Privacy Policy
We take the protection of your privacy seriously. This policy explains how we collect personal data, how we use it, your rights regarding your data, and how you can contact us to request information or the deletion of data. This policy applies to the data collected by our online platform and our consultation and representation services in Kuwait, and includes information provided through the website, by email, through contact forms, and through our direct interaction with clients.
1) What data do we collect?
We collect the information necessary to provide a complete and effective legal service. Examples of the data we may collect:
- Contact data: Full name, phone number, email address, postal address or correspondence address.
- Case data / documents: The files and documents you attach (PDF, DOC, images), the case summary, case notes, and copies of contracts or official papers.
- Technical data: Internet Protocol (IP) address, device and browser information, the website pages you visited, cookie data, and analytics tool data.
- Payment and billing data: Billing information such as the account holder's name, billing address, and payment records; we do not collect credit card data directly if you use a third-party payment gateway — card data is managed by the secure payment provider.
- Other data: Your explicit consents, electronic signatures, records of contact with the office (phone calls/emails and meeting records), and data required for legal compliance.
2) How do we use the data?
We use your data only for the following purposes and in proportion to the purpose for which it was collected:
- To process consultation requests and represent cases: Preparing the file, communicating with you, giving advice, and managing legal procedures.
- To issue invoices and manage payments: Calculating fees, issuing invoices, and following up on payments.
- To improve our services and website content: Carrying out website usage analytics to improve performance, content, and experience.
- To comply with legal obligations: Complying with requests from judicial or administrative authorities and responding to legal subpoenas or enforcement requests.
- To send service-related communications: Confirming appointments, case status updates, and administrative correspondence related to your services.
With your consent: For marketing or news purposes when you give explicit consent (you may withdraw this consent at any time).
3) Legal basis for processing
We process data according to clear legal grounds, including:
- Performance of a contract/agreement with you — Processing the data needed to carry out the legal services you request.
- Compliance with legal obligations — Such as keeping accounting records or complying with requests from official authorities.
- Legitimate interest — Improving security and protecting the website and the office's services, while respecting your rights and privacy.
- Explicit consent — In certain cases (for example: newsletters or marketing), we rely on your explicit consent.
4) Who do we share data with?
We may need to share parts of your data with trusted parties to carry out the service or to comply with the law, and only to the extent necessary:
- Technical service providers: Website hosting, cloud storage (S3 or similar), case management systems, email providers, and payment gateway providers.
- External advisors: Accounting experts, technical experts, investigators, or translators when needed, with your consent or as required by the case.
- Legal/government authorities: When a legal request or court order is issued.
Every third party works under contracts that oblige them not to use the data for other purposes (Data Processing Agreement). When data is transferred outside Kuwait, we will take appropriate safeguards (such as standard data transfer clauses) to protect your rights.
5) Your rights regarding your data
- Under this policy and as permitted by applicable laws, you have the right to:
- Request access to the personal data we hold about you.
- Request correction if your information is inaccurate or incomplete.
- Request deletion in cases where there are no legal grounds requiring us to keep the data (with exceptions for record keeping under regulations).
- Restrict processing or object to certain processing when specific legal rules apply.
- Request transfer of data in a machine-readable format where technically possible.
How to submit a request: send your request to: info@kwlawfirms.com with the email subject: Privacy Request — {{request type}}. We will respond within 30 days of receiving the request, and we may ask for documents to verify your identity before fulfilling the request, to protect the confidentiality of your data.
6) Storage and retention period
- We keep data only for the period necessary to achieve its purposes or in accordance with legal and regulatory requirements (such as keeping accounting records for up to 7 years or the period required under local laws). Once there is no longer a practical need, we may archive the data in encrypted form for a specified legal period and then delete it securely, unless the client requests otherwise or official authorities require it to be kept.
7) Data security
We adopt technical and administrative measures to protect your data from unauthorized access, loss, or leakage, including:
- Encrypting data in transit (TLS) and at rest (encryption at rest).
- Role-based access control (Role-based access) with the principle of least privilege (least privilege).
- Audit logs and a system for monitoring access and activity.
- Regular backup and data recovery policies.
- Periodic security testing and updating of protection systems when necessary.
However, 100% complete security cannot be guaranteed on the internet; we therefore ask for your cooperation by following security instructions when exchanging sensitive data.
8) Cookies and similar technologies
We use cookies for the purposes of operating and improving the website, usage analytics, and advertising. Types of cookies include:
- Necessary for the operation of the website;
- Performance/analytics to understand how the website is used;
- Preferences to save user settings;
- Marketing/advertising to improve the advertising experience.
You can manage cookie consents through your browser settings or through the Cookie Consent Manager tool on the website. For more details, refer to the Cookie Policy page.
9) External links
- The website may contain links to third-party websites. We are not responsible for the privacy practices or the content of those websites. We advise you to review the privacy policies of any website you visit through our links.
10) Contact and updates
- We reserve the right to amend this policy whenever we consider it necessary (to respond to legislative or operational changes). We will publish the effective date and the amendments on this page. In the event of material changes, we will notify users through a clear notice on the website or by email if we keep your contact address.
Effective date: 7/11/2025.
11) Complaints and regulatory authorities
- If you have a question about the processing of your data or wish to file a complaint, please contact us first at info@kwlawfirms.com. If the matter is not resolved, the complaint may be directed to the competent data protection regulatory authority in Kuwait or the authority with jurisdiction.