Rumah Law Firm (“we,” “our,” or “the Firm”) is committed to protecting the privacy and confidentiality of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our legal services.

This policy complies with applicable Saudi Arabian laws, including the Personal Data Protection Law (PDPL) and relevant regulations governing attorney-client privilege and professional confidentiality.

Information We Collect

Information You Provide to Us We may collect personal information that you voluntarily provide when you:

• Contact us through our website contact forms or booking system

• Schedule a meeting via booking platforms

• Engage our legal services as a client

• Subscribe to our newsletter or blog updates

• Communicate with us via email, phone, or in person

This information may include:

• Name and contact information (email address, phone number, mailing address)

• Company name and business information

• Nature of legal inquiry or matter

• Documents and information related to legal representation

• Payment and billing information

• Any other information you choose to provide

Information Collected Automatically When you visit our website, we may automatically collect certain information, including:

• IP address and device information

• Browser type and operating system

• Pages visited and time spent on pages

• Referring website or source

• Location data (country/city level)

• Cookies and similar tracking technologies

How We Use Your Information

We use the collected information for the following purposes:

Legal Services

• Providing legal advice, representation, and consultation

• Communicating with you about your legal matter

• Preparing legal documents and correspondence

• Conducting legal research and case analysis

• Managing client relationships and case files

Business Operations

• Processing payments and maintaining billing records

• Responding to inquiries and scheduling consultations

• Improving our website and services

• Sending newsletters and legal updates (with your consent)

• Complying with legal and regulatory obligations

• Preventing fraud and ensuring security

Marketing Communications

• Sending information about our services (you may opt out at any time)

• Sharing relevant legal insights and blog posts

• Inviting you to events or webinars

Legal Basis for Processing

Under Saudi Arabian law and international privacy standards, we process your personal information based on:

• Contractual Necessity: To provide legal services you have requested

• Legal Obligation: To comply with professional regulations and Saudi Arabian laws

• Legitimate Interest: To operate our business, prevent fraud, and improve our services

• Consent: Where you have provided explicit consent for specific processing activities

Attorney-Client Privilege and Confidentiality

All information shared with us in the course of legal representation is protected by attorney-client privilege under Saudi Arabian law. We maintain strict confidentiality of all client communications and case-related information. This information will not be disclosed to third parties except:

• With your explicit written consent

• As required by law or court order

• To other lawyers or professionals working on your case (under confidentiality obligations)

• To prevent imminent harm or comply with professional obligations

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Service Providers We may share information with trusted third-party service providers who assist us in operating our business, including:

• Cloud storage and document management systems

• Payment processors and accounting services

• Email and communication platforms

• Website hosting and analytics services

• Legal research databases

These providers are contractually obligated to protect your information and use it only for specified purposes.

Legal Requirements We may disclose information when required by law, including:

• In response to court orders or legal process

• To comply with Saudi Arabian regulatory requirements

• To protect our legal rights and interests

• To prevent fraud or illegal activities

Business Transfers If our firm merges with another entity or transfers assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure encrypted connections (SSL/TLS)

• Access controls and authentication systems

• Regular security assessments and updates

• Staff training on confidentiality and data protection

• Secure physical storage of documents

• Regular data backups

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Client Files: Retained in accordance with Saudi Bar Association regulations and professional obligations (typically a minimum of 10 years after case closure)

• Financial Records: Retained as required by Saudi tax and accounting laws

• Marketing Data: Retained until you withdraw consent or request deletion

• Website Analytics: Typically retained for 26 months

Your Rights

Under the Saudi Arabian Personal Data Protection Law, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you

• Right to Rectification: Request correction of inaccurate or incomplete information

• Right to Erasure: Request deletion of your information (subject to legal retention requirements)

• Right to Restrict Processing: Request limitation of how we use your information

• Right to Object: Object to processing based on legitimate interests

• Right to Data Portability: Receive your information in a structured, machine-readable format

• Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise these rights, please contact us using the information provided below. We will respond to your request within 30 days. Note: Some rights may be limited due to attorney-client privilege, legal obligations, or other legitimate reasons.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality

• Analytics Cookies: Help us understand how visitors use our website

• Functional Cookies: Remember your preferences and settings

• Marketing Cookies: Track your browsing to provide relevant content (with consent)

You may disable cookies through your browser settings, though this may affect website functionality.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

International Data Transfers

While we primarily operate within the Kingdom of Saudi Arabia, some of our service providers may be located in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Saudi Arabian law and international standards.

Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new “Last Updated” date.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: Rumah Law Firm Address: Kingdom of Saudi Arabia Email: info@rumahlawfirm.com

For data protection inquiries, please mark your communication as “Privacy Request” to ensure prompt attention.

Acknowledgment

By using our website or engaging our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

All information provided to Rumah Law Firm will be treated with strict confidentiality in accordance with professional legal standards and Saudi Arabian law.

This Privacy Policy is provided in English. In the event of any conflict between the English version and any translation, the English version shall prevail to the extent permitted by Saudi Arabian law.