Admissions
General Privacy Notice
GENERAL DATA PRIVACY POLICY
Last Modified On: September 2026
GENERAL INFORMATION
This General Data Privacy Notice provides detailed information on how the International School of Choueifat – Muscat ("we", "us", "our", "School”) handles the personal data of its Students, Prospective Students, Students’ Parents/Legal Guardians (“Students’ Representatives as defined below”) within the scope of its activities.The detailed provisions throughout this General Data Privacy Notice (“Privacy Notice”) will apply to the collection, processing, transfer, retention of Personal Data (as defined below) during the application and registration process, the attendance of courses and/or any educational services offered by the School in the Sultanate of Oman (Oman).
Frequently Asked Questions
In this Privacy Notice, the following terms are used with their respective meaning:
"Personal Data" | means Data that directly or indirectly makes a natural person identified or identifiable by referring to one or more identifiers such as the name, civil identity number, Electronic IDs data, spatial data, or by referring to one or more factors related to genetic, physical, mental, psychological, social, cultural or economic identity. |
|
|
"Health Data" | Personal data related to physical, mental and psychological health. |
|
|
"Genetic Data“ | Personal data relating to inherited or acquired genetic characteristics acquired through biological sample analysis. |
|
|
"Biometric Data" | Personal data resulting from a specific technical treatment related to physical, psychological or behavioral characteristics such as face image, or genetic fingerprint. |
|
|
“Personal Data Subject” | means a natural person who can be identified through his personal data. .i.e. Employees, Students, Prospective Students, Students’ Representatives; |
|
|
"Processing" | means an operation or set of operations performed on personal data, including collecting, recording, analyzing, organizing, storing, modifying, altering, retrieving, reviewing, coordinating, combining, withholding, deleting, canceling, or disclosing it by sending, distributing, or transferring, or making it available by other means. |
|
|
"Personal Data Protection Law" | refers to the Personal Data Protection Law of the Sultanate of Oman, Royal Decree 6/ 2022 (”PDPL”); |
|
|
"Students" | refers to the individuals (considered children whenever under 18 years old and considered youth whenever 18 or exceeding 18 years old) enrolled in Academic and non-academic courses, extracurricular activities or services rendered by the school. |
|
|
"Prospective Students" | refers to Prospective Students who will potentially be enrolled at the School; |
|
|
"Students’ Representative" | refers to the individual(s) legally responsible for the Student(s) or Prospective Student(s) i.e. the Student’s parent or legal guardian; |
|
|
"Consent" | means consent granted by a person with full legal capacity; and should be written, explicit, clear, and specific to the processing of certain data; freely given by the personal data subject after being advised of the intended purpose or purposes of the processing, Consent will be provided by the Student’s Legal representative when the Student is a child. Consent shall be provided solely by the Student who is youth i.e. 18 or above 18 years old. |
|
|
"Online Platform" | means any website and/or online platform provided by the School; |
|
|
"The School" | means School’s exact name : The International School of Choueifat - Muscat( ISC Muscat); a company incorporated under Oman law to provide educational services to students enrolled at the School; |
| "Personal Data Breach" | means unlawful access to personal data leading to its unauthorised destruction, alteration, disclosure, access, or processing |
| "Online Platform" | means any website and/or online platform provided by the School; |
For the purposes described in this Privacy Notice, the School acts as the Data Controller, meaning it determines the purposes and means of processing Personal Data collected from Students, Prospective Students, and their Legal Representatives.
The School may be identified and contacted through the channels below:
School’s address: The International School of Choueifat — Muscat, P.O. Box 1104, Postal Code 111 C.P.O, Muscat, Sultanate of Oman
Personal Data Protection Officer E-mail: info@iscmuscat.sabis.net
Telephone Number:+968 2453 4000Data Protection Officer Civil No.: 105501082
As part of its educational activities, the School will collect and process the Personal Data identified below, with the following purpose and legal basis:
Student, Prospective Student, and Students’ Representatives’ Identification Data:
Types of data that enable the personal identification of the Data Subject who has any legal bond with the School – Students, Prospective Students, Students’ Representatives– consisting, for example, of full name, date of birth, nationality, place of birth, profession, home address, E-mail address, postal code, and telephone and/or cell phone number(s) along with vital statistics, vaccinations, passport copies.
Purpose: The Personal Data is collected in order to enable the proper identification of Students, Prospective Students, Students’ Representatives, that either have established or will establish a contractual relationship with the School.
Legal Basis: The processing of Identification Data is necessary for the performance of the contract between the School and the Data Subject, and to provide the educational and administrative services agreed under that contract
Students’ Representative Financial Data
Personal Data that allows the School to perform bank collection or compensation for the educational services provided or for the registration of Students or Prospective Students, consisting, for example, of bank details, payment information, and credit card details of the Students’ Representative.
