Legal Representative

Privacy policy

This policy explains how the LR Law website processes personal data when you browse the site or contact us through the available channels.

Last updated: 27 August 2026

Scope and responsible entity

This policy applies to the LR Law (Legal Representative) website and data connected with its use. You can contact us about privacy by email, telephone, or at either office address shown below.

  • info@lrlaw.sa
  • +966 55 036 5770
  • Office 301, 3rd Floor, Anas Ibn Malik Road, Al-Narjis Dist. 13328, Riyadh, Saudi Arabia
  • Office 07, 4th Floor, Al-Kayyal Street, Al-Rawdah Dist. 4176, Jeddah, Saudi Arabia

Visiting the site does not by itself create a lawyer-client relationship. Data processed after an engagement is accepted is also governed by the engagement terms and applicable legal and professional duties.

Data we process and how we collect it

Data you choose to provide

We may receive your name, contact details, the content of your inquiry, and information you attach when you contact us through WhatsApp, telephone, or email. Please avoid sending information that is not needed for the initial review.

WhatsApp message composer

Your name, selected practice area, and matter summary are entered in your browser. The website does not send those fields to an LR Law server or store them; it opens a WhatsApp message for you to review and send yourself. When the tool is used, we record an analytics event containing only the page language and selected practice area—not your name or message text.

Technical usage data

We use a self-hosted Umami installation to measure visits, performance, and essential interactions. This may include the requested page, referrer, browser and device type, approximate country or region, performance data, and contact-action events. We do not use analytics cookies, enable cross-site tracking, or automatically collect visitor names.

Our hosting and security systems may record standard technical logs, such as IP address, request time, requested page, and browser information, for operation and security.

Purposes and legal bases

We process data as necessary to respond to your request, assess whether a matter falls within our practice, arrange contact, provide services when agreed, operate and secure the website, understand and improve its performance, and comply with legal and professional obligations.

Depending on the purpose and circumstances, processing is based on your request to take steps before an engagement or to perform it, your consent where required, a legal or judicial obligation, or a legitimate interest that does not override your rights under applicable law.

Data sharing and processing outside Saudi Arabia

We do not sell personal data or disclose it for direct marketing. We may use service providers as necessary for hosting, security, our self-hosted analytics, email, telecommunications, and WhatsApp. We may also disclose data to judicial, regulatory, or professional authorities where required by law, or to a confidential adviser or service provider where legitimately needed.

Some communications and security providers may process data outside Saudi Arabia. Where this occurs, we handle transfers and disclosures in accordance with the Personal Data Protection Law and applicable transfer requirements, limited to what is necessary for the stated purpose.

Retention, destruction, and security

We retain each category only for as long as needed for the purpose for which it was collected, to handle the inquiry or provide the service, meet legal and professional obligations, and resolve claims. The period varies with the data and matter. When the legal and professional need ends, we delete, destroy, or anonymize the data so it can no longer be used to identify you, subject to backup cycles.

We apply technical and organizational safeguards appropriate to the data, including access controls, encrypted connections, and protection of the hosting infrastructure. No electronic transmission or storage method is entirely risk-free.

Your personal-data rights

Under the Personal Data Protection Law, and subject to the purpose of processing and legal exceptions, you may have the right to be informed, access your data, obtain it in a clear and readable format, request correction, completion or updating, request destruction when it is no longer needed, withdraw consent where consent is the basis of processing, and complain to the competent authority.

To exercise a right, email us with the right you wish to exercise and a suitable way for us to verify your identity. We will respond without delay and within the statutory period; where a lawful extension is needed, we will notify you.

Contact and complaints

For questions about this policy, or to submit a privacy request, objection, or complaint, contact us at info@lrlaw.sa. We will review the request and contact you to verify identity where necessary.

If you are not satisfied with our handling of your complaint, you may contact the Saudi competent authority for personal-data protection through SDAIA's National Data Governance Platform.

Updates to this policy

We review this policy when the website, analytics tools, contact channels, or legal requirements change. We publish the revised version here and show its last-updated date at the top of the page.