Privacy Policy

1. Purpose and Scope

SONAT Offshore respects the privacy of individuals whose personal data we process and is committed to handling such data lawfully, fairly, securely, and transparently.

This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal data in connection with:

• sonatoffshore.com and associated website pages;
• enquiries submitted through the Site;
• requests for information, capability statements, or demonstrations;
• subscriptions to corporate updates;
• recruitment and talent-pool registrations;
• communications with clients, prospective clients, partners, contractors, suppliers, consultants, and other professional contacts;
• official SONAT Offshore social-media channels; and
• other interactions that expressly refer to this Privacy Policy.

This Policy is intended to operate in accordance with applicable privacy and data-protection legislation, including, where applicable, the Egyptian Personal Data Protection Law No. 151 of 2020 and its implementing regulations. This Policy does not ordinarily govern personal data processed within client-specific offshore projects, drilling-management engagements, inspections, digital-platform implementations, or other contracted services where separate contractual data-protection provisions, project notices, or data-processing agreements apply.

2. Data Controller

For personal data processed through the Site for SONAT Offshore’s own purposes, the data controller is:

Where applicable law requires the appointment, registration, or designation of a data protection officer or other responsible privacy representative, privacy requests received through the above contact details will be directed to the appropriate responsible person.

3. Personal Data We Collect

We seek to collect only personal data reasonably necessary for legitimate business purposes.

3.1 Contact and Business Enquiries

When you contact SONAT Offshore, request information, request a capability statement, request a demonstration, or submit the Site contact form, we may collect:

• full name;
• email address;
• telephone number, where provided;
• company or organization, where provided;
• the content of your enquiry or message;
• business context reasonably relevant to your request;
• related correspondence; and
• other information you voluntarily provide.

We use this information to respond to you, assess your requirements, and, where appropriate, discuss a potential commercial relationship.

3.2 Digital-Platform and Demonstration Enquiries

Where you request information concerning SONAT Offshore digital platforms, including Sonat OS, AssetOS, ProjectOS, or future digital products, we may process business contact details and information necessary to organize demonstrations, evaluate requirements, and discuss potential commercial arrangements. Demonstration requests do not create any contractual commitment.

3.3 Newsletter and Corporate Updates

If you expressly subscribe to corporate communications, the Site currently requests your email address. We may also process subscription status, communication preferences, and delivery or unsubscribe records. You may unsubscribe at any time through the mechanism provided in our communications or by contacting us. We do not treat a general business enquiry as consent to receive marketing communications.

3.4 Recruitment and Talent Pool

Where the Site permits registration of interest in employment, consulting, or project-mobilization opportunities, the recruitment form may collect information including:

• name;
• contact details;
• nationality where relevant to mobilization or work-authorization requirements;
• current position and company;
• professional experience;
• years of offshore experience;
• earliest availability;
• cover note or professional profile;
• curriculum vitae (CV);
• professional qualifications;
• professional certificates and supporting documents;
• cover letter or professional profile; and
• other information voluntarily submitted.

The Site requires an affirmative recruitment-consent acknowledgment before a recruitment application is intended to be submitted. With appropriate authority or consent, we may verify professional qualifications, certificates, and references. Registration with a talent pool does not create employment, consultancy, mobilization, or engagement rights. Please avoid submitting unnecessary sensitive personal data through recruitment forms or uploaded documents.

3.5 Business and Professional Contacts

If you represent a client, prospective client, operator, rig owner, investor, partner, supplier, contractor, consultant, classification organization, financial institution, or other business stakeholder, we may process professional contact details, role and organization, correspondence, meeting information, commercial and contractual records, due-diligence information, and compliance information reasonably necessary for the business relationship. This may include information required for sanctions screening, anti-bribery and corruption controls, conflict-of-interest reviews, vendor qualification, and other lawful compliance procedures.

3.6 Technical and Website Data

When you use the Site, the website host, content-delivery network, security provider, and other technical service providers may automatically process information such as:

• IP address;
• browser type;
• operating system;
• device information;
• date and time of requests;
• requested pages and resources;
• referring page;
• network and security information; and
• security or diagnostic logs.

