Azhari Legal Consultancy
Privacy Policy
Last updated 20 October 2026
Draft for review by the firm
Azhari Legal Consultancy (“we”, “us”) operates this website. This notice explains what personal data we process when you visit the site or contact us, why we do so, and what rights you have. It is intended to meet the requirements of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
1. Controller
Azhari Legal Consultancy, Executive Tower D (Aspect Tower), Office 901, Business Bay, P.O. Box 213811, Dubai, United Arab Emirates. Telephone +971 (0) 4 447 3557, e-mail info@azhari-law.com. [Legal entity name, licence numbers and, where required, the EU representative under Article 27 GDPR to be inserted.]
2. What happens when you visit the site
The website is a set of static pages served from a server of our hosting provider in the United States (Contabo Inc., St. Louis, Missouri). When you open a page, the server records technical data about the request: the requested address, the date and time, the amount of data transferred, the referring page, the details your browser sends with the request (such as the browser type and language settings) and your IP address. The server keeps this in an access log for the sole purpose of operating the site securely and detecting misuse. The legal basis is our legitimate interest in a secure and stable website (Article 6(1)(f) GDPR). The log contains your full IP address. Log files are deleted after [period to be inserted].
The site sets no cookies, uses no analytics or tracking, embeds no third-party services and loads no resources from other companies’ servers. Fonts, images and the map are served from our own server. The map is a static image from Google Maps (map data © Google), stored on our own server; nothing is sent to Google when you view it. The links “Open in Google Maps” and “Open in Apple Maps” connect you to those providers only when you click them.
The site can be shown light or dark. By default it follows your device’s setting. If you choose “Light” or “Dark” yourself, your browser keeps that choice in its local storage on your device (the entry “azh-theme”), so the next page opens the same way. It is never sent to us or anyone else, and you can remove it by choosing “Automatic” again or by clearing your browser’s site data.
3. Contact form and consultation request
If you use the contact form or the free-consultation form, we process the data you enter (name, telephone number, e-mail address, your message and, on the consultation form, the employment details you provide) in order to answer your enquiry and, where you ask us to, to assess your case. The legal basis is the performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and, under UAE law, the fact that the processing is necessary for the contract you request. Providing the data is voluntary, but we cannot answer without it.
Form data is sent from our server through the e-mail service Brevo (Sendinblue SAS, Paris, France) to our e-mail system at Microsoft 365 and is then handled in the same way as any other correspondence with our office. It is not stored on the web server. To protect the form against automated misuse we use a hidden field and a time check, and we limit the number of submissions from one IP address; for this purpose the address is stored in a file on the web server; it is no longer used after one hour and is removed the next time the form is used. No CAPTCHA service is involved. The legal basis for these safeguards is our legitimate interest in protecting the form against misuse (Article 6(1)(f) GDPR).
4. Where your data is processed
The web server is located in the United States. [Safeguards for the transfer to the hosting provider in the United States to be inserted.] Enquiries are read and answered in our office in Dubai, United Arab Emirates. For visitors in the EU this means a transfer to a country outside the EU; it is necessary for steps taken at your request before entering into a contract or for the performance of the contract you request (Article 49(1)(b) GDPR). Brevo, which delivers the form e-mails, and our e-mail provider, Microsoft, process enquiries on our behalf as processors under data processing agreements; Brevo does so in the European Union. [Location of our Microsoft 365 data and the safeguards for transfers outside the EU to be inserted.]
5. Retention
We keep correspondence for as long as required to handle your matter and to meet the professional and statutory record-keeping duties that apply to a legal consultancy in Dubai. Enquiries that do not lead to an engagement are deleted once they have been dealt with, unless a longer period is required by law.
6. Your rights
You have the right to obtain information about the personal data we hold about you, to have inaccurate data corrected, to have data deleted or its processing restricted where the law allows, and to receive the data you provided in a structured, commonly used and machine-readable format (data portability). Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing carried out before the withdrawal. To exercise your rights, please use the contact details in section 1. [Separate contact for data protection requests, if any, to be inserted.] You may also lodge a complaint with a supervisory authority: in the UAE, the UAE Data Office; in the EU, the data protection authority of your Member State.
Right to object. Where we process data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Article 21 GDPR).
We do not use automated decision-making, including profiling.
7. Changes
We will update this notice when the site or the law changes. The date of the current version is shown at the top of this page.
