Scope

This policy applies to everyone who uses this website and its enquiry channels: the forms on the site, email to our published addresses and, when enabled, WhatsApp. It forms part of our Website Terms of Use. Use of the Invoice And Tax service by customers is covered by the customer agreement.

What is not allowed

  • Spam: unsolicited advertising, bulk or automated submissions, or repeated messages through our forms or channels.
  • Malicious code: uploading or sending viruses, malware or any code designed to harm or take control of systems.
  • Scanning and scraping: vulnerability scanning, load testing, or automated scraping or crawling that places an unreasonable burden on the site, unless we have agreed to it in writing. Normal search-engine indexing that respects robots.txt is welcome.
  • Impersonation: pretending to be another person or organisation, or giving false details about who you are or whom you represent.
  • Unlawful content: anything that is illegal in the Sultanate of Oman, infringes others' rights, or is defamatory, threatening or offensive.
  • Unauthorised access: any attempt to access the content management system (CMS), accounts or data without authorisation, to bypass security controls, or to probe for weaknesses.
  • Other people's data: sending us someone else's personal data without the right to do so.

How we protect the website

To keep the site available and secure, form submissions are rate-limited and filtered for spam and abuse, and repeated failed sign-in attempts to the CMS lead to a temporary lock-out. When enabled, a bot-protection check may be shown on forms. We may block traffic, discard submissions and, where required, report unlawful activity to the competent authorities. How this affects personal data is described in our Privacy Policy.

Reporting a security issue

If you believe you have found a security vulnerability, please report it responsibly to contact@invoiceandtax.com with the subject Security. Include enough detail for us to reproduce it, give us reasonable time to fix it before disclosing it to anyone else, and do not access, change or delete data that is not yours, or degrade the service while investigating. We will acknowledge good-faith reports. More about how we approach security is on our Security page.

Changes

We may update this policy; the version and effective date are shown at the top of the page.