This Privacy Policy is provided for general information about how we handle personal data on this website. It is written in plain language and does not constitute legal advice. Where this policy is translated, the Arabic version prevails in case of any discrepancy.

Introduction & who we are

Alhujjah wa Albayan Law Firm & Legal Consultancy ("we", "us", or "our") operates this website and is the party responsible for the personal data described below. We are a law firm based in As-Safir Ash-Shubaili St., Central Unayzah, Al-Qassim, Saudi Arabia. This policy explains what personal data we collect through this website, why we collect it, the legal basis for processing it, and the rights you have over it.

Data we collect

We collect only the information you choose to provide. When you submit our contact or consultation form, we collect:

• Your name;
• Your phone number;
• Your email address;
• Your company name (optional);
• The details of your message, including any information you choose to include about your enquiry.

Please do not include sensitive or highly confidential details in the form. An initial enquiry does not create a lawyer–client relationship, and confidentiality protections for privileged communications apply only once an engagement has been formally agreed.

Purpose of processing

We use the personal data you provide to:

• Respond to your enquiry and contact you about your request;
• Assess whether and how we may be able to assist with your legal matter;
• Arrange and conduct an initial consultation where appropriate;
• Keep a record of our correspondence and meet our professional and regulatory obligations.

Legal basis (Saudi Personal Data Protection Law — PDPL)

Our processing of your personal data is governed by the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. We rely on the following legal bases:

• Your consent — given when you submit the contact form to ask us to respond to your enquiry;
• Legitimate interests — to manage and respond to enquiries, maintain records, and operate our practice, where this does not override your rights and interests;
• Legal and regulatory obligations — where we are required to retain or process data to comply with applicable law.

Data sharing

We do not sell your personal data, and we do not share it for advertising purposes. We may share it with trusted service providers (processors) who act on our instructions solely to operate this website — for example, a form-handling service that delivers your message to our inbox, and our email provider. These providers are permitted to process your data only as needed to provide their service and are bound to keep it confidential and secure. We may also disclose data where required by a competent authority or by applicable law.

Data retention

We keep the personal data you submit only for as long as necessary for the purpose for which it was collected — typically to handle your enquiry and for a reasonable period afterwards to maintain a record of our correspondence and to meet professional, regulatory, and legal obligations. When the data is no longer needed, we delete it or anonymise it.

Your rights as a data subject

Subject to the conditions and limits of the PDPL, you have the right to:

• Be informed about how your personal data is collected and used;
• Access the personal data we hold about you;
• Request correction of data that is inaccurate or incomplete;
• Request deletion of your data where it is no longer required for the purpose it was collected;
• Object to or restrict certain processing, and to withdraw consent where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal. To exercise any of these rights, see "Contacting us for data requests" below.

Cookies & analytics

We aim to keep this website lightweight and privacy-respecting. We do not use advertising or third-party tracking cookies. For understanding general traffic patterns we use cookieless, privacy-friendly Cloudflare analytics, which does not set cookies and does not build a profile of you across websites. Any strictly necessary cookies used for the basic operation or security of the site do not require consent.

Data security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access — for example, serving the site over an encrypted (HTTPS) connection and limiting access to enquiry data to those who need it to respond to you. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard the information you provide.

Contacting us for data requests

If you have any questions about this policy, or wish to access, correct, or delete your personal data, please contact us:

• By email at info@hujjahbayan.com;
• By phone at +966 53 363 0400;
• Or via WhatsApp .

We will respond to legitimate requests within the timeframe required by the PDPL.

Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" date shown above. We encourage you to review this page periodically.

Last updated

This Privacy Policy was last updated on 8 June 2026.