Privacy Policy

1 · Scope

• It covers the pages of this site and its two collection points: the consultation form and the live chat.
• The deed checker is a separate tool with its own acknowledgement, shown before a check is run.
• The internal office system does not serve site visitors and has its own policy.

2 · Controller and contact

The Law Office of Dr. Abdulaziz bin Musa Al-Ameer is the controller of personal data processed through this site.

For anything concerning the privacy of your data: info@abdulazizalameer.com, or +966 50 640 7636.

3 · What is collected, and how

The consultation form — collected directly from you when you submit it, and not before:

• Full name.
• Mobile number.
• Type of matter, chosen from a list.
• Your own description of the matter.

No identity number and no documents are requested at this stage. Your IP address is not stored with the request; it is held in server memory for one hour to limit automated submissions, then discarded.

The live chat — if you use it, the text of your messages and the replies are stored, together with your IP address and the time of sending.

What is not collected:

• No analytics tools, no advertising trackers, no tracking cookies.
• Fonts are served from this site, so loading them discloses your visit to no third party. The Chinese page is the exception: its fonts load from Google, which reveals your address to Google.

4 · Purpose of collection

• To consider your enquiry and reply to it.
• To run a conflict-of-interest check: your name, and the other side if you name them, is matched against the office files. This is a professional duty that prevents accepting work which collides with an existing client, and its result is never disclosed to you.
• To contact you about your enquiry alone.

Your data is not used for marketing, is not sold, is not rented, and is not disclosed to any third party for purposes other than those set out here.

5 · Where it is held, and who sees it

• It is held in the office system database on a server dedicated to it, whose data centre is outside the Kingdom.
• Transfer between you and the server is encrypted (TLS/HTTPS).
• Access is limited to the lawyer and those he authorises, each under their own account, and every action is written to an audit log.
• A notification of your enquiry carrying your name, the subject and your mobile number is pushed to Telegram to alert the lawyer.
• The text of a live chat is passed to a language-model provider to generate the reply.

6 · Transfer outside the Kingdom

The matters in the preceding section — hosting, the Telegram notification, and the language-model provider — constitute transfer of personal data, or disclosure of it, outside the Kingdom within the meaning of Article 29 of the Personal Data Protection Law, and are confined to the minimum the purpose requires.

7 · Retention and destruction

Article 18 requires personal data to be destroyed without delay once the purpose of collecting it has ended, excepting data a law requires to be kept for a fixed period, and data closely connected to a case before a judicial body.

• An enquiry that does not become a matter: destroyed twelve months after it is closed.
• An enquiry that becomes an engagement: it joins the client file and follows the retention periods for law-office files.
• Live chat logs: destroyed after ninety days.

8 · Your rights

Article 4 of the Law grants you:

• The right to be informed of the basis for collecting your data and the purpose of it — this policy discharges that right.
• The right to access your data held by us.
• The right to obtain it in a legible, clear form.
• The right to request its correction, completion or updating.
• The right to request destruction of whatever is no longer needed.

9 · How to exercise them

• Write to info@abdulazizalameer.com stating the right you are invoking; your request is answered within thirty days.
• You may be asked for something establishing that you are the data subject, to protect the data against a request made by someone else.
• If you are not satisfied with how your request was handled, you may complain to the Saudi Data and AI Authority (SDAIA).

10 · Updates to this policy

The date of the last update is shown at the top of this page. Anything affecting the purpose or extent of processing is set out here before it is acted on.