This information is used to deliver, maintain, troubleshoot, secure, and improve the Site. As of the effective date of this Policy, the public Site is not intended to deploy advertising pixels or cross-site behavioral tracking scripts. Production hosting and security providers may nevertheless process ordinary server, network, and security logs as part of providing their services.

4. Sources of Personal Data

We obtain personal data principally:

• directly from you;
• from your employer or organization;
• from colleagues or authorized representatives;
• from recruitment agencies or professional networks;
• from referees and qualification-issuing bodies where verification is authorized;
• from public company registers, professional websites, and lawful compliance databases;
• from clients, contractors, or project partners where relevant to a legitimate business engagement; and
• automatically from technical systems when you use the Site.

Where you provide personal information concerning another person, you should ensure that you are authorized to do so.

5. Purposes and Legal Bases

Depending on applicable law and the circumstances, SONAT Offshore may process personal data to:

• respond to enquiries;
• provide requested corporate information;
• evaluate prospective business relationships;
• take steps requested before entering into a contract;
• perform contractual obligations;
• manage existing professional relationships;
• evaluate candidates and potential project personnel;
• administer suppliers and contractors;
• perform lawful due diligence and compliance checks;
• protect the Site and information systems;
• prevent fraud, misuse, and cyber threats;
• maintain business, accounting, and corporate records;
• establish, exercise, or defend legal rights;
• comply with regulatory, legal, and governmental requirements;
• administer corporate transactions; and
• send communications where permitted by law.

Where required, processing will rely on an appropriate legal basis, such as consent; steps taken at your request before contract; performance of a contract; compliance with legal obligations; or legitimate interests that are not overridden by applicable rights and interests. Where processing relies upon consent, consent may be withdrawn subject to applicable law.

6. Cookies and Similar Technologies

The Site may use cookies, local-storage technologies, or similar mechanisms that are strictly necessary for security, abuse prevention, network management, session functionality, website availability, or essential technical operation. The current public Site code does not intentionally deploy optional advertising, cross-site behavioral tracking, or third-party marketing analytics technologies.

If SONAT Offshore later introduces optional analytics, advertising, profiling, embedded third-party media, or other non-essential tracking technologies, we will update this Policy and implement appropriate notice, consent, or preference controls where required by applicable law. The technologies actually used in production should be confirmed against the live hosting and application configuration before publication of this Policy.

7. Service Providers and Disclosure

SONAT Offshore does not sell personal data.

We may disclose personal data where reasonably necessary to:

• website hosting, content-delivery, cybersecurity, repository/deployment, form-processing, email, newsletter, recruitment, document-storage, or other technology providers acting on our behalf;
• professional advisers, including lawyers, accountants, auditors, and insurers;
• banks and financial institutions where relevant to lawful business operations;
• present or future subsidiaries, affiliates, joint ventures, special-purpose entities, or project companies where disclosure is reasonably necessary and lawful;
• clients or project stakeholders where your professional profile is being considered for an authorized project role;
• governmental, judicial, regulatory, or law-enforcement authorities where legally required;
• persons involved in fraud, security, or legal investigations;
• counterparties and advisers involved in a legitimate financing, investment, merger, acquisition, restructuring, or asset transaction; or
• other recipients where disclosure has been authorized by you or is otherwise permitted by law.

Service providers processing data on our behalf are expected to be subject to appropriate confidentiality, security, and contractual requirements.

8. International Transfers

SONAT Offshore operates in an internationally oriented offshore industry and may engage with clients, suppliers, advisers, and service providers located outside Egypt. Personal data may therefore be transferred to or accessed from another country where necessary for legitimate business operations.

Where applicable law requires safeguards for an international transfer, SONAT Offshore will use appropriate legal, contractual, organizational, or regulatory measures. Data subject to Egyptian law will be transferred outside Egypt only in accordance with the Egyptian Personal Data Protection Law, its implementing regulations, and any applicable licensing, approval, or other regulatory requirements. We do not treat the mere use of the Site as blanket consent to unrestricted international transfers.

