Privacy policy

Scope and responsible entity

This policy applies to personal data processed through this website, including information submitted in enquiry forms, careers applications, and correspondence initiated through the website.

Mizan & Ettezan Law Firm & Legal Consultancy is the controller of the data covered by this policy unless a different arrangement is explained when the data is collected.

Personal data we may collect

We follow the principle of collecting only the minimum data needed for a defined purpose. The data may include:

• Identity and contact details, such as your name, mobile number, email address, and city.
• Matter information you choose to provide, such as the type of matter, parties, current stage, and a concise summary.
• Careers information, including qualifications, experience, CV details, and information in attachments.
• Correspondence, appointment details, and records of communications concerning your request.
• Technical and operational information, such as network address, browser and device type, pages visited, referral source, and necessary visitor or cookie identifiers.

Sources and collection methods

Most data is collected directly from you when you complete a form, contact us, or apply for a role. Limited technical information may be collected automatically to operate, secure, and measure the website.

If you provide another person’s data, you confirm that you have an appropriate basis for doing so and, where required, have informed that person about this policy.

Purposes and lawful basis

We process data for the purpose for which it was collected and on the basis of consent, steps requested before entering a contract, performance of an agreement, compliance with a legal obligation, or another basis permitted by applicable law. Purposes include:

• Reviewing an enquiry, understanding its potential scope, and conducting an initial conflict check.
• Contacting you, arranging meetings, and preparing a scope proposal or engagement agreement if the matter is accepted.
• Managing careers and training applications and communicating with candidates.
• Protecting the website and systems, preventing misuse, and diagnosing faults.
• Understanding website use and improving visitor experience, content, and services.
• Meeting legal and professional obligations and protecting the legal rights and interests of the firm or others.

Cookies and visit data

The website may use cookies or similar technologies needed to maintain a session, remember language preferences, protect forms, and distinguish visits for performance measurement. We may record pages visited, device type, and referral source, but do not use this information to make legal or professional decisions about you.

You may configure your browser to reject or delete certain cookies. Disabling necessary cookies may affect some website functions.

Disclosure and service providers

We do not sell personal data. We may disclose it only as necessary to the following categories, subject to appropriate legal and contractual safeguards:

• Firm personnel, lawyers, and advisers who need access for their duties.
• Hosting, email, cybersecurity, technical support, forms, and analytics providers acting as service providers.
• External advisers, experts, or collaborating lawyers where an appropriate basis exists and access is necessary for the task.
• Judicial, regulatory, or government authorities where required by law or necessary to protect a lawful right.
• Another party where we have obtained your consent when consent is required.

Transfers outside Saudi Arabia

Certain technology services may require data to be processed or stored outside Saudi Arabia. Where this occurs, we take the measures required by the Personal Data Protection Law and the Regulation on Personal Data Transfer Outside the Kingdom, including applicable safeguards and approvals.

Retention and disposal

We retain data for as long as needed for the stated purpose and for any legal, accounting, or professional period, or while required to establish or defend rights. Retention varies according to the data, the request, and whether it becomes a professional engagement.

When there is no continuing legal or professional need, we take appropriate steps to securely destroy or anonymise the data unless retention is required by law or an order of a competent authority.

Security and confidentiality

We use organisational and technical measures proportionate to the nature of the data and processing risk. These include access controls, system protection, incident review, and confidentiality obligations.

No electronic transmission or storage method is entirely risk-free. Please do not send original documents or highly sensitive information through a website form before we request it through an appropriate channel.

Your data rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• Be informed of the legal basis and purpose for collecting and processing your data.
• Access your personal data and request a clear and readable copy.
• Request correction of inaccurate data or completion and updating of incomplete data.
• Request destruction of data when its purpose has ended and no lawful basis requires its retention.
• Withdraw consent where processing relies on consent, without affecting the lawfulness of processing completed before withdrawal.

Exercising rights and making a complaint

Send a data request to info@mizanfirm.com.sa, describing the request and providing contact details that allow us to verify your identity. We will review and respond within the applicable legal period and may request additional information needed for verification or fulfilment.

If you have an objection or complaint, please contact us first so we can address it. If you remain dissatisfied, you may contact the competent Saudi data protection authority through the channels published by the Saudi Data & AI Authority (SDAIA).

Enquiry confidentiality and engagement status

We handle enquiries carefully, but sending information through this website does not mean the matter has been accepted and does not itself create a lawyer-client relationship. An engagement begins only after conflict checks, express acceptance, agreement on scope, and completion of the required engagement documentation.

Do not send information about other parties, trade secrets, or highly sensitive health, criminal, or financial data before we confirm an appropriate channel.

Updates and contact details

We may update this policy when our practices or legal requirements change. The revised version will be published on this page with its updated date and will apply from publication unless stated otherwise.

For privacy enquiries or to exercise a right, contact info@mizanfirm.com.sa or call 0554841008.