At ZIMAM (“we,” “us,” “our,” or “the Firm”), protecting your privacy and personal data is a fundamental commitment. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, engage our legal services, or otherwise interact with us.

This Policy is issued in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, issued by Royal Decree No. M/19 dated 9/2/1443H, together with its Implementing Regulations issued by the Saudi Data & Artificial Intelligence Authority (SDAIA), as amended from time to time.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

ZIMAM (Zimam Law Firm) is the data controller responsible for determining the purposes and means of processing your personal data as described in this Policy.

Address: Amarah Irqah, Irqah, Riyadh 12588, Kingdom of Saudi Arabia
Email: info@zimamlaw.com
Website: www.zimamlaw.com

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity & Contact Data: Full name, national ID/Iqama number (where legally required), email address, phone number, and mailing address.
• Case-Related Data: Information provided in connection with legal consultations, representation, or engagement of our services, including sensitive data where applicable.
• Technical & Usage Data: IP address, browser type and version, device identifiers, operating system, referral source, pages visited, and time spent on our website.
• Cookies & Similar Technologies: Information collected through cookies and similar technologies to improve website functionality and user experience.
• Communications Data: Records of correspondence, inquiries, and requests submitted through our website or email.

We collect personal data directly from you and, where necessary, from publicly available sources or authorized third parties to provide legal services.

3. Legal Basis and Purposes of Processing

We process personal data only where permitted under the PDPL, including:

• Your explicit consent, where required.
• Performance of a contract or provision of legal services.
• Compliance with legal or regulatory obligations.
• Legitimate interests, provided they do not override your rights.

Your personal data may be used to:

• Provide, manage, and improve legal services.
• Respond to inquiries and consultation requests.
• Fulfill contractual and professional obligations.
• Comply with legal and regulatory requirements.
• Protect website security and prevent fraud.
• Improve website functionality and user experience.
• Send legal updates or newsletters where consent has been provided.

4. Disclosure and Sharing of Personal Data

We do not sell or rent your personal data. Personal data may only be disclosed in the following circumstances:

• Service Providers: Trusted third parties providing hosting, IT support, analytics, and related services under strict confidentiality obligations.
• Legal Requirements: Where disclosure is required by Saudi law, judicial order, or a competent authority.
• Professional Necessity: Where required for legal representation before courts or governmental authorities.
• Business Transfers: In connection with mergers, restructuring, or transfers of business assets.

5. Cross-Border Transfer of Personal Data

Where personal data is transferred outside the Kingdom of Saudi Arabia, such transfers will be carried out only in accordance with the PDPL and applicable SDAIA regulations, ensuring appropriate safeguards and confidentiality standards.

6. Cookies and Tracking Technologies

Our website uses cookies to improve user experience and website performance.

• Essential Cookies
• Performance & Analytics Cookies
• Functionality Cookies

You may manage or disable cookies through your browser settings. Certain website functions may be affected if cookies are disabled.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable legal, regulatory, and professional obligations. When no longer required, personal data will be securely deleted or anonymized.

8. Data Security

We implement appropriate technical, administrative, and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, loss, or destruction.

Although we strive to maintain the highest security standards, no method of electronic transmission or storage can be guaranteed to be completely secure.

Where required under the PDPL, any personal data breach presenting a significant risk will be reported to SDAIA and affected individuals within the prescribed legal timeframes.

9. Your Rights as a Data Subject

Under the PDPL, you have the right to:

• Be informed about the collection and processing of your personal data.
• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal data where legally applicable.
• Withdraw consent where processing is based on consent.
• Object to processing for direct marketing purposes.

Requests may be submitted using the contact information provided below. You also have the right to lodge a complaint with SDAIA where permitted under the PDPL.

10. Minors’ Data

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors without appropriate parental or guardian consent where required.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites and encourage users to review their respective privacy policies.

12. Contact Us

ZIMAM Law Firm
Address: Amarah Irqah, Irqah, Riyadh 12588, Kingdom of Saudi Arabia
Email: info@zimamlaw.com
Phone: +966 55 110 0313
Website: www.zimamlaw.com

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our business practices. Any updates will be published on this page together with the revised Last Updated date.

This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.