Last updated:
Privacy Policy — Kawkaba Law Firm & Legal Consultations
1. Who we are
Kawkaba Law Firm & Legal Consultations (Commercial Registration 7052411654, Law License 441458), headquartered in Jeddah, Saudi Arabia, is responsible for processing personal data through kawkaba.sa. Privacy contact: privacy@kawkaba.sa · +966 55 566 7643 · Palestine St, Al Hamra, Jeddah 23321.
2. Data we collect
We collect information you submit through the consultation form, WhatsApp or phone, including name, mobile number, optional email, legal service, client type and case description. We may also collect technical and attribution information such as IP address, device/browser data, visited pages and campaign identifiers such as gclid and UTM parameters. A reference number may be generated to connect your request with a WhatsApp conversation.
3. Why we process data
We process data to respond to requests, provide initial assessments and legal services, manage client matters, communicate with you, measure website and campaign performance, and meet legal and professional obligations.
4. Cookies and measurement
We use necessary cookies and attribution cookies for up to 90 days (kwk_first, kwk_last and kwk_vid), as well as approved measurement tools managed through Google Tag Manager. Browser cookie controls may affect some site functionality.
5. Data sharing
We do not sell personal data. Data may be shared only with service providers acting on our behalf under confidentiality obligations, approved measurement providers, or competent authorities where legally required. For measurement, approved providers may receive advertising click identifiers and normalized contact data in SHA-256 hashed form for statistical matching. Case details and documents are not shared outside the firm except with consent or as required by law.
6. Professional confidentiality
Information disclosed about your legal matter is subject to lawyers’ professional confidentiality obligations whether or not you ultimately retain the firm.
7. Retention
Consultation requests that do not result in engagement are retained for 24 months from the last contact. Contracted client files are retained for the duration of the relationship and then for 10 years subject to applicable legal, professional and financial obligations. Analytics data follows the relevant provider retention periods, up to 14 months where configured.
8. Your rights
You may request access, a copy, correction, deletion or restriction of your personal data where legally permitted, and may withdraw marketing consent. Contact privacy@kawkaba.sa; we aim to respond within 30 days. You may also submit a complaint to the Saudi Data & AI Authority (SDAIA).
9. Security
Data is transmitted using HTTPS, stored in access-controlled databases, and access to requests is recorded through the system’s internal audit mechanisms.
10. International transfers
Measurement and hosting data may be processed outside Saudi Arabia by service providers subject to recognized safeguards and applicable PDPL cross-border transfer requirements.
11. Minors
Our services are intended for adults and we do not knowingly collect data from persons under 18.
12. Changes
We may update this policy as necessary and will display the latest update date. Continued use after an update means you have had an opportunity to review the current version.