1. Firm Overview & Data Controller

AL NAQBI Advocates & Legal Consultants (“Al Naqbi Advocates & Legal Consultants,” “we,” “us,” or “our”) is a law firm duly licensed and authorised to practice in the United Arab Emirates. Our registered office is located at Suite 202, Dubai National Insurance Building, opposite Deira City Centre, Dubai, United Arab Emirates. We operate in accordance with the applicable laws and regulations of the United Arab Emirates and are duly licensed by the UAE Ministry of Justice and the Dubai Legal Affairs Department.

For the purposes of applicable data protection and privacy laws, Al Naqbi Advocates & Legal Consultants is the data controller and is responsible for determining the purposes and means of processing personal data collected through our website, alnaqbilegal.com, as well as personal data processed in connection with our legal, professional, and related services.

We are committed to protecting the confidentiality, privacy, and security of personal data entrusted to us and to processing such data in accordance with applicable UAE laws and regulations, including applicable data protection requirements. This Privacy Policy sets out the manner in which we collect, use, disclose, retain, and protect personal data and explains the rights and choices available to individuals in relation to their personal data.

2. Information We Collect

• Contact Information: We may collect your name, email address, phone number, organisation, and country of residence when you submit a contact form, subscribe to our newsletter, or contact us regarding a legal matter.
• Matter Information: We may collect information that you voluntarily provide about your legal matter when you contact or engage our firm. We treat such information as confidential in accordance with applicable UAE laws and professional obligations.
• Usage Data: We may collect information about how you use our website, including pages visited, time spent on each page, approximate location (city or country), device type, and browser type. This information may be collected through standard server logs and limited analytics. We do not use analytics to collect personal identifiers without your consent.
• Cookies and Similar Technologies: We use a limited number of strictly necessary cookies to support essential website functions, such as remembering your preference to dismiss the newsletter pop-up. We do not use cross-site tracking cookies.

3. How Your Personal Data Is Used

• Respond to enquiries and provide legal and related professional services where we have been formally instructed or engaged by you.
• Conduct appropriate conflict-of-interest checks and other necessary due diligence before accepting or undertaking any new matter or engagement.
• Send the UAE Legal Brief newsletter and other relevant communications where you have expressly subscribed or otherwise provided the necessary consent. You may unsubscribe from such communications at any time.
• Monitor, analyse, and improve our website, services, and user experience through aggregated and anonymised data and analytics, which do not identify individual users.
• Fulfil our legal, regulatory, professional, and ethical obligations and comply with applicable laws, regulations, professional standards, court requirements, and lawful requests of competent authorities in the UAE.

In accordance with Article 5 of the UAE PDPL, we rely on different legal grounds for processing personal data. We process data based on consent for sending newsletters and enabling optional analytics. Processing is carried out for the performance of a contract when providing legal services after an engagement letter has been executed. We also rely on legitimate interests for responding to enquiries, conducting conflict checks, and maintaining internal records. Additionally, personal data may be processed to comply with legal obligations, including regulatory recordkeeping requirements and adherence to UAE legal profession regulations.

4. Sharing of Information

We do not sell, lease, or rent your personal data to third parties.

Your personal data is shared only in the following situations:

• Within our firm: With partners, associates, and support staff who require access to handle your legal matter.
• Co-counsel and correspondent firms: When necessary for your case and with your prior consent.
• Service providers: With trusted third-party providers, including our website hosting provider, secure document management platforms, email service providers, and IT and cybersecurity vendors. These providers are contractually required to maintain confidentiality and comply with applicable data protection obligations.
• Regulatory authorities and courts: When disclosure is required by law or when you have authorized us to represent you.

If personal data is transferred outside the UAE, we implement appropriate safeguards in accordance with Article 22 of the UAE PDPL.

5. Keeping Your Information

We retain client information and case-related records for the duration required under UAE law and the firm's professional conduct obligations, which is generally at least seven years after the matter has been concluded. Information collected for newsletter subscriptions is kept until you choose to unsubscribe. Website access logs and usage records are typically stored for a period of 90 days before being deleted.

6. Client Rights

In accordance with Articles 13–17 of the UAE PDPL, you are entitled to the following rights:

• Obtain access to the personal data we hold about you.
• Request that any inaccurate or incomplete personal data be corrected or updated.
• Request the deletion of your personal data, where permitted, subject to our legal and regulatory retention obligations.
• Request that we restrict the processing of your personal data or object to such processing in specific circumstances.
• Withdraw your consent at any time where processing is based on consent, such as for receiving newsletters.
• Submit a complaint to the UAE Data Office if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at info@alnaqbilegal.com. We will acknowledge and respond to your request within 30 days.

7. Security

We implement appropriate technical and organisational safeguards to protect personal data based on its level of sensitivity. These measures include encrypted data transmission using TLS, limiting internal access to authorised personnel on a need-to-know basis, maintaining secure document management systems, and providing employees with regular confidentiality and data protection training. While we take reasonable steps to safeguard your information, no security system can guarantee complete protection. If you believe your personal data has been affected by a security incident, please contact us at info@alnaqbilegal.com as soon as possible.

8. International Clients

If you visit this website from a location outside the UAE, please note that your personal data will be processed within the UAE. We handle your information in accordance with the UAE Personal Data Protection Law (PDPL) and, where applicable, implement equivalent or higher standards of protection to meet the requirements of your home jurisdiction, including the GDPR for individuals in the European Union and the UK GDPR for individuals in the United Kingdom.