Last updated: September 19, 2026
This Privacy Policy explains how Mohamed Abo Khatwa Legal Consultancy, operating under Araa Group for Advocacy & Legal Consultancy and the website khatwalaw.com (“we”, “us”, “our”, or the “Firm”), collects, uses, discloses, and protects the personal data of visitors and clients who interact with our website and legal services. This Policy is issued in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and, where applicable to visitors located in the European Economic Area or United Kingdom, the General Data Protection Regulation (“GDPR”).
1. Who We Are
The data controller responsible for your personal data is:
- Firm: Mohamed Abo Khatwa Legal Consultancy (Araa Group for Advocacy & Legal Consultancy)
- Address: Empire Heights Tower B, Business Bay, Dubai, United Arab Emirates
- Phone: +971 50 788 4960
- Email: info@khatwalaw.com
2. Information We Collect
We may collect the following categories of personal data when you visit our website or engage our legal services:
- Contact and identification data: your name, email address, phone/WhatsApp number, and any information you submit through our contact or consultation request forms.
- Case and inquiry details: the content of your message, the legal matter you are inquiring about (for example corporate and commercial disputes, real estate matters, employment issues, criminal defense, or family law and estate planning), and any documents you choose to share with us.
- Technical and usage data: IP address, browser type, device information, pages visited, and general browsing behaviour, collected automatically through cookies and analytics tools.
- Communications data: records of calls, emails, WhatsApp messages, or live chat conversations you have with our team.
3. How We Collect Your Information
We collect personal data both directly and indirectly:
- Directly from you when you fill in our contact form, book a consultation, call or WhatsApp our office, or correspond with us by email.
- Automatically through cookies and similar technologies (such as Google Analytics) when you browse our website.
- From third parties where relevant to a legal matter you have instructed us on, such as courts, government registries, opposing counsel, or counterparties, in the course of providing legal representation and advisory services.
4. How We Use Your Information
We use the personal data we collect to:
- Respond to your enquiries and schedule consultations;
- Provide, manage, and administer our legal representation, litigation, and advisory services;
- Communicate with you about your case or matter, including by phone, email, or WhatsApp;
- Send you updates, newsletters, or marketing communications where you have consented to receive them;
- Maintain client files, internal records, invoicing, and compliance with the professional and ethical obligations applicable to lawyers and legal consultants in the UAE;
- Analyse and improve our website’s performance, content, and user experience;
- Comply with applicable laws, regulations, court orders, and lawful requests from competent authorities.
5. Legal Basis for Processing
We process your personal data on one or more of the following legal bases: your consent (for example, when you submit a form or accept cookies); the necessity of processing to take steps at your request prior to engaging our services or to perform a client engagement; our legitimate interests in operating, marketing, and securing our website and legal practice; and compliance with our legal, professional, and ethical obligations as a licensed legal consultancy.
6. Sharing Your Information with Third Parties
We do not sell your personal data. We may share your information, on a need-to-know basis, with the following categories of recipients:
- Service providers: IT hosting and website providers, email and communication tools, and analytics providers (such as Google Analytics), bound by confidentiality obligations.
- Courts and counsel: co-counsel, expert witnesses, courts, the Dubai Rental Dispute Center, MOHRE, DIFC and Abu Dhabi Courts, and other competent bodies, where necessary to carry out your instructions or represent you in a legal matter.
- Regulatory and law enforcement authorities: where required by UAE law, a court order, or a valid request from a competent authority.
- Business transfers: in the event of a merger, acquisition, or restructuring of our practice, personal data may be transferred as part of that transaction, subject to appropriate confidentiality protections.
7. Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies to operate correctly, remember your preferences, and understand how visitors use our site. This includes essential cookies required for core site functionality, and analytics cookies (such as Google Analytics) that help us understand traffic and improve our content. You can control or disable cookies through your browser settings and, where applicable, through the cookie consent banner displayed on our website. Please note that disabling certain cookies may affect the functionality of the site.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to provide our legal services, maintain client files and business records, and comply with applicable legal, regulatory, and professional record-keeping obligations applicable to legal practitioners in the UAE. When personal data is no longer required, we securely delete or anonymise it.
9. Your Rights
Subject to the conditions and exceptions set out in the UAE PDPL (and, where applicable, the GDPR), you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete personal data;
- Request deletion of your personal data, where applicable;
- Object to or restrict certain processing of your personal data, including direct marketing;
- Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
- Data portability, where applicable, to receive your personal data in a structured, commonly used format;
- Lodge a complaint with the UAE Data Office or the relevant competent authority if you believe your personal data has been processed unlawfully.
To exercise any of these rights, please contact us using the details in Section 12 below. We may need to verify your identity before responding to your request.
10. Data Security
We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including secure hosting, access controls, and confidentiality obligations for our staff and service providers. As lawyers, we also maintain strict client confidentiality in accordance with our professional and ethical duties. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. International Data Transfers
Your personal data is primarily processed and stored within the United Arab Emirates. Where we engage service providers or process data outside the UAE (for example, cloud hosting or analytics providers with servers located abroad), we take reasonable steps to ensure that such transfers are subject to appropriate safeguards consistent with the UAE PDPL, such as verifying that the recipient country or organisation maintains an adequate level of data protection or that appropriate contractual protections are in place.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:
- Mohamed Abo Khatwa Legal Consultancy
- Address: Empire Heights Tower B, Business Bay, Dubai, United Arab Emirates
- Phone: +971 50 788 4960
- Email: info@khatwalaw.com
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.