Privacy Policy

Last Updated: 4 October 2026

Mannan Legal (“Mannan Legal,” the “Firm,” “we,” “us,” or “our”) respects the privacy of visitors to its website and users of its services and is committed to handling personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (“PDPL”) and its implementing regulations.

This Privacy Policy explains how we collect, use, retain, disclose, and protect personal data, the legal bases upon which such data may be processed, and the rights available to data subjects.

This Policy applies to personal data collected through:

https://mannan.legal

and through the contact and legal-service inquiry forms associated with the website.

1. Data Controller

Mannan Legal acts as the controller of personal data collected through the website unless otherwise stated.

For inquiries or requests concerning privacy or your personal data, please contact:

mannan.legal@gmail.com

2. Personal Data We May Collect

We aim to collect only the minimum personal data necessary for the purposes described in this Policy.

When you use a contact form or request legal assistance, we may collect:

  • Your name.
  • The name of the company or organization you represent.
  • Your email address.
  • Your telephone number, if provided.
  • Your preferred means of communication, where available.
  • The type of legal service in which you are interested.
  • Information you provide in the message or inquiry field.
  • Any other information you voluntarily provide when communicating with us.

Certain technical information may also be collected automatically where necessary to operate and protect the website, including:

  • Internet Protocol (IP) address.
  • Device and browser type.
  • Technical information relating to website use.
  • Security, error, and access logs.

We do not request sensitive personal data or confidential documents through the general inquiry form unless necessary and an appropriate communication channel has been provided.

3. Information Relating to Legal Matters

Please do not submit highly sensitive information, confidential documents, or unnecessary details concerning a dispute or legal matter through the general website inquiry form unless requested by the Firm.

Submitting an inquiry through the website does not, by itself, create an attorney-client relationship between you and Mannan Legal and does not mean that the Firm has accepted your matter or agreed to represent you.

A professional relationship is established only after the Firm accepts the engagement and the required procedures and agreements have been completed.

Where a professional relationship is established, information relating to the client or legal matter may also be subject to applicable professional and legal obligations and the terms of the relevant engagement agreement.

4. Purposes of Collecting and Processing Personal Data

We may process personal data for the following purposes:

1. Responding to inquiries submitted through the website.

2. Reviewing requests for legal services.

3. Communicating with you regarding your inquiry or requested service.

4. Identifying the appropriate practice area or service for your request.

5. Managing a professional relationship if you become a client of the Firm.

6. Protecting the website and our systems from unauthorized use, cyber threats, fraud, or misuse.

7. Improving website performance and user experience.

8. Complying with legal, regulatory, judicial, or governmental requirements applicable to the Firm.

9. Establishing, exercising, or defending legal rights and claims.

10. Sending professional updates or materials where you have requested them or provided consent where consent is required.

We will not subsequently process personal data for a purpose incompatible with the purpose for which it was collected unless such processing is permitted by applicable law or an appropriate legal basis is available.

5. Legal Bases for Processing

Depending on the nature of the processing, we may rely on one or more legal bases permitted under applicable law, including:

  • Your consent, where consent is the appropriate or required legal basis.
  • Taking steps at your request before entering into a contractual or professional relationship.
  • Performing an agreement or obligation to which you are a party.
  • Compliance with a legal or judicial requirement.
  • Protecting the legal rights and interests of the Firm or third parties where permitted by law.
  • Legitimate interests of the Firm where recognized by applicable law, such as network and information security and preventing misuse, provided such interests do not override the rights of data subjects.

Where processing is based on your consent, you may withdraw that consent in accordance with applicable requirements. Withdrawal does not affect the lawfulness of processing carried out before withdrawal or processing based on another lawful basis.

6. Whether Providing Personal Data Is Mandatory

Information identified as mandatory in a contact or inquiry form is generally required to allow us to receive, understand, and respond to your request.

You may choose not to provide optional information.

If you do not provide the essential information required to contact you or understand your request, we may be unable to respond appropriately or assess your request for legal services.

7. Sharing and Disclosure of Personal Data

We do not sell your personal data.

We may disclose the minimum personal data necessary to other parties where required, including:

  • Website hosting and technical infrastructure providers.
  • Email and message-delivery service providers.
  • Cybersecurity and technical support providers.
  • Professional advisers or service providers where necessary.
  • Governmental, regulatory, judicial, or law-enforcement authorities where disclosure is required by law, order, or other binding procedure.
  • Other parties where disclosure is otherwise permitted under applicable law.

Where applicable and required, we require service providers to process data for specified purposes and to implement appropriate safeguards.

