Data Privacy Policy

Saeed Almuharrami Advocates & Legal Consultants Last updated: 23 August 2026

1. Introduction

Saeed Almuharrami Advocates & Legal Consultants (“the Firm”, “we”, “us”, “our”) is committed to protecting the personal data entrusted to us.

This policy explains what personal data we collect, why, on what legal basis, who we share it with, how long we keep it, and what rights you have.

It applies to our website at almuharramilegal.com, to our dealings with clients and prospective clients, and to our dealings with counterparties, witnesses, suppliers, applicants and visitors.

Professional secrecy. As a licensed advocacy and legal consultancy practice, the Firm is bound by duties of professional secrecy that operate alongside data protection law. Where the two overlap, we apply the more protective standard.

2. Who we are

Controller: Saeed Almuharrami Advocates & Legal Consultants, Licence No. [Licence No.], Office 312, Emaar Business Park 4, Sheikh Zayed Road, Dubai, UAE.

Contact for data protection matters: admin@almuharramilegal.com · +971 58 249 9260

3. Whose data we hold

4. What we collect

Identity and contact data — name, title, nationality, passport or Emirates ID details, address, telephone, email.

Engagement data — instructions, correspondence, documents, advice given, court and tribunal filings, attendance notes, fee arrangements, time records.

Compliance data — identification and verification records, source-of-funds information, politically-exposed-person and sanctions screening results, and records required under anti-money-laundering law.

Financial data — billing details, bank information, payment records.

Special categories. Certain matters require data of a more sensitive nature — for example health information in personal injury or capacity matters, family circumstances in succession and status matters, or information relating to criminal convictions or alleged offences in criminal and regulatory matters. We collect such data only where it is necessary for the matter and handle it under enhanced safeguards.

5. Where we get it

• Directly from you
• From your representatives, family members, or officers of your organisation
• From opposing parties and their advisors
• From courts, tribunals, registries and public authorities
• From public registers and commercially available screening databases
• From referrers and introducers

6. Why we process it, and on what basis

On consent. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect anything done before it, and does not affect processing we are legally obliged to continue.

On special categories. These are processed where necessary for the establishment, exercise or defence of legal claims, where required or permitted by law, or with explicit consent.

7. Who we share it with

We disclose personal data only where necessary, and only to:

• Courts, tribunals, arbitral bodies, registries and public authorities, as required to conduct a matter or comply with law
• Opposing parties and their advisors, to the extent required by the matter or by procedural rules
• Co-counsel, foreign counsel, experts, translators and process agents engaged on a matter
• Notaries, banks and registries, where a transaction requires it
• Regulators, auditors and our professional indemnity insurers
• Service providers — IT, document management, secure storage, communications — bound by written confidentiality and data protection obligations
• Law enforcement and financial intelligence authorities, where we are legally obliged to report

We do not sell personal data, and we do not disclose client data for marketing purposes.

8. Transfers outside the UAE

Cross-border matters may require transferring personal data to another jurisdiction — for example to foreign counsel, a foreign court, or a service provider hosting data abroad.

We transfer personal data outside the UAE only where the receiving jurisdiction provides an adequate level of protection as recognised under applicable law, or where appropriate safeguards are in place — contractual protections, binding undertakings, or another mechanism permitted under the PDPL — or where a statutory exception applies, including where the transfer is necessary to conduct or defend legal claims.

9. How long we keep it

Retention periods are set by reference to limitation periods, professional obligations, insurance requirements and statutory record-keeping duties. Where several apply, the longest governs. On expiry, records are securely destroyed or irreversibly anonymised.

10. Security

We maintain technical and organisational measures appropriate to the sensitivity of the data we hold, including access controls on a need-to-know basis, encryption in transit and at rest, secure physical storage for hard-copy files, confidentiality undertakings from all personnel and contractors, and periodic review of our arrangements.

No website form, chat widget or messaging application is a secure channel. Please do not send confidential material through them. Contact us and we will establish a secure means of communication.

Breach. Where a personal data breach occurs, we assess it, contain it, and notify the competent authority and affected individuals where the applicable threshold is met.

11. Your rights

Subject to applicable law, you may:

• request access to your personal data and information about how it is processed
• request correction of inaccurate or incomplete data
• request deletion
• request restriction of processing
• object to processing carried out on the basis of legitimate interests
• request portability of data you provided to us
• withdraw consent where consent is the basis
• lodge a complaint with the competent supervisory authority

Limits on these rights. Certain rights do not apply, or apply only in part, where:

• the data is subject to professional secrecy
• retention is required by law, including AML record-keeping
• deletion would prejudice the establishment, exercise or defence of legal claims
• compliance would disclose another person’s personal data or confidential information
• the data forms part of a court or tribunal record

Where we cannot comply in full, we explain why.

To exercise a right, contact us at admin@almuharramilegal.com. We may need to verify your identity. We respond within the period required by applicable law.

12. Automated decision-making

We do not make decisions producing legal or similarly significant effects on the basis of automated processing alone.

13. Changes

We may amend this policy. The current version is always published on the Site with the date of last revision. Material changes affecting clients are notified directly.

14. Contact

Saeed Almuharrami Advocates & Legal Consultants
Licence No. [Licence No.]
Office 312, Emaar Business Park 4, Sheikh Zayed Road, Dubai, UAE

General: admin@almuharramilegal.com · +971 58 249 9260
Data protection: admin@almuharramilegal.com