Law & legal consulting — for companies, government entities and foreign investorsMadinah · Riyadh · Jeddah · Abha
LAWAEHLaw & Legal Consulting
AR Request an assessment

Privacy policy

Last reviewed: 14 October 2026

This policy explains how Lawaeh Law & Legal Consulting (“Lawaeh”, “we”) processes personal data received through this website. We apply the Saudi Personal Data Protection Law and its implementing regulations and, where it applies to you, the EU General Data Protection Regulation (GDPR).

1. Controller

Lawaeh Law & Legal Consulting, head office Madinah, Kingdom of Saudi Arabia, headed by Ahmed Jaber, a lawyer licensed by the Ministry of Justice under licence no. 35340. Contact: info@lawaehlaw.com.

2. What we collect

  • Data you submit in the assessment form: name, organisation, position, email, phone, country, the names of parties, and the description you choose to provide.
  • Technical data needed to deliver the site securely (for example IP address in server logs kept by our hosting provider).
  • Aggregated, cookie-free page statistics (Cloudflare Web Analytics), which do not identify you.

3. Why we process it

  • To answer your request and carry out a conflict-of-interest check — on the basis of your consent and steps taken at your request before an engagement.
  • To keep the site secure and functioning — on the basis of our legitimate interest.
  • To meet legal and professional obligations.

4. Cookies

The site sets no advertising or tracking cookies. If you switch between light and dark mode, that choice is stored only in your browser.

5. Who receives it

Form submissions are delivered by email through the service provider Web3Forms; the site is hosted, and its email routed, by Cloudflare; and we receive email on Google's mail service. These providers may process data outside the Kingdom; where this happens we limit the data to what the purpose requires and rely on the safeguards permitted by the Personal Data Protection Law and its regulation on transfers outside the Kingdom. We do not sell personal data or share it for marketing.

6. Retention

Requests that do not lead to an engagement are deleted within twelve months, except conflict-check records, which we keep as long as professional rules require. Engagement files are kept for the period required by law.

7. Your rights

You may ask to be informed about, access, obtain a copy of, correct or delete your data, or withdraw consent, as the applicable law provides. Write to info@lawaehlaw.com. We respond within the period set by the implementing regulations. You may also complain to the Saudi Data and AI Authority (SDAIA).

8. Security

The site is served over HTTPS only, with a strict content security policy and no third-party scripts beyond those named above.

9. Professional confidentiality and data breaches

Information we receive is subject to the duties of professional confidentiality under the Law of Legal Practice. We keep a record of processing activities and a written procedure for personal-data breaches; if a breach is likely to harm you, we notify the competent authority within the statutory period and inform you without undue delay.

10. Changes

We will publish any change on this page with a new review date.