About this policy
This policy explains how personal data is handled when you visit the website of Aseel Baali & Naif Alzaidi Law Firm & Legal Consultancy or contact the firm through it. The firm is the controller of data collected for its professional purposes. This notice covers the public website and initial enquiries. Client files and contracted services may be subject to additional notices and obligations appropriate to the service.
Data collected through the website
The contact form requires your name, mobile number and requested service. Your email address and message are optional. Without the required fields, the form cannot be submitted; you can contact us by phone instead. The system also records your IP address, browser information and referral source where available. Visit records include pages viewed, visit time, language, device type, visitor and session identifiers, and campaign-source information where present. A visit record may be associated with submitting an enquiry.
Purposes and legal basis
Contact details are used to understand and respond to your enquiry and coordinate initial steps. Technical data supports website operation, security, usage measurement and improvements. The applicable legal basis depends on the purpose and data: responding to your request and pursuing a legitimate interest that does not override your rights for non-sensitive data; performing an agreement with you where applicable; meeting a legal obligation; or your consent where required. Simply browsing the website is not consent to every processing activity or to marketing messages.
Cookies and visit records
The website uses cookies for sessions and form protection, and visitor cookies named ib_practice_visitor and ib_practice_visitor_state to distinguish new visits, returning visits and enquiries. Visitor cookies last up to one year and may be renewed during use. Cookie lifetime is different from the retention period for stored records. You can delete or block cookies in your browser settings, although some website functions may be affected. Deleting cookies does not automatically delete records already stored by the firm.
Maps, communication channels and external services
The contact page contains an embedded Google map. Loading it connects your browser to Google servers and may transmit your IP address, browser information and technical data under Google’s policy. WhatsApp, X and TikTok links lead to independent services governed by their own policies. Continuing to WhatsApp opens a suggested message you can edit; the website does not send it on your behalf. If Google reCAPTCHA is enabled for form protection, Google may process technical data to verify the request. Please agree a suitable channel with our team before sending sensitive case information.
Recipients and processing locations
Enquiries may be accessed by the relevant team and processed by hosting, technical support, email and enquiry-management providers as needed to provide those services. Data may also be disclosed to competent authorities when legally required. Hosting, email or external platforms may involve processing outside Saudi Arabia; this policy does not represent that all data remains within the Kingdom. Transfers made by the firm are subject to applicable transfer requirements. Contact us for information about recipients and the processing scope of your enquiry.
Retention and protection
Retention depends on the purpose and status of your enquiry, professional and legal recordkeeping requirements, and the need to establish rights or handle a dispute. This notice does not set one retention period for every record or imply automatic deletion when cookies expire. Destruction or anonymisation is required when data is no longer needed and no legal retention ground remains, under applicable procedures. The website uses HTTPS to protect data in transit, but electronic communication cannot be entirely risk-free. Please provide only what is necessary for an initial enquiry.
Your rights and how to exercise them
Under the Saudi Personal Data Protection Law and its regulations, subject to applicable conditions and exceptions, you may request information about processing, access your data, obtain a readable copy, correct, complete or update it, and request its destruction. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Send a clear request to the email below. Limited information may be needed to verify your identity or authority before action is taken. The standard statutory response period is thirty days, with extensions subject to the regulatory conditions and notice to you. You can also complain to the competent personal data protection authority through the National Data Governance Platform.
Updates and contact
This policy may be updated as website services, processing practices or applicable requirements change. The last-updated date appears at the top of the page. For privacy questions or requests concerning your data, contact Aseel Baali & Naif Alzaidi Law Firm & Legal Consultancy using the details below.
Contact details
Aseel Baali & Naif Alzaidi Law Firm and Legal Consultancy
King Abdulaziz District, Salah Al-Din Al-Ayyubi Branch Road, Riyadh, Saudi Arabia
Data protection rights — National Data Governance Platform
Image credits
Riyadh skyline photograph: B.alotaby / Wikimedia Commons — CC BY-SA 4.0. Resized, converted to WebP, and cropped for display. The adapted image remains available under the same licence.
