Privacy Notice
Last updated: May 2026
2.1: Who processes your data
Monjiz (trading name) is the data controller for personal data submitted through this website or provided in the course of a service enquiry or engagement. For data-related enquiries, contact: privacy@monjiz.com.
2.2: What data we collect
| Data type | Purpose | Legal basis |
|---|---|---|
| Contact and enquiry data (name, email, company, message) | Processing your service enquiry and responding to your request | Legitimate interests: taking steps at your request prior to a potential engagement |
| Engagement data (scope, correspondence, documents) | Delivering services under a signed engagement letter or proposal | Performance of contract |
| Advisor structured summary data (route, service fit, risk flags, contact details where submitted) | Assessing Advisor enquiries and routing them to the appropriate Monjiz follow-up path | Consent: explicit Advisor submission consent before storage or notification |
| Analytics data (browsing behaviour, device, page views) | Understanding how the website is used and improving its performance | Consent: via cookie consent banner |
| Marketing data (email address, preferences) | Sending updates, regulatory alerts, or content where you have opted in | Consent: explicit opt-in only; distinct from service-enquiry processing |
| Technical data (IP address, browser type, referral source) | Security, fraud prevention, and website diagnostics | Legitimate interests |
2.3: Enquiry data and marketing consent
Submitting an enquiry form or proposal request does not constitute consent to receive marketing communications. Marketing consent is collected separately and is always opt-in. You may opt out of marketing communications at any time by contacting privacy@monjiz.com.
2.4: Data retention
- •Enquiry data where no engagement follows: retained for 12 months, then deleted.
- •Engagement data (active and completed mandates): retained for 7 years from mandate close.
- •Analytics data: retained in accordance with Google Analytics 4 default settings (14 months).
- •Marketing data: retained until you withdraw consent or request deletion.
2.5: Third parties
Monjiz does not sell personal data. Data may be shared with:
- •Service providers acting as data processors on Monjiz's behalf, under appropriate data-processing agreements. Current processors include: HubSpot (CRM and lead management); Google Analytics 4 (website analytics); Resend (transactional email). Advisor beta processing uses final structured summaries only and does not store raw transcripts by default.
- •Oman government authorities where required to deliver a mandated service, only data necessary for the relevant submission.
- •Legal or regulatory authorities where required by law.
Monjiz uses Google Analytics 4 for website analytics. No marketing pixels are active at launch.
2.6: Your rights
Under the laws of the Sultanate of Oman, including the Personal Data Protection Law (Royal Decree No. 6/2022), you have rights in respect of your personal data. These include the right to access, correct, or delete your data, to object to certain processing, and to withdraw consent where consent is the legal basis. To exercise any of these rights, contact privacy@monjiz.com. We will respond within 30 days.
2.7: Governing law
This Privacy Notice is governed by the laws of the Sultanate of Oman.