Nimer Alotaibi Company For Lawyership and Legal Consultations (the “Company”, “we” or “us”) respects the privacy of visitors to our website and individuals who contact us. We are committed to handling personal data in accordance with Saudi Arabia's Personal Data Protection Law (PDPL) and its applicable regulations.
This Privacy Policy explains the types of personal data processed through our website and associated contact channels, the purposes and legal bases for processing, the parties that may receive such data, and individuals' rights and how to exercise them.
Data Controller
We are the data controller responsible for determining the purposes and means of processing personal data in connection with our website and related communications.
Our Commercial Registration number is 7053225673, and our head office is located in Jeddah, Kingdom of Saudi Arabia.
For privacy and personal data enquiries, please contact:
Service Providers
We host our website using GoDaddy Web Hosting Economy — Linux cPanel to deliver, operate and secure its static pages and files.
We use Google Workspace, provided by Google, to manage our business email and correspondence.
These service providers may engage affiliated companies and sub-processors to deliver their services, subject to the nature of those services, their configurations and the applicable agreements.
Personal Data We Process
Technical and operational data: When you visit our website, the hosting provider at GoDaddy receives connection information necessary to deliver its pages and files. This includes your Internet Protocol (IP) address, the requested page or file, the time of the request, and browser and device information transmitted with the connection. The hosting service provides access and error logs and statistics based on server logs for website operations and security.
This information is collected automatically when you connect to our website, rather than through an online form that you are asked to complete.
Communication data: When you contact us by email or telephone, we process the information you provide, including your name, contact details, message content and any attachments you choose to send, to the extent necessary to handle your communication.
Our website currently does not provide online forms for collecting visitor information or creating visitor accounts.
Contacting us is optional. You may browse our website without providing contact information, although not providing it may prevent us from responding to your enquiry.
Before Contacting Us
Initial contact with us through the contact channels published on our website, including email and telephone, does not, by itself, constitute acceptance of a matter, establish a professional (lawyer–client) relationship or authorise us to act on your behalf. Nor does it mean that a conflict-of-interest check has been completed.
Please refrain from sending highly sensitive information or documents relating to legal matters during initial contact, until an appropriate communication channel and secure arrangements for exchanging the necessary information have been agreed upon.
Purposes and Legal Bases of Processing
We process personal data for purposes related to operating and securing our website, responding to enquiries, initially assessing requests, managing correspondence, and complying with applicable legal and professional obligations.
Our processing of non-sensitive technical and operational data necessary to make the website available and protect its security is based on our legitimate interests, taking into account the rights and interests of data subjects and the legal requirements applicable to this basis of processing.
We process non-sensitive information provided through initial communications, to the extent necessary to respond to enquiries and manage correspondence, on the appropriate legal basis for the nature and purpose of the communication, including legitimate interests where the applicable conditions are satisfied.
Where processing relates to an existing contractual relationship, a legal obligation or circumstances requiring consent, we apply the legal basis appropriate to the particular circumstances.
Cookies and Tracking
We have not added analytics or marketing tracking tools to our website and do not use cookies for those purposes.
The static website code does not set cookies. GoDaddy’s Real User Metrics (RUM) service is disabled. This does not disable hosting logs or statistics based on server logs. Any other operational or security technologies provided by the host, and any cookies associated with them, depend on the services enabled and their actual configurations.
We review these disclosures when service settings change or additional tools affecting the processing of personal data are introduced.
Processing Outside Saudi Arabia
Our website's pages, files and related operational data are delivered through GoDaddy's hosting service, while our email correspondence and attachments are processed through Google Workspace.
The website’s hosting environment is in the North America region, outside the Kingdom of Saudi Arabia. The locations where technical data, logs and backups are processed, stored or accessed by the service provider, its affiliates and sub-processors may vary depending on the service, configurations and applicable agreements.
Some email data is processed, stored or accessed outside the Kingdom of Saudi Arabia, including in the United States, through facilities operated by Google, its affiliates and sub-processors, depending on the applicable services and configurations.
Disclosure of Personal Data
We may make personal data available, to the extent necessary for the purposes described in this Policy, to hosting, email and related technical service providers, or disclose it to competent authorities where required or permitted by law.
We do not use website visitor data for marketing tracking or targeted advertising.
Data Retention and Security
We retain information from initial enquiries and correspondence for as long as necessary to handle, follow up on and close those enquiries, and for any related legal or professional purposes requiring retention.
When this information no longer needs to be retained, we take appropriate steps, within the limits of our control and subject to the obligations of the relevant service providers, to destroy or anonymise it, unless there is a lawful basis for continued retention.
We retain correspondence relating to established professional engagements in accordance with applicable legal and professional requirements.
The retention periods applied by service providers to technical and operational data, hosting logs and statistics, and backups vary depending on the category of data, the purpose of processing, service configurations and applicable obligations.
We also apply appropriate organisational and technical safeguards to protect personal data against unauthorised access, use or disclosure, taking into account the nature of the data and professional confidentiality requirements.
Data Subject Rights
Individuals have the rights provided under the Saudi Personal Data Protection Law and its applicable regulations, including:
- The right to be informed about the processing of their personal data.
- The right to access their personal data and obtain a copy in a clear, readable format.
- The right to request correction, completion or updating of their personal data.
- The right to request the destruction of their personal data in the circumstances provided by law.
Where consent is the legal basis for processing, individuals may withdraw that consent in accordance with the applicable legal requirements. Withdrawal does not affect the lawfulness of processing undertaken before withdrawal or processing based on another lawful basis.
These rights may be exercised by contacting us. We handle requests in accordance with applicable legal procedures and timeframes, subject to verification of the requester's identity.
Individuals may also submit a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA) in accordance with applicable procedures.
Contact
For privacy enquiries or requests relating to personal data rights, please contact us through:
Email: owner@nimerlawfirm.com
Head office: Jeddah, Kingdom of Saudi Arabia.
Updates to This Policy
We review this Privacy Policy whenever our website's operation, services or tools, or applicable legal requirements change.
The date of the latest update will be displayed whenever a revised version is published.