charge for a first request.
| Access | Ask what personal data we hold about you, why, who we have shared it with, and how long we will keep it. |
| Correction | Have anything inaccurate corrected. |
| Deletion | Have your data deleted where we no longer need it and no legal obligation requires us to keep it. |
| Withdraw consent | Withdraw consent you gave us. We will tell you plainly if that has a practical consequence — for example, we cannot send you a document if you withdraw the email address we would send it to. |
| Portability | Receive the data you gave us in a structured, machine-readable form. |
| Complain | Complain to the Ministry of Transport, Communications and Information Technology. This right is unconditional and we will not obstruct it. |
Write to info@primasecurity.ai. Any wording is fine — there is no form to fill in, and we will not require one. We may ask you to confirm who you are, proportionately, so that we do not disclose your data to someone else.
If we have to refuse part of a request — because another person's data would be revealed, or because a statutory retention period applies — we will tell you what we withheld and why.
06How we protect it
Personal data about our people, our visitors and our security estate is classified at the highest level we operate and is reachable only by those who need it for their role. Access to those records is itself logged. Data is encrypted in transit and at rest, records held on site sit inside our access-controlled areas, and equipment is sanitised to the NIST SP 800-88 standard before it is reassigned or disposed of.
If a breach affecting personal data ever occurs, Omani law requires us to notify both the Ministry and the people affected. We have a procedure for doing so within 72 hours of detection, and we would notify on incomplete information rather than notify late.
07Cookies and analytics
We deliberately do not use cookie-based analytics. Our measurement is cookieless: it counts page views and referring sites in aggregate, sets nothing on your device, assigns you no identifier, and cannot follow you to another website. Because no personal data is processed, there is nothing to consent to — which is why you are not being asked to dismiss a banner before reading this page.
We use no advertising trackers, no social media pixels, and no cross-site profiling of any kind. The only cookie-like storage our website uses is technical: remembering your language choice and your scroll position, held in your own browser and never sent to us.
08Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top. Where a change materially affects processing we already rely on your consent for, we will ask again rather than assume the old consent still covers it.
09Contact
Data Protection Officer
Prima Artificial Intelligence LLC · CR 1575008
Duqm · Al Wusta Governorate · Sultanate of Oman
info@primasecurity.ai · primacompute.com
You may also contact the Ministry of Transport, Communications and Information Technology, which supervises compliance with the Personal Data Protection Law in the Sultanate of Oman.