8. Technical Service Providers

The website may use third-party technical providers to process data on behalf of Mannan Legal. Based on the website's current configuration, these may include:

  • Replit, for hosting or operating certain website components and technical infrastructure.
  • Resend, for processing and delivering messages submitted through website inquiry forms.
  • The email service provider used to receive and manage website communications.

Website inquiries are delivered to the Firm's designated email address:

mannan.legal@gmail.com

Technical service providers may change from time to time, subject to applicable data-protection requirements.

9. Processing or Transfer of Data Outside Saudi Arabia

Due to the nature of certain technical and cloud-based services used to operate the website and email systems, some personal data may be processed or stored by service providers whose infrastructure or certain operations are located outside the Kingdom of Saudi Arabia.

Where personal data is transferred or disclosed outside the Kingdom, Mannan Legal will take the measures required to comply with the PDPL, its implementing regulations, and applicable rules governing transfers of personal data outside Saudi Arabia. This may include limiting transfers to data necessary for the relevant purpose, assessing the level of protection, and implementing appropriate safeguards where required.

10. Cookies and Technical Information

The website may use operational technologies or cookies necessary to operate the website, remember certain preferences, and enhance security and performance.

If non-essential analytics or advertising technologies are introduced in the future, this Privacy Policy and the relevant cookie-consent mechanism will be updated where required before such technologies are used in a manner that requires user consent.

You may also manage cookies through your browser settings. Disabling certain necessary cookies may affect some website functions.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for such periods as may be required by applicable laws and professional or legal obligations.

For general inquiries that do not result in a professional relationship, contact information and correspondence may generally be retained for up to 24 months from the last communication, unless there is a legitimate or legal need for longer retention or deletion is requested and legally permissible.

Personal data associated with a current or former client relationship may be retained for the period necessary to fulfil professional and contractual obligations, comply with legal requirements, and establish, exercise, or defend legal claims.

When there is no longer a lawful or legitimate need to retain personal data, it will be securely destroyed or anonymized through appropriate means.

12. Data Security

We implement reasonable and appropriate organizational and technical measures designed to protect personal data against:

  • Unauthorized access.
  • Unlawful use or disclosure.
  • Alteration or loss.
  • Destruction.
  • Leakage.
  • Unauthorized processing.

However, no method of transmitting or storing data over the Internet can be guaranteed to be completely secure.

13. Your Rights Regarding Personal Data

Subject to applicable laws, regulations, limitations, and exceptions, you may have the following rights:

Right to Be Informed

The right to know the legal basis and purpose for collecting and processing your personal data.

Right of Access

The right to request access to personal data held about you by the Firm.

Right to Obtain Personal Data

The right to request a copy of your personal data in a readable and clear format in accordance with applicable requirements.

Right to Correction

The right to request correction of inaccurate data, completion of incomplete data, or updating of outdated data.

Right to Request Destruction

The right to request destruction of your personal data where the applicable legal conditions are satisfied.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent in accordance with applicable requirements.

Certain rights may be subject to legal limitations or exceptions, including where data must be retained to comply with a legal obligation or to establish, exercise, or defend a legal right or claim.

14. Exercising Your Rights

To exercise any rights relating to your personal data or submit a privacy-related inquiry or complaint, please contact:

mannan.legal@gmail.com

Please provide sufficient information regarding your request to allow us to verify and process it.

We may request reasonable information to verify the identity of the person making the request before acting on a personal-data request, in order to protect your data from unauthorized access, alteration, or destruction.

Requests will be handled in accordance with the procedures and timeframes prescribed by applicable law.

15. Complaints

If you have an objection or complaint concerning the processing of your personal data, please contact us first at:

mannan.legal@gmail.com

We will review and address the matter in accordance with applicable requirements.

You also retain the right to submit a complaint to the competent personal-data-protection authority in the Kingdom of Saudi Arabia through its official channels, in accordance with applicable laws and regulations.

16. External Links and Third-Party Websites

The website may contain links to websites or services operated by third parties.

Mannan Legal does not control the privacy practices of such third parties. You should review the privacy policy of each external website or service before providing personal data to it.

17. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in applicable laws or regulations.
  • Changes in website services.
  • Changes in data-processing practices.
  • Changes in technical service providers.
  • Improvements to privacy and security practices.

The updated version will be published on this page together with the date of the latest update.

Where a material change affects the manner in which personal data is processed, we will take appropriate steps to inform data subjects where required by law.

18. Contact Us

For any inquiry regarding this Privacy Policy, the processing of personal data, or the exercise of your data-protection rights, please contact:

Mannan Legal

Kingdom of Saudi Arabia

Email: mannan.legal@gmail.com