Privacy Policy

This Policy explains how Darb Legal Law Firm and Legal Consulting collects, uses, retains and shares personal data when you use the website www.darblegal.com, contact the Firm or deal with it. This Policy serves as notice of the processing of data, and the Firm seeks your separate consent where the law requires consent. This Policy forms part of the “Terms & Conditions” published on the website.

1. Scope of This Policy

1.1 This Policy applies to the data of website visitors, service applicants, clients and their representatives, and anyone who contacts the Firm.

1.2 Data the Firm receives about other parties in the course of legal work, such as opposing parties and witnesses, is handled by the Firm as the work and its professional duties require.

2. Data We Collect

2.1 Identification and contact data: name, national ID, iqama, passport or commercial registration number where needed, capacity, the entity you represent, phone number, email, address, and beneficial owner and source of funds details where needed.

2.2 Matter data: description of the request, documents, correspondence and information relating to the legal work.

2.3 Financial data: transfer, payment and invoice details.

2.4 Technical data: IP address, device and browser type, pages you visit, and cookie data.

2.5 Sensitive data: matter data may include sensitive data, such as health or credit data or data relating to criminal records and judgments, which the Firm processes to the extent necessary for the legal work and in accordance with the specific legal controls that apply to it.

3. How We Collect Data

3.1 Directly from you through the website forms, email, phone, meetings or the Firm’s electronic system.

3.2 From the client or its representative, or from official authorities and lawfully available sources, as the work requires.

3.3 Automatically when you browse the website, through cookies and analytics tools.

4. Purposes of Use

The Firm processes data to perform its contract with the client or to take steps at the client’s request before contracting, to meet its legal obligations, to pursue its legitimate interests, and with the data subject’s consent where the law requires it, in order to:

4.1 Respond to and review enquiries and requests.

4.2 Carry out conflict-of-interest checks and verify identity and capacity.

4.3 Prepare quotations and fee agreements, provide legal services and manage files.

4.4 Handle invoicing, collection and account management.

4.5 Communicate with you about the Firm’s services, updates and offers.

4.6 Meet legal obligations and respond to requests from competent authorities.

4.7 Protect and defend the Firm’s rights.

4.8 Operate and develop the website and improve services.

4.9 Mention the name of the client or of the entity subject to the service, and its logo, among the Firm’s clients, in accordance with the engagement terms.

5. Sharing Data

5.1 The Firm does not sell your personal data.

5.2 The Firm may share data, to the extent necessary, with: courts and judicial, governmental and official authorities; lawyers, experts, translators, notaries and others the Firm engages in the work; technical and administrative service providers, such as hosting, email, electronic systems and payment services; and entities related to the Firm with which it shares systems or administrative and accounting services.

5.3 The Firm may disclose data whenever a competent authority requests it, the law requires it, or it is necessary to protect the Firm’s rights.

6. Storage and Transfer Outside the Kingdom

Data is kept in the electronic systems used by the Firm and in cloud computing services that may be located inside or outside the Kingdom of Saudi Arabia, and the Firm applies the requirements and safeguards prescribed by law to any transfer of data outside the Kingdom.

7. Retention and Destruction

The Firm retains data for as long as necessary to fulfil its purposes, for any period required by law, or as needed to protect its rights, and then destroys it or removes what identifies the individuals concerned.

8. Data Protection

8.1 The Firm takes reasonable technical and organisational measures to protect data.

8.2 The security of data transmitted or stored over the internet cannot be fully guaranteed, and the Firm bears no liability for any unauthorised access, breach or loss of data, to the extent permitted by law.

9. Cookies

The website uses cookies that are necessary for its operation, and cookies and analytics tools to improve it and measure its use. You may disable the non-essential ones in your browser settings, which may affect how some parts of the website work.

10. Introductory Messages

Subject to obtaining your consent where the law requires it, the Firm may send messages introducing its services, updates and offers to the contact details you have provided, from its official email or electronic system. You may stop them at any time through the unsubscribe link in the message or by emailing the Firm; this does not cover communications relating to ongoing work or existing obligations.

11. Data Subject Requests

Under the Personal Data Protection Law, you may ask to access your data or obtain a copy of it, to correct or destroy it, or to withdraw your consent, by emailing the Firm. The Firm may verify your identity before acting on the request, and considers it within thirty (30) days, which it may extend by a further thirty (30) days by notifying you of the reasons for the extension, taking into account its legal and professional obligations and its right to retain the data it needs. Withdrawing consent does not affect processing carried out before it, the entitlement to fees or your contractual obligations, and the Firm may terminate the service if it cannot be provided without that data.

12. Minors

The website is not directed at persons under eighteen, and the Firm does not knowingly collect their data except through their guardian or legal representative in connection with legal work.

13. Changes to This Policy

The Firm may amend this Policy at any time, and amendments take effect from the date of their publication on the website. Your continued use of the website or dealings with the Firm after publication constitutes acknowledgement of the amended Policy.

14. General

The Arabic text of this Policy is the authoritative version and prevails over any translation.

15. Contact

For enquiries about this Policy or to submit any request about your data: contact@darblegal.com — King Fahd Road, Al Murabba District, Riyadh 12612, Kingdom of Saudi Arabia.

Version 1.1 · This is a translation; the Arabic text prevails.