Privacy Policy
1. Controller Identification
Entity Name: Mohammed Al-Khalawi Law Firm
Business Description:
A licensed law firm and legal consultancy operating in the Kingdom of Saudi Arabia, providing a wide range of legal services, including representation before judicial authorities and legal consultation across various areas of law.
Contact Information:
Address: Al Olaya District, Riyadh, Kingdom of Saudi Arabia
Phone: +966 530146448
Email: info@maalawsa.com
This section is based on the requirements set forth in the Guidance Manual for Developing and Preparing Privacy Policies, which requires the Controller to identify itself and provide contact details.
2. Personal Data We Collect and Process
We are committed to the principle of data minimization, collecting only the personal data necessary to achieve the specified purposes. Such data may include:
Identity and Contact Information
Full name
National ID/Iqama number
Address
Email address
Phone number
Case and Consultation-Related Information (Often Sensitive Data)
Any information or documents provided by the client within the context of the contractual relationship, which may include personal or sensitive data necessary for the provision of legal services.
Financial Information
Bank account details required for invoicing and payment of legal fees.
Job Applicant Information
Information contained in resumes, employment applications, and related recruitment documents.
3. Purpose of Data Collection and Legal Basis for Processing
Pursuant to Article 4 of the Executive Regulations of the Personal Data Protection Law (PDPL), data subjects must be informed of the purpose of collection and the legal basis for processing. We process your personal data for the following purposes and based on the legal grounds specified below:
| Purpose of Processing | Legal Basis for Processing (Pursuant to Article 10 of the PDPL) |
|---|---|
| Providing legal services, representing clients, and managing legal matters and cases | Performance of a contract (Engagement Agreement with the client) |
| Communicating with clients and issuing invoices | Performance of a contract |
| Compliance with legal and regulatory requirements (such as Anti-Money Laundering regulations) | Compliance with a legal obligation |
| Administration of employees and trainees | Performance of a contract (employment or training agreement) |
| Evaluating job applicants | Consent of the data subject (upon submission of an application) |
| Improving the user experience on our website | Legitimate interest (with the option to reject cookies) |
4. Rights of Data Subjects
The Personal Data Protection Law, particularly Article 4, and the Guidance Manual grant you several rights, which we are committed to facilitating:
Right to Be Informed
You have the right to know the legal basis and purpose for collecting your personal data.
Right of Access
You have the right to request a copy of the personal data we hold about you in a clear and readable format.
Right to Rectification
You have the right to request the correction, completion, or updating of inaccurate personal data.
Right to Erasure
You have the right to request the destruction or deletion of your personal data once the purpose of collection has been fulfilled or where you withdraw your consent, where applicable.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the contact details provided in Section (1).
5. Sharing and Disclosure of Personal Data
We do not share your personal data with third parties except where strictly necessary and in accordance with Article 20 of the Executive Regulations of the PDPL, including the following circumstances:
Judicial and Government Authorities
Where necessary for the execution of legal representation services or to comply with a legal or regulatory requirement.
Data Processors
We may engage third-party service providers (data processors), such as accounting system providers or cloud computing service providers. In such cases, we ensure through contractual agreements that these processors provide adequate safeguards for personal data protection in accordance with Article 17 of the Executive Regulations.
Experts and Co-Counsel
We may share relevant information with experts, consultants, or other lawyers working on the same legal matter when necessary for the provision of legal services.
6. Data Retention and Security
Retention Period
We retain personal data for as long as necessary to fulfill the purposes for which it was collected or for the retention periods required under applicable laws and regulations (including the Law of Advocacy and regulations governing commercial record retention).
Once retention is no longer required, the data will be securely destroyed in a manner that prevents its recovery or reconstruction, as outlined in the Guidance Manual.
Data Security
We implement all necessary organizational, administrative, and technical measures to ensure the security and protection of personal data in accordance with Article 23 of the Executive Regulations and the applicable controls issued by the National Cybersecurity Authority (NCA).
7. Personal Data Protection Officer
We have designated a Personal Data Protection Officer to oversee compliance with this Privacy Policy and applicable data protection laws.
For inquiries or requests concerning your data protection rights, please contact:
Name: Mohammed Al-Khalawi Law Firm
Email: info@maalawsa.com
8. Policy Updates
We reserve the right to review and update this Privacy Policy periodically. Any updated version will be published on our website, and the publication date shall constitute the effective date of the revised policy.