Purpose: Student’s Representative Financial Data is collected to enable the School to properly and securely charge for its services.
Legal Basis: Student’s Representative Financial Data is processed as it is necessary for the performance of the contract between the School and the Personal Data Subject, including the processing of payments for educational services.
Data Concerning Health
Personal Data relating to certain health conditions of Students and Prospective Students. Including vaccination records where applicable.
Purpose: Data concerning health is collected to enable the School to ensure the safety and wellbeing of Students and Prospective Students, including emergency response, first aid support, and compliance with applicable health requirements and legal regulations imposed by governmental bodies in Oman such as the Ministry of Education.
Legal Basis: This data is processed based on the explicit consent of the Student’s Legal Representative (or the Student, where applicable), as well as to fulfill statutory legal obligations imposed by governmental bodies such as the Ministry of Education, and to protect the vital interests of the Student.
Student Performance Data
Data related to the Student's Academic performance, consisting, for example, of disciplinary and educational observations, evaluations, tests, reports of grades, and absences.
Purpose: Performance Data is collected to allow Students, their Representatives, and the School to be aware of the Student's pedagogical performance. Amongst the intended purposes are (i) supporting Student learning; (ii) monitoring Student learning performance; (iii) managing the educational services provided by the School to Students; and (iv) compliance with legal and regulatory obligations, which determine, for example, the measurement of Student grade averages and attendance.
Legal Basis: The processing of Performance Data is necessary for the performance of the contract between the School and the Data Subject, and for compliance with applicable legal and regulatory obligations
Photography and Filming
Images of Students’ and Prospective Students’.
Purpose: The images are collected in order to allow the School to properly identify its Students, Prospective Students during or prior to the provision of educational services, as well as to implement appropriate security measures on the school premises, via the CCTV system and others.
Legal Basis: We collect and process images and video recordings including CCTV footage to comply with Ministry of Education requirements and regulations.
Direct Marketing
Students, Prospective Students, and their Representatives may be asked to provide Personal Data, such as their name and E-mail address, for the purpose of receiving marketing communications by E-mail.
Purpose: The Personal Data provided is used to provide school-related information to the Personal Data Subject, who will be asked to affirmatively opt-in to E-mail marketing communications.
Legal Basis: Consent to receive marketing material.
The collection of Personal Data occurs in the following cases:
Data Provided by the Personal Data Subject:
Voluntary completion of registration forms, applications, or vacancy forms per Student’s Representative;
The School collects Personal Data only for specific and legitimate purposes and on the basis of a valid legal ground for processing. Personal Data will not be processed for purposes other than those specified in this Privacy Policy unless the School informs the Data Subject in advance and obtains any required legal basis for such further processing.
The collection of Personal Data occurs in the following cases:
Data Provided by the Personal Data Subject:
- Voluntary completion of registration forms, applications, or vacancy forms per Student’s Representative;
- Direct contact by E-mail, telephone, or any other form of electronic correspondence and/or letters;
- The Student, Prospective Student or his/her Representative voluntarily creates a profile on any of the School’s Online Platforms;
Through the completion of electronic or paper forms, evaluations, reports, tests, simulations, notes, and attendance lists, as well as taking part in interviews and meetings, all of which are deemed a necessary part for the educational services contracted and are submitted by the Student, the Student’s Representative to one of the School’s agents.
Internet Trackers:
The Personal Data Subject’s personal information is electronically collected for statistical purposes and for the improvement of the School website, using cookies (files stored in the Personal Data Subject’s browser). The School and its service providers may also use other tracking technologies for website management and user tracking.
Online Platforms:
The School uses third-party online platforms and software in the delivery of its educational services. Some of these platforms are operated by external service providers. Please note that this Privacy Policy does not apply to third-party software. This Privacy Policy does not govern the practices of third parties, including the School’s partners, third-party service providers, and/or advertisers, even when those services are branded as or provided on behalf of the School.
Third Parties:
This consists of the collection of Personal Data that is provided by and/or shared with authorized third parties or government agencies, including:
- Doctors, therapists, speech therapists, and other health professionals, always with the explicit Consent of the Student’s Representative and in his/her best interest;
- Other educational establishments;
- Government bodies and regulatory authorities.
In the case of medical emergencies, Personal Data may be processed without consent where necessary to protect the vital interests of the Student.
Personal Data from third parties will be properly analyzed by the School in order to ensure that the information has been collected and is being shared on a legal and/or regulatory basis and is accurate and up to date.
However, in order to provide a healthy environment for its Students, the School will publicize guidelines among its Students, and their representatives on sharing images and footage of minors, reminding all those participating in the School environment of the provisions in this Privacy Notice, including:
• Reminding Students’ and their Representatives about their option of updating their Consent preferences for any data processing operation involving the Students.
