Last updated: 30 October 2026
1) Controller and how to reach us
Data controller: Law Office of Salem Khalaf Al Shammari — Advocacy & Notarization, Riyadh. Law-practice licence number: 46813.
For any privacy matter: email [email protected], or WhatsApp on 0558987102.
2) What the site actually collects
This site is a set of pages introducing the office and offering general legal information. It has no form that sends data to a server, no account registration, no request for a national ID number, and no document uploads.
The “Describe your matter” assistant runs only inside your browser: it arranges what you choose and type into a ready-made message, then opens WhatsApp so that you can review it and send it yourself. Nothing is stored on the site, and the office receives only what you choose to send.
Anything you send to the office by WhatsApp or email travels through those services in the usual way and is subject to their providers’ own policies.
3) Why we process data
- To reply to your enquiry and identify the right service and route.
- To meet professional and legal obligations if an engagement later arises; client files follow their own retention schedule.
Your data is never used for marketing messages, never added to a mailing list, never sold and never shared with advertisers.
4) Retention
Initial correspondence that does not lead to an engagement is kept only as long as needed to reply and follow up, and is then reviewed for deletion unless there is a legal reason to keep it. Client files and professional records are governed by professional and legal obligations.
5) Technical data and cookies
The hosting provider may automatically log general technical data, such as IP address, time of visit and the page requested, to operate and protect the site.
The site uses no cookies, no third-party analytics or tracking tools, and loads no font, image or script from outside the site.
6) Transfers outside the Kingdom
If any personal data is processed outside the Kingdom, for hosting, email or backups, that processing is subject to the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom.
7) Your rights
- To be informed how your data is collected and why.
- To request access to your data and obtain a copy of it.
- To request its correction, completion or updating.
- To request its destruction once it is no longer needed.
- To withdraw consent where processing rests on it, without affecting what was done before the withdrawal.
Requests go to [email protected] and are handled within the period set by the Implementing Regulation of the Personal Data Protection Law.
8) Security and data breaches
Access to correspondence is limited to those who need it for the work. On becoming aware of a leak or unauthorised access, the impact is assessed and containment steps are taken; the competent authority is notified within the period prescribed by law where the conditions for notification are met, and the data subject is informed where the conditions for informing them apply.
9) Changes to this policy
This policy is reviewed whenever what the site collects or the processors involved change, and the “last updated” date at its start is changed.
