ALSAWAED LAW FIRM (ALSO KNOWN AS KSAUSALEGAL) PRIVACY POLICY
Clause 1 – Introduction
AlSawaed Law Firm (also known as KSAUSALEGAL) (hereinafter referred to as the “Firm”) (https://ksausalegal.com/) is a law firm based in the Kingdom of Saudi Arabia (KSA) providing legal services to local and international clients. In this regard, the Firm receives, has access to and becomes privy to personal data (“Personal Data”) that is defined and required to be protected under the Personal Data Protection Law of the KSA and rules, regulations and guidelines in connection therewith (collectively, “PDPL”). The Firm takes such obligations seriously and diligently and has, therefore, implemented appropriate controls to effectively protect Personal Data. Your execution of the firm’s engagement letter constitutes acceptance of our Privacy Policy.Defined terms in this Privacy Policy have the meaning assigned under the PDPL unless provided otherwise.
Clause 2 – What Personal Data may be collected by the Firm, from which sources and why?
The Firm may collect or get access to the Personal Data in the following two ways:
- Directly from our employees, clients, contractors, vendors, government officials, etc. (“Case I”); and
- Indirectly through a client, potential client, counter-party of our clients (“Case II).
(Case I and II are hereinafter collectively referred to as the “Cases”).
In Case I, we mostly, unless circumstances require otherwise, assume the role of a ‘data controller’ under the PDPL. In the other case (i.e. Case II), we generally assume the role of a ‘data processor.’ Where, we assume the role of a ‘data processor’, we protect the Personal Data as we would if we were a ‘data controller’ and would typically agree on the terms of its management, storage, protection, processing and usage with the ‘data controllers’ of such Personal Data.
The Personal Data collected in each of the abovementioned Cases may include but is not limited to:
-
- Name;
- ID Number;
- Email Address;
- IP Number;
- Passport Number;
- Driving License Number;
- Government files numbers;
- Medical Insurance number;
- Bank account(s) numbers;
- Registered and mailing Address;
- Spousal details;
- Professional credentials and details (including professional licenses and registrations);
- Medical history;
- Ongoing disputes; and
- Any other details required for the purposes of effectively managing the relevant relationships/arrangements.
The aforementioned Personal Data may be collected for any one of the following purposes:
- managing the employer-employee relationship – hiring, benefits management, performance evaluation, and compliance with applicable labor and immigration laws;
- collaborations with strategic partners – to assist and facilitate joint projects and partnerships; and/or
- entering into a legal services engagement – to establish and manage client relationships, provide legal advice, ensure compliance with legal obligations and representation before government and judicial authorities.
Clause 3 – Personal Data Collection Methods
The Personal Data may be collected in any of the following manners:
- Directly provided to us by the employees, clients or other persons via hand delivery, mail or electronic/virtual means;
- Provided to us or made available to us by clients, potential clients and third parties via hand delivery, mail or virtual means; and
- Through cookies that are collected when the data subject visits the Firm’s Website.
Clause 4 – Storage of Personal Data
Personal Data if collected and received electronically is kept on cloud servers of Microsoft Office 365 in the United States of America and protected and secured through its own security and encryption protocols. Aside from the firewalls installed and implemented on the Firm’s servers, hardware used by Firm personnel are also installed with adequate firewalls and controls so as to prevent the loss and/or theft of data. Whereas, any Personal Data received physically or if physical copies of the same are made is kept at our offices in Al Khobar and Riyadh, where entry is restricted and is accessible only to authorized individuals. The premises are equipped with CCTV cameras in order to deter theft.
Clause 5 – Destruction of Personal Data
Personal Data shall be kept by the Firm until the earlier of: (a) there is a request by the Data Subject and/or the Data Controller to delete/destroy the Personal Data; or (b) completion of a fifteen (15) years’ period from the date when the purpose for collecting and processing Personal Data ends, whereinafter the Personal Data in possession of the Firm (whether in physical form or electronic) is and will be deleted, destroyed or shredded, including any copies in respect thereof. In some circumstances, we may, however, retain a copy of the Personal Data to the minimum extent possible for any legal purpose or for the purposes of any potential future legal disputes, beyond the periods specified above. We will also ask the persons to whom we have disclosed / transmitted such Personal Data to delete, destroy or shred such Personal Data as well.
Clause 6 – Legal Basis for Collecting and Processing Personal Data
The collection and processing of Personal Data is based on the consent of the Data Subject and/or subject to the contract with a Data Controller. Unless there is another legal basis for us to collect and process Personal Data, the Data Subject and/or the Data Controller can revoke their consent to the collection and processing of the Data Subject’s Personal Data at any time. To do so, the Firm may be informed on the following email address: othman@ksausalegal.com.
Clause 7 – Rights of the Personal Data Subject and How to Exercise Those Rights
If you are a Data Subject whose Personal Data the Firm possesses, uses, processes and transmits, please know that you have the following rights under the PDPL in relation to your Personal Data and our possession, usage, processing and transmission in respect thereof and how you may be able to exercise those rights:
S.no |
Rights |
How to Exercise the Rights |
1 |
Right to be informed about: (i) the purpose of collection of your Personal Data (whether compulsory or optional) including the legal justification and purpose for the same; (ii) Firm’s basic identifying and contact details; (iii) period for storage of your Personal Data; (iv) how you may withdraw / revoke your consent; and (v) any change in the way, otherwise than what is specified, we process your Personal Data. |
We believe that we have made all of the requisite and aforementioned information available via this Privacy Policy which we shall make available to you when we are collecting your Personal Data ourselves. Whereas, if your Personal Data is provided to us by a Data Controller, we shall provide this Privacy Policy where a request is made in that regard. |
2 |
Right to access your Personal Data in our possession |
You may request your Personal Data in our possession by emailing in this regard on the following email address: othman@ksausalegal.com |
3 |
Right to request for a confirmation on your Personal Data in our possession |
You may request for a confirmation with regards to your Personal Data in our possession by emailing on the following email address: othman@ksausalegal.com |
4 |
Right to request for a correction, completion or update of the Personal Data in our possession |
You may request us to correct, complete or update your Personal Data in our possession at any time by emailing on the following email address: othman@ksausalegal.com |
5 |
Right to request for the destruction of your Personal Data in our possession |
You may request us to destroy / delete your Personal Data in our possession at any time by emailing on the following email address: othman@ksausalegal.com and we shall do so per Clause 5 of this Privacy Policy. |
Clause 8 – Complaints and Inquiries
In the event you have any complaints or inquiries relating to the privacy policy or dealing with the Personal Data, you may contact us on any of the following:
Firm Address: 7639 Burj Alfardan Office 904, Prince Turki Bin Abdulaziz St, Corniche District, Al-Khobar 34413-2175, Saudi Arabia
Firm Contact No.: +966138179335
Firm Email Address: othman@ksausalegal.com
Created on: 13th of September, 2024
Last Modified on: The Policy has not been modified yet.