• Requesting that photographs and footage of Students that are taken during the School’s social events must not be shared on social media without prior authorization from the Student’s Representative.
Reminding Students and their Representatives about the terms of this Privacy Notice.
The School recognizes the need to safeguard the Personal Data and the privacy of its Students and both at school and on social media.
The use of Student images for marketing or promotional purposes shall be based on the prior consent of the Student’s Legal Representative, which may be withdrawn at any time.
The processing of Students’ Personal Data will be restricted to the purposes outlined above in Clause 3 and in accordance with this Privacy Notice.
Where consent is required for the processing of Students’ Personal Data, such consent shall be obtained in accordance with applicable data protection requirements. Students (or their Legal Representatives, where applicable) may withdraw their consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
Access to the Personal Data of Students, Prospective Students, and their Representatives will be restricted to authorized personnel to the specific function of developing the process of enrollment, selection, and rendering of educational services provided by the School.
The School implements appropriate administrative, technical, organizational, and physical measures to protect Personal Data under its control, including secure systems and restricted access to data.
Personal Data is retained only for as long as necessary to fulfill the purposes for which it was collected, including the provision of educational services and compliance with legal and regulatory obligations. Once such purposes are fulfilled, the School will securely delete or anonymize the Personal Data in accordance with applicable laws.
The School may engage third-party service providers (data processors) to store or process Personal Data on its behalf. In such cases, these providers are required to process Personal Data only in accordance with the School’s documented instructions and to implement appropriate confidentiality and security measures.
The School may share Personal Data with third parties where necessary for the purposes described in this Privacy Notice, including:
Public authorities, courts, and regulatory bodies, where required to comply with applicable laws, regulations, or legal processes;
• Service providers (data processors) who process Personal Data on behalf of the School for the provision of educational services, system operations, or support functions;
• Relevant parties where necessary to prevent fraud, ensure security, or protect the rights of the School, Students, or others.
Where Personal Data is shared for purposes not described in this Privacy Notice, the School will obtain consent from the Data Subject where required under applicable law.
The School may transfer Personal Data to service providers located outside the Sultanate of Oman. In such cases, the School ensures that appropriate safeguards are implemented to protect Personal Data in accordance with the royal decree 2022/6 issuing the Personal data protection law.
As the School is a member of the SABIS® School Network, the Personal Data may be transferred outside the territory of the Sultanate of Oman:
- The Personal Data is securely replicated to the databases located in Microsoft Cloud Services in Ireland. This is done to provide Students and their Representatives with access to SABIS® Applications and to support Students’ learning by monitoring and following up on their academic and non-academic performance, including but not limited to, exam results, attendance and discipline records, school calendar, study material, and SABIS® Student Life Organization (SLO) participation. The replicated Personal Data will also be used to run analytics/statistics on Students, sections, classes, and overall School’s academic performance.
- Further to the School’s requests and instructions, Authorized employees in SABIS Educational Services S.A.L. Adma, Lebanon (SES Leb), and SES Inc. have access to the replicated data in order to operate, develop, improve, deliver, or troubleshoot the Online Platform and provide and support the School with various technical and educational services.
- The School utilizes OneDrive and SharePoint storage in Azure Europe to store and back up its data. The data stored on SharePoint is encrypted and can only be accessed by authorized IT personnel from SES Leb, which is strictly for disaster recovery. Furthermore, the School’s data stored in Azure Cloud is backed up using the Azure backup tool and stored in Azure.
Personal Data Subjects have rights in relation to the processing of their Personal Data, among them:
- Revoke consent to processing of their personal data, without prejudice to the processing that took place prior to the revocation.
- Request to amendment, updating or withholding of their personal data.
- Obtain a copy of their processed personal data.
- Transfer their personal data to another controller.
- Request the deletion of their personal data unless this processing is necessary for national archiving and documentation.
- Be notified of any breach or violation of their personal data and the actions that have been taken in this regard.
If the Personal Data Subjects choose to exercise any of the rights described above, or if they have any questions about how the processing of their Personal Data flows, they may contact the School’s Personal Data Protection Officer through the channels highlighted in Item 2 of this General Privacy Notice.
The Student’s, Prospective Students and the Student’s Representative(s) is (are) responsible for the accuracy of the information provided during the registration process with the School.
The School may update this Privacy Notice from time to time to reflect changes in applicable laws, regulations, or its data processing practices.
In the event of material changes, the School will notify Students, Prospective Students, and their Legal Representatives and, where required by applicable law, obtain updated consent for the processing of Personal Data.
For any questions regarding this Privacy Notice, please contact the School through the channels provided in Item 2.