Sultan Legal Firm (Sultan Al Hosani Legal Consultancy)

Responsibility

This Privacy Notice is issued by Sultan Legal Firm, a legal consultancy and law practice operating in the United Arab Emirates (“we”, “us”, or “our”). This Privacy Notice has been prepared in accordance with applicable data protection and privacy laws in the United Arab Emirates. We are committed to safeguarding the privacy and security of personal information that we process in the course of our business. This Privacy Notice explains how and why we collect, use, store, disclose, and protect personal information, and outlines the rights of individuals whose personal information we process. For the purposes of applicable data protection laws, Sultan Legal Firm acts as the data controller in respect of the personal information processed by us.

Collection of Personal Information

We may collect personal information from you in the course of our business, including when:

• You contact us or request information or legal advice;
• You instruct us to provide legal or consultancy services;
• You use our website or communicate with us electronically;
• You attend meetings, events, or visit our offices;
• You have a professional or contractual relationship with us.

The personal information we may process includes, but is not limited to:

• Basic details such as name, job title, employer, and contact details (email address, phone number, physical address);
• Identification and verification information where required by law;
• Information relating to the legal matter or service for which you seek our assistance;
• Financial or billing information relevant to our engagement;
• Technical information such as IP address, browser type, device information, and website usage data;
• Information relating to visits to our offices, meetings, or events;
• Any other information that you voluntarily provide to us.

We collect most personal information directly from you. In certain circumstances, we may also collect information from third parties, such as clients, counterparties, regulators, publicly available sources, or service providers, in accordance with applicable law. All information provided to us may be confidential, and we protect such information in line with our professional obligations and legal requirements.

Purposes of Processing

We process personal information only where we have a lawful basis to do so, including with your consent (where required), or where processing is necessary for the performance of a contract, compliance with legal obligations, or our legitimate business interests.

Personal information is processed for the following purposes:

• Providing legal and consultancy services;
• Communicating with you regarding legal matters, services, publications, and updates;
• Managing our professional and business relationship with you or your organization;
• Billing, accounting, auditing, and administrative purposes;
• Compliance with legal, regulatory, and risk management obligations;
• Managing access to our premises and IT systems;
• Responding to enquiries, requests, or complaints;
• Improving our website, services, and client experience;
• Any purpose ancillary or related to the above.

Client Relationship Management

We may use your contact details to send legal updates, newsletters, invitations to events, or information about our services.
You may opt out of receiving such communications at any time by contacting us or by using the unsubscribe options provided in our communications.

Cookies

Our website uses cookies and similar technologies to enhance functionality and analyze website usage. Cookies may collect information such as IP address, browser type, and interaction data. You may configure your browser to refuse cookies; however, disabling cookies may limit certain features or functionality of the website.

Sharing Your Personal Information

We do not sell, rent, or commercially distribute personal information.

We may share personal information only:

• Where necessary to provide our legal services;
• With trusted service providers who are subject to confidentiality obligations;
• Where required by law or regulatory authorities;
• Where necessary to establish, exercise, or defend legal rights;
• With your explicit consent.

Cross-Border Transfer of Information

Your personal information may be stored or processed outside the United Arab Emirates where we use cloud-based systems or third-party service providers. In such cases, we ensure appropriate safeguards are in place to protect your personal information in accordance with applicable law.

Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to establish or defend legal claims.

Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal information;
• Request correction or updating of inaccurate data;
• Request restriction or objection to processing in certain circumstances;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the competent authority.

These rights may be subject to limitations under applicable law.

Information Security

We implement reasonable administrative, technical, and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will become effective once posted on our website. We encourage you to review this Privacy Notice periodically.

Contact Details

If you have any questions about this Privacy Notice or how we handle your personal information, please contact us through our website.

Last updated: 2026