9. Data Retention

Personal data actually received by SONAT Offshore is retained only for as long as reasonably necessary for the purpose for which it was collected and to satisfy legal, contractual, accounting, regulatory, security, and dispute-management requirements. A form displayed on the Site does not, by itself, mean that SONAT Offshore receives or stores the information unless the submission functionality is enabled and successfully transmits the data.

• general contact and demonstration enquiries: ordinarily up to 24 months after the last substantive interaction, unless an ongoing relationship or legal requirement justifies longer retention;
• newsletter information: until consent is withdrawn or the subscription otherwise ends;
• talent-pool registrations: ordinarily approximately 12 months unless interest is renewed or a longer period is lawfully justified;
• business and contractual contacts: for the duration of the relationship and thereafter for the period required for legal, financial, contractual, and dispute purposes; and
• technical and security records: for periods reasonably necessary for cybersecurity, troubleshooting, and legal purposes.

Information may be retained longer where required by law, where a dispute is anticipated or ongoing, or where necessary to establish, exercise, or defend legal rights. Data may be retained indefinitely once irreversibly anonymized so that it no longer identifies an individual.

10. Security

SONAT Offshore applies reasonable technical and organizational measures designed to protect personal data against unauthorized or unlawful processing, unauthorized access, loss, misuse, alteration, disclosure, and destruction. Measures may include access controls, secure communications, appropriate authentication, confidentiality obligations, security monitoring, provider controls, and other protections proportionate to the nature and risk of the processing.

No internet-based system can be guaranteed to be completely secure. If a personal-data breach occurs, SONAT Offshore will take appropriate remedial action and make notifications required by applicable law.

11. Your Rights

Depending on the law applicable to your personal data, you may have rights to:

• obtain information concerning processing;
• request access;
• request correction or completion;
• request deletion where legally available;
• request restriction of processing;
• object to certain processing;
• withdraw consent;
• request portability where applicable;
• object to certain direct marketing;
• request review of decisions where automated-decision-making protections apply; and
• complain to the competent supervisory or data-protection authority.

To exercise a privacy right, contact info@sonatoffshore.com. We may request information that is reasonably necessary to verify identity and authority before acting on a request. Requests will be handled within the period required by applicable law. Where Egyptian law applies, complaints may also be made to the competent Egyptian personal-data-protection authority in accordance with applicable procedures.

12. Automated Decision-Making

SONAT Offshore does not intend to make solely automated decisions through the public Site that produce legal or similarly significant effects on individuals. Where automated functionality is introduced in the future, appropriate disclosures and safeguards will be implemented as required by law.

13. Children

The Site is directed toward businesses, industry professionals, and adult users. SONAT Offshore does not knowingly seek to collect personal data from persons under the age of 18 through its public corporate website. If such information is identified, appropriate steps will be taken in accordance with applicable law.

14. Digital Platforms and Client Projects

Data processed within Sonat OS, AssetOS, ProjectOS, or future SONAT Offshore platforms may be subject to separate contractual, security, privacy, and data-processing terms. Where SONAT Offshore processes personal data on behalf of a client as part of drilling-management services, offshore operations, engineering or inspection work, mobilization, rig reactivation, shipyard execution, operational-readiness activities, or other contracted services, the respective contract, project privacy notice, or data-processing agreement will govern the relevant processing to the extent applicable.

15. Corporate Transactions

In connection with a legitimate investment, financing, merger, acquisition, restructuring, joint venture, asset acquisition, asset disposal, or transfer of business, relevant personal data may be disclosed to professional advisers, financing sources, counterparties, or successor entities subject to appropriate confidentiality and legal safeguards.

16. Third-Party Websites

The Site may link to third-party websites, applications, or social-media services. Those services operate under their own privacy practices and terms. SONAT Offshore is not responsible for the privacy, cybersecurity, or content practices of third-party services it does not control.

17. Changes to this Policy

SONAT Offshore may update this Privacy Policy to reflect changes in legislation, regulatory guidance, corporate structure, technology, service providers, website functionality, or business operations. The current version and effective date will be displayed on the Site. Material changes may be highlighted or otherwise communicated where appropriate.