This Privacy Policy describes how we collect, store, use and disclose personal information about you. This Policy applies to all personal information provided to us, whether through our website, from you directly, from third parties or by any other means.
By using our services and this website, you agree to us collecting, using, disclosing and storing your personal information in accordance with this Policy.
1. What Personal Information We Collect
Personal information is information that identifies you or relates to you as an identifiable person.
The types of personal information that we collect will vary depending on your relationship with us. The most common types of personal information that we may collect about you are:
- your contact information, such as your name, address, telephone number, and email address;
- your business contact information, including your job title;
- other personal information, such as your Saudi National Identity ID Number, financial details, and health data;
- your bank account or other financial information, if relevant to our engagement with you;
- recruitment information including your C.V and employment history; and
- any other information relating to you which you may provide to us.
2. How We Collect Personal Information
We may collect personal information directly from you or your authorised representative. For example, we may collect your personal information via telephone, email, or from the information you submit to us directly via our website or to enable us to provide our services to you.
We may also collect personal information about you from third parties, such as DWF, and from our partners or via publically available sources.
We may also collect information about your online activities automatically when you use our website and our services, usually from the use of cookies.
3. Why We Collect and Use Personal Information
We collect and use personal information for the purpose of:
- providing legal services to you, including initial client intake activities;
- managing our business operations and business relationships, whether in connection with the provision of legal services, the procurement of goods and servies, or in the course of employment;
- complying with our legal obligations, such as anti-money laundering and fraud prevention measures, tax reporting, and regulatory oversight; and
- communicating with you in respect of legal developments and the promotion of our legal practice;
- other purposes related to and/or ancillary to any of the above.
As a general rule, your personal information will be used only for the purpose that you have consented to. It may also be necessary to use your personal information without your consent such as where:
- it is necessary to achieve a real interest for you, and communication with you is impossible or difficult; or
- the disclosure is in accordance with a law, or in accordance with a prior agreement with you.
4. How We Store Personal Information
Safeguarding the privacy of your personal information is important to us. We take reasonable steps to keep your personal information secure, and to keep this information accurate and up to date.
Your personal information may be held and stored on paper, by electronic means, or both. We have physical, electronic and procedural safeguards in place for personal information, and take reasonable steps to ensure that your personal information is protected from misuse, interference, loss and unauthorised access, modification and disclosure.
5. With Whom we Share Your Personal Information
It may sometimes be necessary for us to share your personal information with other parties for the purposes listed in section 3 above. Those third parties include:
- third parties who assist us in providing our services, including IT and infrastructure service providers;
- our auditors and professional advisors;
- organisations who we are required to disclose your personal information to by law;
- our affiliates, in order to administer our services and conduct the other activities described in this Privacy Policy; and
- DWF, an international legal and professional services business. DWF provides us with a number of essential services relating to our time recording, data and file management. DWF provides some of these services outside the Kingdom of Saudi Arabia (in the United Kingdom) and also via its own independent service contractor relationships. For further details about DWF, and its locations please see here.
This sharing of your personal information may entail the cross-border transfer of your personal information, including from within the Kingdom of Saudi Arabia to recipients outside of the Kingdom of Saudi Arabia, and vice versa.
The level of personal information protection in the various jurisdictions varies, and in some instances may not provide levels of data protection equivalent to the Kingdom of Saudi Arabia. Where such transfer is necessary, we will implement appropriate procedures and safeguards to ensure that your personal information is held securely in accordance with this Privacy Policy and in accordance with the applicable data protection laws in the Kingdom of Saudi Arabia. These appropriate procedures and safeguards may include the placing of contractual obligations on third parties with whom we share your personal information to ensure that those parties safeguard your personal information and use it only for the purposes that we have specified.
Where applicable, we will obtain the consent of the relevant Data Authority before transferring your personal information outside of the Kingdom of Saudi Arabia.
If you have questions about the parties with which we share personal information, please contact us at the email address listed below.
6. How Long We Keep Your Personal Information
We will retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purpose of satisfying any legal, accounting or reporting requirements.
When we consider information is no longer needed and subject to our legal, regulatory and professional obligations, we will securely destroy your personal information.
7. Your Rights
If you are based in the Kingdom of Saudi Arabia, you have a number of legal rights in relation to the personal information that we hold about you. We respect your legal rights and aim to uphold those rights in everything that we do. Your legal rights include:
- Right to be Informed: The right to be informed of the legal basis and purpose for collecting your personal information.
- Right to Access: The right to receive a copy of your personal information free of charge (except for fees that may be prescribed under the Credit Information Law).
- Right to Rectification: The right to rectify, supplement or update your personal information held by us. If your personal information has been transferred to a third party, we will notify that third party of the change.
- Right to Destruction: The right to request the destruction of your personal information if it is no longer needed. However, please note that we may not always be able to comply with this request for legal reasons, such as where we are required to retain certain information for a period of time.
Please also note that when your personal information is processed only on the basis of consent, you may also withdraw consent at any time, although such withdrawal will not affect the lawfulness of processing occurring prior to such withdrawal.
If you wish to exercise any of these rights, please send a written request to us at the email address listed below.
8. Changes to this Privacy Policy
We may from time to time make changes to this Privacy Policy. Please check back regularly to keep informed of updates to this Policy.
9. Contact Details
If you have any queries or concerns relating to our Privacy Policy or our processing of your personal information please contact us via email at enquiries@alqhtanilaw.com or you can write to us at AlQhtani & Partners, Unit No. 7A, Ground Floor, Zone C, Building No. C03, Commercial Area No.6, Business Gate, Airport Road, Riyadh 11683, Kingdom of Saudi Arabia.
Last updated: 1 February 2024