This Privacy Policy applies to all personal data collected through saheeb.com, our mobile applications, and any services we provide (collectively, the "Services"). By using our Services, you acknowledge that you have read and understood this Privacy Policy. Saheeb is committed to protecting your privacy and handling your personal data in accordance with the laws of the Sultanate of Oman, including applicable data protection regulations. This policy describes our practices regarding the collection, use, storage, and disclosure of your information.

SAHEEB TECH VENTURES LLC (CR 1642589) acts as the data controller for personal data collected through our Services. As data controller, we determine the purposes and means of processing your personal data. For any questions about this Privacy Policy, our data practices, or to exercise your data rights, contact [email protected].

We collect information in the following categories: • Contact Information: Name, email address, phone number, and any details you provide when contacting us or submitting forms. • Waitlist Information: Name, email, phone number, and preferences (such as buyer/seller status for Saheeb Drive). • Device Information: Browser type, operating system, IP address, device identifiers, and general location data derived from IP address. • Usage Data: Pages visited, time spent on pages, links clicked, and interaction patterns with our website. We use Google Analytics, Meta Pixel, server-side conversion measurement, and privacy-safe session replay on Saheeb Drive to understand which campaigns, landing pages, and CTA paths lead to visits, waitlist joins, or contact requests. This measurement is configured not to intentionally capture form-field contents such as names, email addresses, phone numbers, or message text. • Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies (see Cookies section below). • Saheeb Drive Specific Data: If you join the Saheeb Drive waitlist, we collect car preferences, location preferences, and whether you intend to buy or sell vehicles. We do not collect sensitive personal data such as health information, religious beliefs, or government-issued identification numbers unless specifically required and with your explicit consent.

We process your personal data based on the following legal grounds under Omani law: • Consent: When you voluntarily provide information through forms with an explicit consent checkbox, or when you opt-in to marketing communications. You may withdraw consent at any time. • Legitimate Interests: For business operations, security, fraud prevention, and improving our services, where such interests are not overridden by your rights. • Contractual Necessity: When processing is necessary to provide services you have requested or to take steps at your request before entering into a contract. • Legal Obligations: When we are required to process data to comply with Omani laws and regulations, or to respond to lawful requests from authorities.

We use your personal data for the following purposes: • Service Delivery: To respond to your inquiries, process your requests, and provide our services. • Communications: To send you service-related notifications and, with your consent, marketing communications about our products and services. • Improvement: To analyze usage patterns, improve our website and services, and develop new features. • Security: To protect against fraud, unauthorized access, and other security threats to our services and users. • Legal Compliance: To comply with applicable laws, regulations, and legal processes in the Sultanate of Oman. • Business Operations: For internal administration, record-keeping, and business planning purposes.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances: • Service Providers: With trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep your information confidential. • Analytics and Measurement Providers: We use Google Analytics, Meta Pixel, Meta Conversions API when configured, and Microsoft Clarity for landing-page attribution, conversion measurement, CTA analysis, mobile behavior analysis, and privacy-safe replay of Saheeb Drive journeys. • Legal Requirements: When required by law, court order, or governmental authority in the Sultanate of Oman, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others. • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy. • With Your Consent: In any other circumstances where you have provided explicit consent to share your information. All third parties with whom we share data are contractually obligated to protect your information and use it only for the purposes for which it was shared.

Your personal data is processed with an Oman-first approach where feasible. Some operations may involve trusted providers in other jurisdictions (for example, hosting, email delivery, analytics, and operational tooling). When transfers occur, we implement appropriate safeguards, including: • Contractual controls with processors and service providers. • Transfer controls aligned with Omani Personal Data Protection Law requirements. • Additional consent or approvals where legally required. Contact [email protected] if you need details about specific transfer mechanisms.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows: • Contact Form Submissions: 2 years from the date of submission, unless an ongoing business relationship exists. • Waitlist Registrations: Until product launch plus 1 year, or until you request removal. • Marketing Consent Records: Until consent is withdrawn, plus records retained for 5 years for compliance purposes. • Website Analytics Data: 26 months in aggregate/anonymized form. • Legal and Compliance Records: As required by Omani law. After the retention period expires, we securely delete or anonymize your personal data.

Under Omani Personal Data Protection Law and its Executive Regulation, you have rights including access, rectification, erasure, portability (where applicable), withdrawal of consent, and objection to certain processing activities. To exercise your rights, contact [email protected]. We respond within the legally required timelines (up to 45 days unless law requires otherwise). Identity verification may be required before processing requests.

We use cookies and similar technologies to operate the website, remember preferences, and understand site usage. These include: • Essential Cookies: Necessary for the website to function properly. These cannot be disabled. • Attribution and Conversion Measurement: We use Google Analytics, Meta Pixel, Meta Conversions API when configured, and server-side measurement to understand which campaigns or landing pages lead to visits, waitlist joins, and contact requests. This measurement is configured to avoid intentionally sending form-field contents such as your name, email address, phone number, or message. • Analytics and Measurement Cookies: We use analytics cookies and privacy-safe session replay on public Saheeb pages, including Saheeb Drive, to understand page journeys, CTA clicks, mobile behavior, and conversion friction. • Preference Cookies: Remember your settings and preferences (such as language choice). Google Analytics, Meta, and Microsoft Clarity may process limited device, browser, and event information on our behalf and may involve cross-border processing subject to applicable safeguards. We do not intentionally send form fields such as your name, email address, phone number, or message content to these providers. Most browsers allow you to: • View cookies stored on your device • Accept or reject cookies (either all or certain types) • Delete cookies

Our Services are not directed at individuals under the age of 18 ("minors"). We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected]. If we become aware that we have collected personal data from a minor without parental consent, we will take steps to delete that information promptly. For Saheeb Drive and other products requiring account creation, users must be 18 years or older.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: • Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. • Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. • Security Assessments: We conduct regular security reviews and vulnerability assessments. • Incident Response: We maintain procedures for detecting, reporting, and responding to data security incidents. While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will: • Update the "Last Updated" date at the top of this policy. • Post the updated policy on our website. • For material changes that significantly affect your rights, we will provide prominent notice or seek your consent where required by law. We encourage you to review this Privacy Policy periodically. Your continued use of our Services after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Entity: SAHEEB TECH VENTURES LLC (CR 1642589) Registered HQ: Special Economic Zone at Duqm, Al Wusta, Oman Operational Office: Muscat, Oman We respond within legally required timelines.