Privacy Policy

We collect data you voluntarily provide when creating a citizen account, including your full legal name, National ID number (11 digits), email address, and phone number. We also collect data related to service applications you submit, including uploaded documents and form information.

The Embassy of the Republic of Sudan processes your data based on your explicit consent at registration, for the performance of official consular tasks, and for the provision of government services. Your National ID is required to verify your identity for consular service delivery.

Passwords are hashed using scrypt. Sessions use httpOnly cookies with SameSite flags to prevent CSRF. All communications are encrypted via TLS. Access to your data is restricted by strict role-based permissions. All administrative actions are recorded in an audit log.

We retain your account data for the duration of your active account. Application and consular service records are retained for at least 10 years per government archival requirements. Session data is cleared after 7 days of inactivity. Error diagnostics (excluding sensitive personal information) are deleted within 90 days.

You have the right to access your personal data, correct inaccurate information, request a copy of your data, and request account deletion (subject to legal record-keeping requirements). To exercise any of these rights, contact us through official channels.

For privacy inquiries, contact the Embassy's Data Protection Office at: privacy@embassy-sudan.om or by postal mail at the Embassy address in Muscat, Sultanate of Oman.