Policies > Privacy Policy

This Policy (the “Policy”) is issued by Al Khalid & Associates Legal Services (“us”, “we”, “our”) to explain how we deal with your personal data. The Policy is subject to update from time to time to satisfy changes in our practices with respect to the processing of personal data, or changes in the law of Sudan and UAE (the “Applicable Law”). Therefore, we request you to read the Policy carefully and to check it regularly for updates which we might make to.

1. The Policy is addressed to individuals outside our law firm with whom we interact, including individual clients, representatives of client organizations, visitors to our website (the “Site”), and other users of our services (together, “you”).
2. We may collect personal data about you from the following sources;
   (a) when you provide it to us (e.g. where you contact us via email or telephone, or by any other means, or if you provide us with your business card),
   (b) in the ordinary course of our relationship with you (e.g. in the course of corresponding with you),
   (c) from the data, you choose to make public, including via social media (e.g., we may collect information from your social media profile(s), if you make a public post),
   (d) when you visit the Site or use any features or resources available on or through the Site,
   (e) when you use or register to use the Site or services,
   ( f ) If you choose to interact with any third-party content or advertising on the Site, we may receive personal data about you from the relevant third party, and.
   (g) from third parties who provide it to us (e.g. credit reference agencies; law enforcement authorities, etc.).
3. We may also create personal data about you. We may record meetings, depositions, and other interactions in which you are involved, in accordance with the Applicable Law.
4. We may process (i) your personal details, (ii) demographic data, (iii) your contact details, (iv) matter details (e.g. your instructions to us), (v) records of your consents to our processing of your personal data, (vi) payment details, (vii) information about your use of the Site (e.g. the type of device you are using), (viii) details of your current employer, (ix) information about your interactions with our content or advertising, and (x) any views or opinions you provide to us.
5. We may process the following categories of personal data about you:
   (a) given name(s), preferred name and photograph.
   (b) gender, date of birth/age, nationality,  salutation, title, and language preferences.
   (c) passport or national identity number.
   (d) telephone number, email address, and details of your public social media profile(s).
   (e) personal data included in correspondence, transaction documents, evidence or other materials that we process in the course of providing any of the legal services.
   ( f ) records of any consents you may have given, together with the date and time, means of consent and any related information (e.g. the subject matter of the consent).
   (g) billing address, payment method, bank account number or credit card number, cardholder or accountholder name, card or account security details, card ‘valid from’ date, card expiry date, invoice records, payment records, SWIFT details, IBAN details, payment amount, payment date and records of cheques.
   (h) device type, operating system, browser type, browser settings, IP address, language settings, dates & times of connecting to the Site, App usage statistics, App settings, dates & times of connecting to an App, and other technical communications information, username, password, security login details, usage data and aggregate statistical information
   ( i ) where you interact with us in your capacity as an employee, the name, address, telephone number and email address of your employer, to the extent relevant.
   ( j )  any views and opinions that you choose to send to us, or publicly post about us on social media platforms.
6. Where we need to process your sensitive personal data for a legitimate purpose, we do so in accordance with the Applicable Law.
7. We may have to process your sensitive personal data in the ordinary course of our business. Where it becomes necessary to process your sensitive personal data for any reason, we rely on one of the following legal bases;
   (a) we may process your sensitive personal data where the processing is required or permitted by the Applicable Law (e.g. to comply with our diversity reporting obligations);
   (b) we may process your sensitive personal data where the processing is necessary for the detection or prevention of crime,
   (c) we may process your sensitive personal data where the processing is necessary for the establishment, exercise or defense of legal rights, or (d) we may process your sensitive personal data where we have, in accordance with the Applicable Law, obtained your express consent prior to processing your sensitive personal data.
8. We process personal data for providing the Site and services to you, compliance checks, operating our business, communicating with you, managing our IT system, health & safety, financial management, conducting surveys, ensuring the security of our premises & systems, conducting investigations where necessary, compliance with the Applicable Law, improving the Site and services, fraud prevention and recruitment and dealing with job applications.
9. The purposes for which we process personal data, subject to the Applicable Law, and the legal bases on which we perform such processing, include disclosure of your personal data to (i) legal and regulatory authorities, (ii) our external advisors, (iii) our processors, (iv) any party as needed in connection with legal proceedings, (v) any party necessary for investigating, detecting or preventing criminal offenses, (vi) any purchaser of our business and (vii) any third party providers of advertising or content used on the Site.
10. If we engage a third-party processor to process your personal data, the processor will be subject to binding contractual obligations to (i) only process the personal data in accordance with our prior written instructions and (ii) use measures to protect the confidentiality and security of the personal data, together with any additional requirements under the Applicable Law.
11. We implement appropriate technical and organizational security measures to protect your personal data. Therefore, please ensure that any personal data that you send to us are sent securely.
12. We take every reasonable step to ensure that your personal data are kept accurate and up-to-date and are erased or rectified if we become aware of inaccuracies.
13. From time to time, we may ask you to confirm the accuracy of your personal data.
14. We take every reasonable step to limit the volume of your personal data that we process to what is necessary.
15. We take every reasonable step to ensure that the personal data that we process are limited to the personal data reasonably necessary in connection with the purposes set out in the Policy.
16. We take every reasonable step to ensure that your personal data are only retained for as long as they are needed.
17. We take every reasonable step to ensure that your personal data are only processed for the minimum period necessary for the purposes set out in the Policy.
18. Under the Applicable Law, you may have a number of rights, including (i) the right not to provide your personal data to us, (ii) the right of access to your personal data, (iii) the right to request rectification of inaccuracies, (iv) the right to request the erasure, or restriction of processing, of your personal data, (v) the right to object to the processing of your personal data, (vi) the right to have your personal data transferred to another controller and (vii) the right to withdraw consent.

If you have any comments, questions or concerns about any of the information in the Policy, or any other issues relating to the processing of personal data carried out by us, or on our behalf, please feel free to contact us through the contact address shown in the site.

Policies > Privacy Policy