Privacy Notice

Abraj Energy Services SAOG

Last updated: 06.05.2026

1. Introduction

Abraj Energy Services SAOG (“Abraj”, “we”, “us” or “our”) is committed to safeguarding the privacy of personal data entrusted to us. This Privacy Notice explains how we collect, use, share, transfer and protect personal data in connection with our website at abrajenergy.com, our digital platforms, our offices and operational sites, our recruitment activities, and our broader business interactions with customers, suppliers, contractors, investors, visitors and other stakeholders.

This Notice applies to Abraj Energy Services SAOG and to each entity in which Abraj directly or indirectly controls fifty percent (50%) or more of the share capital, or otherwise has the ability to direct its management and policies (together, the “Abraj Group”).

For the purposes of applicable data protection law, including the Sultanate of Oman’s Personal Data Protection Law (Royal Decree No. 6/2022) and its Executive Regulations, Abraj acts as a data controller in respect of the personal data described in this Notice. Where Abraj processes personal data on behalf of a customer or partner under a contract, Abraj acts as a data processor and the relevant contract governs that processing.

Please take the time to read and understand this Notice. By accessing our website, communicating with us, visiting our premises, applying for a role, or otherwise providing personal data to us, you acknowledge the practices described below.

2. Scope of this Notice

This Notice covers the collection and use of personal data in the following contexts:

•   Our public website abrajenergy.com and any other websites we operate that link to this Notice;

•   Software applications, portals and digital tools we make available to customers, suppliers, contractors, investors and employees;

•   Our official social media pages (such as LinkedIn and X) where we interact with the public;

•   Email, telephone, video conferencing and other communications with our personnel;

•   Visits to our offices, rig sites, yards, bases and other operational facilities (including CCTV monitoring, access control and visitor registration);

•   Tender, prequalification, procurement and contracting processes;

•   Investor relations activities, including shareholder communications and disclosures required by the Muscat Stock Exchange and the Financial Services Authority;

•   Recruitment, onboarding and HR activities (covered in more detail in our Recruitment Privacy Statement, where applicable).

Where a specific Abraj service, application or campaign processes personal data differently, additional or supplementary privacy notices will be made available at the point of collection.

3. Personal Data We Collect

The personal data we collect depends on the nature of your interaction with Abraj. It may include:

3.1 Information you provide to us

•   Identification and contact details: full name, nationality, date of birth, civil ID or passport number, residential address, telephone number and email address;

•   Professional information: employer, job title, professional qualifications, certifications and work history;

•   Commercial and financial information: bank account details, billing details, tax identification numbers, vehicle and licence information, and other information necessary for contracting or payment;

•   Health, safety and competency information for personnel accessing our operational sites (for example, medical fitness, HSE inductions, personal protective equipment requirements and training records);

•   Correspondence and feedback you submit through forms, emails, surveys, customer service channels or our website.

3.2 Information we collect or generate about you

•   Records of our relationship with you, including contact history, contracts, purchase orders and meeting notes;

•   Information collected through monitoring and call recording, including personal data captured through your use of our websites, portals and IT systems;

•   Information collected when you visit our premises, including CCTV footage, access logs, vehicle plate records and visitor sign-in records;

•   Technical information collected automatically when you access our websites, such as IP address, device identifiers, browser type, operating system, referring URLs, pages viewed and approximate location, gathered through cookies and similar technologies (see Section 9).

3.3 Information we receive from third parties

•   Information from your employer, sponsor or agent in the context of contracting, site access or service delivery;

•   Background screening, due diligence, sanctions and integrity checks from authorised providers, where lawful and necessary;

•   Publicly available information from regulators, official registries, professional networks and the media.

4. How We Use Personal Data

We use personal data for the purposes described below. In each case, we rely on one or more lawful bases under applicable data protection law, including your consent, performance of a contract, compliance with a legal obligation, protection of vital interests, or our legitimate interests as an energy services company.

•   To respond to enquiries, requests for information and feedback submitted through our website or other channels;

•   To enter into and perform contracts with customers, suppliers, contractors and partners, including procurement, invoicing, project execution and after-sales support;

•   To carry out drilling, well services, integrated project management and other operational activities safely and efficiently;

•   To manage health, safety, security and environmental requirements at our offices, rig sites and other facilities, including emergency response;

•   To monitor and protect our systems, websites, networks and premises against unauthorised access, fraud, theft and other security risks;

•   To conduct due diligence, sanctions screening, anti-bribery, anti-money laundering and other integrity checks on counterparties and their personnel;

•   To manage investor relations, including shareholder registers, dividend payments, general meetings and regulatory disclosures;

•   To administer recruitment processes, evaluate candidates and manage the employment lifecycle;

•   To send service communications, contractual notices, tender updates and (where you have agreed or where otherwise permitted by law) marketing communications about our services and events;

•   To comply with legal, regulatory and reporting obligations applicable to Abraj as an SAOG listed on the Muscat Stock Exchange and as an oilfield services operator in Oman and other jurisdictions;

•   To establish, exercise or defend legal claims, and to manage disputes and investigations;

•   To analyse, develop and improve our website, services, processes and customer experience.

