Privacy Policy

We process personal data to (a) perform our agreement with you (run the Platform, facilitate introductions); (b) meet legal obligations (KYC/AML, sanctions, record-keeping); (c) on the basis of your consent (e.g. marketing); and (d) our legitimate interests in security, fraud prevention and service improvement. You may withdraw consent at any time.

As part of access control we verify identity and screen you, your beneficial owners and counterparties against sanctions and watchlists (UN, US/OFAC, EU, UK, Oman). This processing is necessary to comply with anti-money-laundering law (incl. Royal Decree 30/2016) and may be shared with the relevant authorities where required, without notice where the law so requires.

We do not sell personal data. Counterparties remain anonymous until mutual interest; only the information necessary to progress a deal is disclosed, and only with parties to that deal. We share with regulators where legally required, and with vetted processors who operate the Platform under confidentiality and data-processing terms (e.g. cloud hosting, the Sentinel compliance engine).

Our tamper-evident audit ledger stores only cryptographic hashes and minimal references of events — never your name, documents, or other personal data, and no funds or token. This privacy-by-design approach means the ledger reveals nothing about you, while still proving an event occurred and was not altered.

Where personal data is transferred outside Oman (e.g. to cloud or screening providers), we apply appropriate safeguards consistent with the PDPL and require recipients to protect it to an equivalent standard.

We apply technical and organizational measures including encryption in transit and at rest, access controls, private document storage with signed-URL access, and audit logging. KYC documents are accessible only to you and authorized compliance staff.

We retain account and transaction records for as long as your account is active and thereafter for the period required by financial and AML regulation (typically a minimum of five to seven years), after which data is deleted or anonymized, subject to legal-hold obligations.

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, and withdrawal of consent. We will respond within the period required by the PDPL. Some data must be retained to meet legal/AML obligations and cannot be deleted on request. To exercise your rights, contact privacy@nicomtrade.com.

We use essential cookies to maintain your session and security. Optional analytics cookies, if used, are subject to your choices. We do not use third-party advertising trackers.

For privacy questions or to exercise your rights, contact privacy@nicomtrade.com. You may also lodge a complaint with the competent Omani data-protection authority (the Ministry of Transport, Communications & Information Technology). See also our Terms and Disclaimer.

We may update this policy; material changes will be notified through the Platform. Continued use after an update constitutes acceptance.