01Introduction
Abdulelah Mohammed Almutawa Law Firm, Legal Consultancy & Notarization (the “Firm”, “we” or “us”) respects the privacy of visitors to its website and users of its forms. This policy explains the personal data we collect through the website, the purposes for which it is processed, how long it is retained, and your rights in relation to it, in accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443 AH, as amended, and its Implementing Regulations.
02Data Controller
- Controller
- Abdulelah Mohammed Almutawa Law Firm, Legal Consultancy & Notarization — Riyadh.
- Commercial Registration No.
- 7055105360
- Data enquiries
- [email protected] — 059 303 1333
- Data Protection Officer
- — to be updated if appointed —
03Data We Collect
A. Data you provide through the booking or contact form
- Your name, mobile number and email address.
- Your capacity (individual / business / foreign investor).
- The type of service requested, a summary of the matter, and the name of the other party if you provide it.
- Any documents you choose to upload.
- Your preferred appointment and consultation method.
B. Technical data collected automatically
- IP address, browser and device type, date and time of the visit, and the pages viewed.
- Cookies necessary for the website to operate, and analytics cookies if any. Analytics tools used: — to be updated —
04Purposes of Processing
We process your data for the following purposes only:
- Reviewing your request and contacting you to confirm the appointment.
- Checking for conflicts of interest before accepting the matter.
- Providing the requested consultation or service if the request is accepted.
- Fulfilling the statutory and professional obligations imposed on the Firm.
- Improving the website’s performance and security.
We do not use your data for marketing purposes without your separate consent, which you may withdraw at any time.
05Legal Basis for Processing
- Your consent when you submit the form.
- Performing your request or an agreement to which you are a party.
- Complying with a legal obligation binding on the Firm.
06Retention Period
- Requests that do not become a case file
- Retained for — to be updated — and then destroyed, unless retention is required by law.
- Requests that become a case file
- Subject to the retention periods for client files prescribed by law and professional rules.
- Technical data
- Kept for — to be updated — and then deleted or anonymised.
07Data Sharing
We do not sell or rent your data. We may share it, only to the extent necessary, with:
- Technical service providers (hosting, email) bound by confidentiality and data-protection obligations. Provider names and hosting locations: — to be updated —
- Government or judicial authorities where required by law.
- Any other party with your explicit consent.
Transfers outside the Kingdom: We do not transfer your data outside the Kingdom except in the cases, and subject to the controls, permitted by the Law and the Personal Data Transfer Regulation.
08Data Security
We apply appropriate organisational and technical measures to protect data against unauthorised access, loss or alteration, and we restrict access to the members of the Firm’s team who need it. All staff are bound by professional confidentiality. In the event of a data breach, we follow the notification procedures set out in the Law.
09Your Rights
The Personal Data Protection Law grants you the following rights:
- Right to be informed
- Of the legal basis for, and purpose of, collecting your data.
- Right of access
- To view the data we hold about you and obtain a copy of it.
- Right to rectification
- To request that your data be corrected, completed or updated.
- Right to destruction
- To request the destruction of your data once it is no longer needed, unless there is a legal ground for retaining it.
- Right to withdraw consent
- At any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights
Email us at [email protected], and we will respond within the period set by the Regulations.
You may also lodge a complaint with the competent authority (the Saudi Data & AI Authority, “SDAIA”) if you believe your data has been processed in breach of the Law.
10Cookies
We use cookies that are necessary for the website to operate. You can set your browser to refuse them, although this may affect some features.
The list of cookies and analytics tools, if any, and the mechanism for consenting to them: — to be updated —
11Updates to This Policy
We may update this policy when the law or our practices change. We will publish the updated version on this page together with the date of the last update.
12Contact
Privacy requests and enquiries
For any enquiry about this policy or any request concerning your personal data: