Organised by OITE

Privacy Policy

Last updated: 28 October 2026

This policy explains what personal data we collect when you visit this website, use the official OOC app (iPhone and Android), or register for the Oman Obstacles Challenge (OOC) at the Bidiya Sands Carnival, why we collect it, who we share it with, how long we keep it, and the rights you have. We process personal data in line with Oman's Personal Data Protection Law, issued by Royal Decree 6/2022, and its executive regulations.

The short version: we collect what we need to run a safe, timed race. We do not sell your data, we do not use it for advertising, and the app contains no advertising or third-party tracking.

1. Who we are

The Oman Obstacles Challenge is organised by OITE, the events division of Arabian Research Bureau, Muscat, Sultanate of Oman ("OITE", "we", "us"). OITE is the controller of the personal data described in this policy. You can reach us about anything in this policy at info@oite.com.

2. What this policy covers

  • The website at ooc.oite.com, including the 3D course page.
  • The OOC mobile app for iPhone and Android.
  • Online registration and payment for the race, and the event itself (race pack collection, timing, results and safety).

3. What we collect

When you register

  • Identity: full name, date of birth, gender, nationality, and your national ID or passport number.
  • Contact: email address and mobile number.
  • Emergency contact: the name and phone number of someone we can call if you need help on race day. Please make sure they agree to share their details with us.
  • Medical declaration: your confirmation that you are fit to take part and any medical conditions, allergies or medication you choose to tell us about so the medical team can help you.
  • Race details: your category (Elite, Open, Team or Corporate), team or company name, T-shirt size, wave, bib number, registration number and race pack status.
  • Corporate entries: company name and invoicing contact details.
  • Runners aged 16 or 17: the name and contact details of the parent or guardian who gives consent.

Payments

Payments are processed by our licensed payment gateway. Your card details are entered on the gateway's secure page and go directly to the gateway. We never see or store your full card number or security code. We only receive a confirmation of the payment, the amount and a transaction reference.

On race day

  • Timing data: your start and finish times, obstacle penalties and ranking, linked to your bib number.
  • Check-in: a record that your race pack was collected when your QR code is scanned.
  • Incidents: if you receive first aid or medical care, a record of the care given.

In the OOC app

  • Finding your registration: when you look up your registration, the app sends your registration number and email address to our registration server over an encrypted connection. Your participant details (name, category, team, wave, start time, bib, race pack status) and entry QR code are then stored only on your phone, so they work without signal on race day.
  • Notifications (optional): if you allow notifications, the app creates a push notification token and sends it to our server together with your platform (iOS or Android), your language and, if you have looked up your registration, your registration number. We use it only to send race updates. Notifications are delivered through Expo's push service and Apple Push Notification service or Firebase Cloud Messaging.
  • Language preference, stored on your phone.

The app does not use your location, contacts, camera, microphone or photos, and contains no advertising or analytics SDKs.

On this website

  • We do not use advertising or tracking cookies, and we do not run analytics on this website.
  • Your language choice is saved in your browser's local storage so the site remembers it. It never leaves your device.
  • Fonts are loaded from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address.
  • Like any web server, our hosting keeps short-lived technical logs (IP address, browser type, pages requested and time) for security and troubleshooting.
  • If you use the "Notify me" button, your own email app sends us an email. We use your address only to tell you when registration opens.

4. Why we use it

  • Race administration: to process your entry and payment, assign waves and bibs, check you in and issue race packs and T-shirts.
  • Timing and results: to time your race and publish results.
  • Safety: so medical staff and marshals can help you, and so we can contact your emergency contact if needed.
  • Insurance: to arrange participant insurance cover for the event and to handle any claim.
  • Communication: to send you confirmations and important race information, and optional race updates in the app.
  • Legal obligations: to keep financial records and respond to lawful requests from authorities.

We rely on your consent (which you give at registration and can withdraw), on what is needed to provide the race you entered, on our legal obligations, and, in an emergency, on protecting your vital interests. Health information in your medical declaration is treated as sensitive data: we ask only for what is needed for your safety and limit access to the medical team and the race safety lead.

We do not use your data for automated decisions about you, and we do not use it for marketing by third parties.

5. Who we share it with

We share registration data with only two outside parties, and only what each one needs:

  • Our timing provider, which receives your name, bib number, gender, age group, category and team to time the race and produce results.
  • Our insurer, which receives the participant details required to provide event insurance cover and to handle any claim.

In addition, the payment gateway receives the payment details you enter on its page (see above), and we will disclose information to ambulance and hospital staff if you need emergency care, or to authorities where Omani law requires it. Our service providers that host our servers and email process data on our behalf under our instructions and may not use it for anything else.

Results: official results (name, bib, category, team and finish time or ranking) may be published on this website, in the app and at the venue. If you have a concern about being named in results, contact us before race day.

We never sell personal data.

6. How long we keep it

  • Registration, emergency contact and medical declaration: deleted or anonymised within 12 months after the event, unless needed for an open insurance claim or legal matter.
  • Payment and invoice records: kept for as long as Omani accounting and tax law requires.
  • Results: kept as the historical record of the race.
  • Push notification tokens: deleted when they stop working or within 12 months after the event.
  • Interest emails ("Notify me"): deleted once registration has opened and we have told you.

7. Data in the app and on your phone

  • In the app, My Race › "Sign out and remove from this device" deletes your registration details and QR code from your phone. This does not cancel your registration.
  • Uninstalling the app also deletes everything it stored on your phone.
  • You can switch notifications off at any time in your phone's settings.

8. Security

All connections to our website, registration system and app server use HTTPS encryption. Access to registration data is limited to staff who need it to run the race, and medical information is restricted further. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data, and we will notify you and the authorities of a breach where the law requires.

9. Your rights

Under the Personal Data Protection Law you can:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data, or to stop or restrict processing it;
  • withdraw your consent at any time (this does not affect processing already done, and we may then be unable to keep your race entry);
  • receive your data in a commonly used format;
  • complain to the Ministry of Transport, Communications and Information Technology, the authority responsible for personal data protection in Oman.

To use any of these rights, email info@oite.com from the address you registered with. We will respond within the time limits set by the law.

10. Transfers outside Oman

Some of our service providers (for example email, push notification and font services) may process data on servers outside Oman. Where that happens, we transfer only what is needed and only where the law allows it.

11. Children

The minimum age to race is 16. Runners aged 16 or 17 can only register with the consent of a parent or guardian. The website and app are not directed at children under 16.

12. Changes to this policy

We may update this policy, for example when registration opens or the race schedule is published. The date at the top shows the latest version. Significant changes will also be announced on this website.

13. Contact

OITE · Oman Obstacles Challenge
Muscat, Sultanate of Oman
Email: info@oite.com