1. Introduction
This Privacy Policy describes how Legitas - Issam N. Maalouf Law Firm ("we," "our," or "us") collects, uses, and protects your personal information when you visit our website at legitas.uk (the "Site") or engage our legal services.
We are committed to protecting your privacy and maintaining the confidentiality of your personal information in accordance with applicable data protection laws, including the Lebanese Data Protection Law and international standards such as the General Data Protection Regulation (GDPR) for our international clients.
2. Information We Collect
2.1 Information You Provide Voluntarily
- Contact Information: Name, email address, phone number, mailing address
- Professional Information: Company affiliation, job title, professional credentials
- Legal Matter Information: Details about your legal issues, case information, and other information you provide when seeking legal advice
- Communication Records: Correspondence, emails, and other communications with our firm
2.2 Information Collected Automatically
- Technical Data: IP address, browser type, device identifiers, operating system
- Usage Data: Pages visited, time spent on site, referring pages, click-through data
- Location Data: General geographic location based on IP address
2.3 Information from Third Parties
- Information from professional networks and referrals
- Public records and legal databases for due diligence
- Information from opposing parties, courts, or regulatory bodies in the course of legal proceedings
3. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contractual Necessity: To perform our obligations under engagement agreements
- Legal Obligation: To comply with legal and regulatory requirements
- Legitimate Interest: To manage our business operations and improve our services
- Consent: For specific purposes where you have given explicit consent
4. How We Use Your Information
We use your personal information for the following purposes:
- To provide legal services and representation
- To communicate with you about your case or inquiry
- To manage client relationships and billing
- To comply with legal, regulatory, and professional obligations
- To conduct conflict of interest checks
- To improve our website and services
- To prevent fraud and ensure security
- To manage our business operations
5. Confidentiality and Attorney-Client Privilege
All information shared with our firm in the course of seeking or providing legal services is protected by:
- Attorney-Client Privilege: Confidential communications between you and our attorneys
- Professional Confidentiality: Ethical obligations under Lebanese Bar Association rules
- Legal Professional Privilege: Protection under applicable laws and regulations
We maintain strict confidentiality protocols and will not disclose privileged information except as required by law or with your express consent.
6. International Data Transfers
Given our international practice and GCC coverage, your information may be transferred to and processed in countries outside Lebanon, including:
- United Arab Emirates (UAE)
- Kingdom of Saudi Arabia
- Qatar, Kuwait, Bahrain, Oman
- European Union countries
- Other jurisdictions as required for legal proceedings
We ensure appropriate safeguards for international transfers, including:
- Adequacy decisions or standard contractual clauses
- Professional confidentiality obligations
- Encrypted communications and secure data storage
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide legal services and complete your representation
- Comply with legal and regulatory requirements
- Maintain records for professional liability and compliance purposes
- Resolve disputes and enforce our agreements
Typically, we retain client files for minimum 7 years after matter completion, or longer as required by law or professional obligations.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
8.1 Right to Access
You may request access to the personal information we hold about you.
8.2 Right to Rectification
You may request correction of inaccurate or incomplete information.
8.3 Right to Erasure
You may request deletion of your personal information, subject to legal and professional obligations.
8.4 Right to Restrict Processing
You may request limitation of how we use your information.
8.5 Right to Object
You may object to certain processing activities.
8.6 Right to Data Portability
You may request transfer of your information to another service provider.
8.7 Right to Withdraw Consent
You may withdraw consent at any time without affecting prior lawful processing.
9. Security Measures
We implement appropriate technical and organizational security measures, including:
- Encrypted communication channels for confidential information
- Secure servers and cloud storage with access controls
- Multi-factor authentication for systems access
- Regular security assessments and updates
- Staff training on data protection and confidentiality
- Physical security for our offices and files
10. Sharing and Disclosure
We do not sell your personal information. We may share information only as follows:
- Service Providers: IT services, cloud storage, communication platforms (bound by confidentiality)
- Professional Advisors: Accountants, auditors, other legal professionals (with your consent)
- Courts and Tribunals: As required in legal proceedings
- Regulatory Authorities: To comply with legal obligations
- Opposing Parties: As required or permitted by law in litigation
- Business Transfers: In connection with merger, acquisition, or sale of practice
11. Cookies and Tracking Technologies
Our website uses minimal cookies for:
- Essential site functionality
- Language preference storage
- Basic analytics to improve user experience
We do not use cookies for advertising or sell data to third parties.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
13. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect information from children without parental consent.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Email notification to active clients
- Noting the "Last Updated" date at the top of this policy
15. Contact Us
Data Protection Officer: Antoine A. Abdessater
Email: antoine@legitas.uk
Phone: +9611292230
Address: Furn El Chebbak, Ras El Khat Street, Farah Bldg, Beirut, Lebanon
16. Complaints
If you have concerns about our privacy practices, you may:
- Contact our Data Protection Officer directly
- File a complaint with the Lebanese Data Protection Authority
- For EU residents, contact your local supervisory authority
This Privacy Policy is drafted in English, French, and Arabic. In case of discrepancies, the English version shall prevail for international matters, subject to governing law provisions.