Privacy Policy

This Privacy Policy explains how Taha Ammar Sadiq Dahlan Law Firm and Legal Consultancy Company, operating under the trade name “DAHLAN & CO.”, collects, uses, stores, discloses, and protects personal data when you use its website or communicate with it through the website’s channels. The Company is the controller of the personal data it processes for the purposes set out in this Policy.

  1. Scope

This Policy applies to website visitors and persons who submit enquiries or contact requests or otherwise interact with the website’s content. Additional privacy notices or terms may apply to clients, job applicants, suppliers, and other persons, depending on the nature of the relationship and the purpose of the processing.

  1. Personal Data We May Collect
  • Identification and contact information, such as your name, organization, job title, email address, and phone number.
  • The content of your enquiry or message and any information or documents you choose to provide.
  • Technical data, such as your Internet Protocol address, device and browser type, operating system, time of visit, pages visited, security logs, and error logs.
  • Preference and consent data relating to cookies.
  • Any other data you voluntarily provide to us or that we need to collect to respond to your request or comply with a legal requirement.

Please do not submit sensitive data, confidential information, or original documents through the website’s contact form unless we have requested them or an appropriate and secure channel has been agreed for their transmission.

  1. Sources of Personal Data

We collect personal data directly from you when you complete a form or communicate with us, from your device and browser when you use the website, from technical service providers that operate or maintain the security of the website, and from publicly available sources or other parties where doing so is lawful and relevant to your request.

  1. Purposes of Processing

We process personal data for the following purposes:

  • Responding to enquiries and contact requests and identifying the appropriate team to handle them.
  • Conducting conflict-of-interest checks and the preliminary verification required before accepting any potential engagement.
  • Managing, operating, securing, and improving the website, its performance, and the user experience.
  • Preventing fraud, misuse, unauthorized access attempts, and investigating security incidents.
  • Maintaining records necessary to evidence communications, requests, consents, and compliance.
  • Fulfilling legal, regulatory, and professional obligations and enforcing or protecting lawful rights and legitimate interests.
  • Sending updates or introductory materials when requested or consented to, with the option to unsubscribe.
  1. Legal Bases for Processing

Personal data is processed on the basis of one or more lawful grounds, depending on the circumstances. These grounds may include your consent, taking steps at your request before entering into a contractual relationship, performing contractual obligations, complying with a legal obligation, pursuing a legitimate interest that does not conflict with your rights and interests, or any other ground permitted under applicable laws.

  1. Cookies

The website currently uses only strictly necessary cookies, in accordance with the Cookie Policy. Any non-essential cookies that require consent will not be activated in the future unless a consent management tool has first been made available to enable you to express and manage your choices.

  1. Disclosure of Personal Data

We may disclose personal data, to the extent necessary, to providers of hosting, development, technical support, cybersecurity, email, analytics, and website management services; professional advisers, auditors, and professional bodies; and governmental, judicial, or regulatory authorities where disclosure is required or permitted by law.

We do not sell your personal data.

  1. Transfers of Personal Data Outside the Kingdom

Certain technical services may require personal data to be processed or accessed from outside the Kingdom of Saudi Arabia. In such cases, the Company takes the necessary measures to ensure that any transfer or disclosure is carried out in accordance with the Saudi Personal Data Protection Law and its Implementing Regulations, is limited to the minimum extent necessary, and is subject to appropriate safeguards.

  1. Retention and Destruction

We retain personal data for the period necessary to achieve the purpose for which it was collected, comply with legal and professional obligations, manage disputes, and demonstrate compliance.

Once the data is no longer required, it will be securely destroyed or de-identified, unless applicable law requires it to be retained for a longer period. Retention periods vary depending on the nature of the data, the purpose of processing, and the associated risks.

  1. Data Security

The Company applies appropriate organizational, administrative, and technical measures to protect personal data against unlawful access, loss, damage, alteration, or unauthorized disclosure.

However, no method of electronic transmission or storage can guarantee absolute security. Appropriate channels should therefore be used when sending sensitive information.

  1. Your Rights

Subject to applicable legal provisions and exceptions, you have the right to:

  • Be informed of the legal basis and purpose for which your personal data is collected.
  • Access your personal data and obtain a copy of it in a clear and readable format.
  • Request the correction, completion, or updating of your personal data.
  • Request the destruction of your personal data where the applicable conditions are met.
  • Withdraw your consent where processing is based on consent, without affecting the lawfulness of any processing carried out before the withdrawal.
  • Submit a complaint to the competent authority in accordance with the applicable procedures.
  1. Exercising Your Rights and Submitting Complaints

To exercise your rights or ask questions about this Policy, please contact us at:

info@dahlanlaw.com

We may request information to verify your identity and protect your personal data before processing your request. Your request will be handled within the procedures and timeframes prescribed by applicable law.

If you are not satisfied with the handling of your request, you may submit a complaint to the Saudi Data & AI Authority (SDAIA), in its capacity as the competent authority.

  1. Children’s Data

The website is not specifically directed at children, and we do not intentionally collect their personal data through the website. If we become aware that a child’s personal data has been collected without an appropriate legal basis, we will take the appropriate steps to delete it or otherwise process it in accordance with applicable laws.

  1. External Websites and Services

The website may contain links to or embedded services provided by third parties. The Company does not control the privacy practices of those third parties, and you are advised to review their privacy policies before using their services.

  1. Updates to This Policy

The Company may update this Policy to reflect legal, technical, or operational changes. The updated version will be published on the website together with the date of the latest update and will take effect from the date of publication.

  1. Controller Details

Taha Ammar Sadiq Dahlan Law Firm and Legal Consultancy Company, a limited liability company, Unified National Number and Commercial Registration No. 7054426742, Zahran Business Center, Jeddah, Kingdom of Saudi Arabia.

Email:

info@dahlanlaw.com

  1. Language

This Policy has been prepared in Arabic and English. In the event of any inconsistency or conflict between the two versions, the Arabic version shall prevail.

 

Scroll to Top