5. How We Share Personal Data

We do not sell personal data. We share personal data only as described in this Notice or as otherwise permitted by law, and only to the extent necessary for the relevant purpose. Recipients may include:

•   Other entities within the Abraj Group, for the purposes described in this Notice;

•   Customers and operators (such as national and international exploration and production companies) where personal data is required to deliver contracted services or to access their facilities;

•   Suppliers, subcontractors and joint-venture partners involved in the delivery of drilling, well services or integrated project management activities;

•   Professional advisers, including legal, audit, tax, insurance, banking and consultancy firms;

•   IT, cloud, hosting, cybersecurity, communications and analytics service providers acting on our instructions;

•   Regulators, government authorities, courts, law enforcement and other public bodies where required by applicable law or to protect our rights;

•   Acquirers, investors and their advisers in the context of an actual or proposed corporate transaction (such as a merger, acquisition, financing or restructuring), subject to appropriate confidentiality protections.

Where we engage third parties to process personal data on our behalf, we require them, by contract, to implement appropriate technical and organisational measures and to process personal data only for the purposes we specify.

6. International Transfers

Abraj operates internationally and works with global suppliers, technology providers and partners. As a result, personal data may be transferred to, stored or processed in countries outside the Sultanate of Oman, including jurisdictions that may not provide the same level of data protection as Oman.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place, which may include intra-group data transfer agreements, contractual commitments with external recipients, or transfers carried out with your consent or in reliance on another lawful mechanism permitted under applicable law.

7. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, tax, accounting, audit, contractual and reporting requirements, and to establish, exercise or defend legal claims.

Retention periods vary depending on the type of data and the context. When personal data is no longer required, we securely delete, anonymise or destroy it in accordance with our internal retention policies.

8. Information Security

Abraj implements reasonable organisational, technical and administrative measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These include access controls, network security, encryption where appropriate, employee training, vendor risk management and incident response procedures.

No method of transmission over the internet or method of electronic storage is fully secure. If you have reason to believe that your interaction with Abraj is no longer secure, please contact us immediately using the details in Section 12.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the site, remember your preferences, analyse traffic and improve performance. Some cookies are strictly necessary for the website to function; others are used only with your consent.

You can manage your cookie preferences through your browser settings or, where available, through the cookie banner on our website. Disabling certain cookies may affect the functionality of the site. Further information is set out in our Cookie Policy.

10. Your Rights

Subject to applicable data protection law, including the Oman Personal Data Protection Law, you may have the following rights in relation to your personal data:

•   To be informed about how we process your personal data;

•   To access the personal data we hold about you and to obtain a copy of it;

•   To request correction of inaccurate or incomplete personal data;

•   To request deletion of personal data where there is no lawful basis for us to continue processing it;

•   To object to, or request restriction of, certain processing activities;

•   To withdraw consent at any time where we rely on your consent (without affecting the lawfulness of processing carried out before withdrawal);

•   To opt out of receiving direct marketing communications from us;

•   To request transfer of your personal data to another controller, where technically feasible;

•   To lodge a complaint with the competent supervisory authority in Oman or the relevant authority in your jurisdiction.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity and request additional information to process your request, in accordance with applicable law.

11. Third-Party Websites and Services

Our website and digital platforms may contain links to websites and services operated by third parties, including partners, regulators, social media platforms and payment providers. This Notice does not apply to those third-party websites or services. We encourage you to review the privacy notices of any third party before submitting personal data to them.

12. Children’s Privacy

Our website and services are intended for adults in a business context and are not directed at children. We do not knowingly collect personal data from children. If you believe that we may have collected personal data from a child, please contact us so that we can take appropriate action.

13. Changes to this Notice

We may update this Privacy Notice from time to time to reflect changes in our operations, our use of personal data, or applicable laws and regulations. The latest version will always be available on our website, with the “Last updated” date at the top of the Notice. Where changes are material, we will provide additional notice as appropriate.

14. Contact Us

If you have any questions, comments or concerns about this Privacy Notice, our processing of your personal data, or if you wish to exercise any of your rights, please contact:

Abraj Energy Services SAOG

Attention: Data Protection Officer / Legal Department

ABRAJ Energy Services SAOG
Building #500, Way #1308
Airports Heights, Al Seeb
Muscat, Sultanate of Oman

Email: info@abrajenergy.com

Telephone: +968 2450 9999

If you are not satisfied with our response, you may contact the competent data protection authority in the Sultanate of Oman.

‍