Privacy and Data Protection Policy

Privacy and Data Protection Policy

We, Lexpert advocacy and legal Consultancy, a professional company registered under the laws of the Kingdom of Saudi Arabia (hereinafter referred to as “we,” “the Company,” or the first-person pronoun), have developed this policy to clarify our commitments regarding the protection of privacy and personal data (“Policy”).

The Company is fully committed to complying with all applicable laws and regulations in the Kingdom of Saudi Arabia concerning the protection and confidentiality of personal data provided to us by our clients or other parties, in accordance with relevant legislation. We are dedicated to safeguarding the privacy of the information we process in the course of our business activities, including information we obtain from you (“you” or “your data”). This Policy explains how we collect, use, and store personal data, and outlines the rights of data subjects.

Our website and technical systems have adopted the legally required levels of protection and implemented the necessary technical measures to prevent loss, unauthorized use, alteration, or access by third parties. However, please be aware that online security measures may not offer absolute protection.

Data Controller

Name: Lexpert advocacy and legal Consultancy
Registered Office: Riyadh – Al Olaya District – Kingdom of Saudi Arabia
Legal Status: Professional company established under the applicable laws of the Kingdom

Personal Data We May Collect

We may collect your personal data in the course of our business, when you contact us, request information or legal services, use our website or other platforms, or through your relationship with any of our employees or clients.

The personal data we may process includes:

Identification details: name, job title, employer, position, contact details (email address, physical address, phone numbers).
Identity verification details: date of birth, passport information, or other identifiers to verify your identity.
Case-related information: data concerning the legal matter for which you seek our services.
Financial details: bank or other financial information relevant to our engagement.
Technical information: IP address, geolocation data, browser type, browsing history, interaction data with our website, and email marketing engagement.
Visit details: information regarding your visits to our offices or participation in events.
Other personal data provided to us directly or obtained from lawful sources.

We may collect this data directly from you, from your use of our services, or from third parties such as clients, employers, online platforms, regulatory authorities, or public records.

Purpose of Processing

We process your personal data for the following purposes:

Providing legal services to you.
Communicating legal updates and developments.
Managing our contractual and business relationship with you.
Complying with legal and regulatory obligations (e.g., anti-money laundering, tax compliance).
Maintaining accurate contact details.
Any other purpose connected to or consistent with the above.

Legal Basis for Processing

We collect and process personal data on one or more of the following legal bases:

Contractual necessity: where processing is required for the performance of a contract with you.
Legitimate interests: such as responding to inquiries or pursuing outstanding amounts.
Consent: where you have expressly agreed to certain uses of your data, such as via online forms.

Data Sharing

We do not share your personal data except with public or private entities where disclosure is required by law. In cases where we wish to share your data with other parties, we will obtain your prior consent.

International Data Transfers

We do not transfer your personal data outside the Kingdom of Saudi Arabia.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, considering legal and contractual obligations, internal retention policies, and legitimate business interests. Once the retention period expires, your data will no longer be accessible except for compliance with legal obligations or defense against legal claims.

Data Security

We apply appropriate security measures to protect personal data from accidental loss, unauthorized access, use, or disclosure. Our employees follow strict confidentiality standards, and any third-party service providers are required to adhere to equivalent privacy safeguards.

Your Rights

You have the right to:

Access your personal data and understand how it is processed.
Rectify inaccurate personal data.
Request deletion of your personal data where legally permissible.
Restrict or object to processing under certain conditions.
Withdraw your consent at any time.
Request the transfer of your data where the legal basis is consent or a contract.

You may exercise these rights free of charge at any time by contacting us through the “Contact Us” section or via email at info@lxprt.com.

Updates

We reserve the right to amend this Policy at any time to reflect legislative, regulatory, or judicial changes. Any updates will be posted on our website.