Privacy Policy

1. Introduction

Khaled Altulaiqi Law Firm ("the Firm", "we", "our") respects your privacy and is committed to protecting any personal information you share with us. This policy describes how we collect, use, store and disclose personal data in connection with our website and our legal services.

2. Information we collect

We may collect the following categories of information:

• Contact information you provide via consultation forms or email (name, phone, email, organisation).
• Details of the legal matter you submit, to the extent you choose to share them.
• Technical information such as IP address, browser type, pages visited and time on site.
• Information you provide if you apply for a position at the firm.

3. How we use your information

Personal data is used to respond to your enquiry, to provide legal services, to fulfil our regulatory and professional obligations, and to operate, secure and improve our website.

4. Confidentiality

All client communications are treated as strictly confidential and are subject to professional secrecy under Saudi law and applicable bar rules. We never sell personal data.

5. Sharing

We may share personal data only where necessary — for example with co-counsel, courts, regulators, or service providers bound by confidentiality — or where required by law.

6. Where your data is hosted (data residency)

Our website, application servers and database are hosted with WafaiCloud in data centres located in Riyadh, Saudi Arabia. Personal data you submit through this site — including consultation enquiries and any details of your legal matter — is stored on infrastructure inside the Kingdom, consistent with the Personal Data Protection Law (PDPL).

7. Service providers (subprocessors)

We rely on a small number of vetted providers to operate the site:

• WafaiCloud (Riyadh, KSA) — hosting of the website, application and database; all core data is stored here in the Kingdom.
• Cloudflare — DNS resolution and bot/abuse protection (Turnstile CAPTCHA) only. Cloudflare does not host our application or database.
• Resend — delivery of the transactional email notifications generated by our contact form.

8. International data transfers

Core business and client data is stored in the Kingdom. Two limited services operate outside Saudi Arabia: our email-delivery provider (Resend) and our DNS/CAPTCHA provider (Cloudflare). Where these necessarily process limited personal data outside the Kingdom — such as an email address submitted through a form, or an IP address used for security — we do so only to the extent required and in accordance with Article 29 of the PDPL and its implementing regulations. We do not transfer the substantive details of your legal matter abroad.

9. Retention

We retain personal data for as long as needed to provide our services and to comply with our legal and regulatory obligations.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you. Contact us at khalid.altaliqi@gmail.com.

11. Cookies

We use a minimal set of essential cookies. Non-essential analytics cookies are loaded only with your consent — managed through the banner shown on first visit.

12. Changes

We may update this policy from time to time. The "Last updated" date above reflects the latest revision.

13. Contact

Questions about this policy can be directed to khalid.altaliqi@gmail.com or by mail to our Riyadh office.