What Counts as Consent When You Collect a Phone Number?

A guest gives the front desk her mobile number so housekeeping can text when the room is ready. Three weeks later she gets a promotional SMS about a spa package she never asked for. That gap, between why she gave the number and what you did with it, is exactly what Oman's Personal Data Protection Law calls consent, and getting it wrong now carries real fines, not just an annoyed guest.

Two purposes, one phone number

Every front desk, service counter and booking form in Oman collects phone numbers all day. A polyclinic takes one to confirm an appointment. A dealership takes one to call when the car is ready. A delivery firm takes one so the driver can find the building. None of that needs a signature: it is consent tied to the job the customer just asked for, and it is understood the moment someone hands over their number for that purpose.

Marketing is a different question. Texting that same customer about a seasonal offer, a loyalty programme or a new branch is a second, separate use of the same number, and Oman's data protection law treats it that way. Guidance from the Ministry of Transport, Communications and Information Technology, which oversees the law, says consent for marketing must be written and in a form the customer can point back to later, not assumed just because the number is already on file.

Why the line got sharper this year

Two things raised the stakes recently. The grace period under the law's executive regulation ended in February 2026, so the Ministry now actively supervises complaints instead of waiting out a compliance runway. And in August 2026 the Telecommunications Regulatory Authority issued a regulation covering promotional calls, messages and value added services.

That rule sets an 8am to 9pm window for marketing contact, requires a working opt-out on every channel, and allows fines that can reach OMR 30,000 for serious breaches, doubled if the same business repeats the offence within a year. Businesses covered by the rule have six months from issuance to bring their practices into line. None of this changes how you collect a number for the job in front of you. It changes what you can do with it afterward, and what you need to be able to show if a customer complains.

The number a customer hands you for one job is not a standing invitation to sell them something else.

Four businesses, four numbers, two different yeses

The same principle plays out differently across a service floor. Here is how it looks for four businesses that already staff a phone line, with the kind of month a Muscat dealership's service desk might actually see.

How to ask properly, at the counter and online

Asking properly is less about paperwork and more about not bundling two different questions into one.

• At the counter, ask the marketing question out loud and separately: 'Would you like offers by text later, or just today's confirmation?' Let the customer answer either way without friction.
• Online, use two boxes, not one. One covers the transaction and is required. One covers marketing, is optional, and starts unticked.
• Never bury marketing consent inside terms and conditions a customer must accept just to finish a booking.
• If a customer messages you first on WhatsApp or SMS, that only covers replying to that conversation. It is not consent to send offers later.

What records to keep

• The date and channel consent was given: counter, phone call, website form or WhatsApp.
• The exact wording the customer saw or heard.
• Whether it covered operational messages only, or marketing too.
• Any later opt-out request, and the date you acted on it.

If consent happens over the phone, log it the way you would log a booking: who asked, what was said, when. Call handling systems that keep a timestamped note of the conversation, including the Omani Arabic phone agent CustomerCare.OM runs for hotels and clinics, save you from relying on someone's memory of a Tuesday afternoon call.

A consent column is really an extension of ordinary list hygiene, the same habit covered in five rules for the customer list you already have.

What this means for you

If your team already collects phone numbers all day for bookings, appointments, deliveries or repairs, you do not need to change how you take the number. You need to stop assuming it covers everything. Split the marketing question from the operational one, capture the answer in writing (a ticked box, a recorded line, a dated note), and give every customer an easy way to say no later. Ask plainly, write it down, honour the opt-out: that is the whole standard.

The bottom line

A phone number given for one job is not a blank cheque for every future message. Ask the marketing question separately, write down the answer, and keep that record as carefully as you keep the booking itself. It costs a few minutes a week, and it is the difference between a loyal customer and a complaint to the regulator.