Privacy Policy

This Privacy Policy explains how Amna Advocates (“we,” “our,” “us”) collects, uses, discloses, and protects personal data when you visit our website, communicate with us, or use our services. By using our website, you agree to this Policy.

1) Scope

This Policy applies to personal data processed via our website, inquiry forms, newsletters, client onboarding, and matter management systems. It does not cover third-party websites linked from ours.

2) What we collect

  • Identification & contact details: name, job title, organization, address, phone, email.
  • Professional information: engagement history, contracts, billing details.
  • Matter data: facts, evidence, correspondence, and documents you or third parties provide.
  • Compliance data: KYC/AML information, sanctions and adverse media checks where required by law.
  • Technical data: IP address, device identifiers, browser type, pages viewed, and interactions (via cookies and similar technologies).
  • Preferences: language, communication choices, and notification settings.

3) Sources of data

  • Directly from you (forms, emails, calls, meetings, uploads).
  • From your organization or advisors.
  • Public or subscription databases (e.g., corporate registries, court records, media) for due diligence.
  • Website analytics and cookie tools.

4) Purposes of processing

We process personal data to:

  • Provide and improve legal services, respond to inquiries, and manage client relationships.
  • Fulfill legal and regulatory obligations (e.g., conflict checks, KYC/AML, recordkeeping).
  • Protect our rights, investigate misuse, and ensure website security.
  • Manage billing, accounting, and internal administration.
  • Send service updates and insights consistent with your preferences (you may opt out at any time).
  • Operate analytics to understand usage and enhance user experience.

5) Lawful bases

Depending on the context, we rely on one or more of the following:

  • Performance of a contract or steps at your request before entering a contract.
  • Compliance with legal obligations (including professional duties).
  • Legitimate interests (e.g., securing systems, developing services, managing our business) balanced against your interests and rights.
  • Consent where required; you may withdraw consent at any time.

6) Cookies and similar technologies

We use necessary cookies to operate the website and optional analytics cookies to measure performance. You can manage cookies via your browser or the site’s preferences panel (where available). Disabling some cookies may affect site functionality.

7) Disclosures and recipients

We may share personal data with:

  • Service providers/agents under contract (IT, hosting, archiving, translation, due-diligence, and e-discovery providers).
  • Co-counsel, experts, and counsel engaged for your matter.
  • Courts, regulators, law enforcement, and authorities where required or permitted by law.
  • Professional advisers (auditors, insurers).
    We do not sell personal data.

8) International transfers

Where data is transferred outside your jurisdiction, we implement appropriate safeguards (e.g., contractual protections, risk assessments) to protect it in accordance with applicable data protection laws.

9) Retention

We retain personal data only as long as necessary for the purposes described above, including legal, regulatory, accounting, and professional requirements. After retention periods expire, we securely delete or anonymize data.

10) Security

We use administrative, technical, and physical measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is fully secure; we continually improve safeguards and limit access on a need-to-know basis.

11) Your rights

Subject to applicable law, you may have the right to request access, correction, deletion, restriction, portability, or to object to certain processing. Where we rely on consent, you may withdraw it at any time. To exercise rights, please use the contact options available on our website.

12) Children’s data

Our website and services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, please use the website’s contact options so we can address it.

13) Professional confidentiality and privilege

Information shared for the purpose of seeking legal advice may be protected by professional secrecy or legal privilege subject to applicable laws and court rules. We handle all client information with strict confidentiality.

14) Third-party links

Our website may contain links to third-party sites or services. Their privacy practices are independent of ours; review their policies before providing personal data.

15) Updates to this Policy

We may update this Policy to reflect changes in our practices, technologies, or legal requirements. Continued use of the website after changes take effect indicates acceptance of the updated Policy.