Privacy Policy

01Introduction & Scope

Abdullah & Partners ("the Firm," "we," "us," or "our") is committed to protecting the privacy of visitors to this website and of individuals who engage us for legal services. This Privacy Policy describes the personal data we process, the purposes for which we process it, and the legal safeguards we apply.

This Policy applies to the website abdullahfirm.com, our mobile application, and all related communications, including email, telephone, WhatsApp, and in-person consultations at our offices in Amman. It does not apply to third-party websites we link to, each of which operates under its own privacy policy. It should be read together with our Terms of Use and Disclaimer.

02Who We Are (The Data Controller)

The data controller responsible for your personal data is:

Abdullah & Partners, Attorneys & Legal Consultants
3rd, 4th & 5th Floors, Al Rashed Building
No. 11 Zahar Street, Umm Al Summaq
Amman 11108, Hashemite Kingdom of Jordan
Telephone: +962 79 566 6696
Email: info@abdullahfirm.com

Confidentiality & Data Protection Contact

Abdullah & Partners maintains a designated contact for confidentiality and data-protection matters, to support the firm's handling of personal data in line with applicable data-protection requirements, to handle enquiries from data subjects, and to act as the firm's point of contact on data-protection matters.

Attorney Raghad Qasem, Associate, Confidentiality & Data Protection Contact
Email: info@abdullahfirm.com
Postal: Confidentiality & Data Protection Contact, Abdullah & Partners, 3rd, 4th & 5th Floors, Al Rashed Building, No. 11 Zahar Street, Umm Al Summaq, Amman 11108, Jordan.

You may contact the firm's Confidentiality and Data Protection Contact directly at any time to exercise your rights under Section 11 below, to raise a concern about how your personal data is handled, or to report a suspected data-protection breach. All correspondence received at this address is treated as confidential.

03Information We Collect

We collect personal data only to the extent necessary for a specified purpose. The categories of data we may process include:

A. Information you provide directly

• Identity data, full name, title, date of birth, national ID or passport number, nationality.
• Contact data, postal address, email address, telephone number, preferred channel and language.
• Matter data, facts, documents, correspondence, and other materials you share with us in connection with a legal matter.
• Financial data, invoicing information, bank account details for payment of invoices, and records of fees paid.
• Employment & application data, CVs and supporting materials submitted to our careers inbox.

B. Information we collect automatically

• Technical data, IP address, device type, operating system, browser type and version, screen resolution, referring URL.
• Usage data, pages viewed, time spent on each page, buttons clicked, and the path you take through our site.
• Cookie data, see Section 6 below.

C. Information we receive from third parties

• Referrals from other law firms, former clients, or professional contacts.
• Information from courts, registries, and public records when relevant to your matter.
• Identity-verification data from authorised providers where anti-money-laundering law requires us to run "Know Your Client" checks.

04How & Why We Use Your Information

We use your personal data for the following purposes:

• To provide legal services, including conflict checks, matter intake, case strategy, drafting, negotiation, representation before courts and arbitral tribunals, and post-matter follow-up.
• To communicate with you, responding to enquiries, providing updates on your matter, issuing invoices, and maintaining the client relationship.
• To comply with our legal and regulatory obligations, including Jordanian Bar Association rules, anti-money-laundering law, tax law, and court-ordered disclosure.
• To operate our website and app, keeping the platform secure, preventing fraud, measuring performance, and improving the user experience.
• To recruit lawyers and staff, evaluating applications and managing hiring.
• To send professional updates, where you have subscribed, to deliver insights, legislative alerts, and firm news. You may unsubscribe at any time.

05Lawful Bases for Processing

We only process personal data where we have a lawful basis to do so. Depending on the activity, one or more of the following bases apply:

• Contract, to perform our engagement agreement with you or to take steps before entering into one.
• Legal obligation, to comply with applicable laws, court orders, and regulatory requirements.
• Legitimate interests, to run, secure, and improve our firm, provided those interests are not overridden by your rights. This basis covers ordinary website analytics, internal record-keeping, and professional marketing to existing clients.
• Consent, for optional items such as newsletter subscriptions, non-essential cookies, or testimonial publication. You may withdraw consent at any time without affecting processing that took place before withdrawal.
• Vital interests, in rare emergencies where processing is necessary to protect someone's life.
• Establishment, exercise, or defence of legal claims, the explicit basis on which we process special-category data for litigation and investigations.

06Cookies & Analytics

We use a small number of cookies and similar technologies to make this website function correctly and to measure how it is used. Full details, including names, purposes, durations, and how to disable them, are set out in our Cookie Policy.

In summary, we use only:

• Strictly necessary cookies, required for core site functionality such as page navigation and security.
• Performance cookies, anonymised analytics that help us understand traffic patterns. Used only with your consent where required by law.

We do not serve third-party advertising, and we do not sell or share personal data with advertising networks.

07Sharing & Disclosure

We treat client data as confidential and do not sell it under any circumstances. We share personal data only in the following, limited situations:

• Within the firm, with partners, associates, and support staff working on your matter, strictly on a need-to-know basis.
• With our service providers, secure document-hosting, email, practice-management, accounting, and IT-security vendors who process data on our behalf under written contracts that meet Article 28 GDPR and equivalent standards.
• With co-counsel and experts, where your matter requires instruction of foreign counsel or expert witnesses, always with your prior knowledge.
• With courts, tribunals, and authorities, where disclosure is required by law, court order, or regulatory directive.
• In a firm reorganisation, if we merge with or are acquired by another law firm, client files may transfer to the successor entity subject to Bar-Association rules; you will be notified in advance.

08International Data Transfers

Because our clients operate in seventeen countries, personal data may leave Jordan, for example, to communicate with foreign co-counsel, to use cloud services hosted abroad, or to serve clients resident in the European Union or the United States.

When we transfer data outside Jordan, we rely on one of the following safeguards:

• Transfer to a country recognised as providing an adequate level of protection.
• Standard Contractual Clauses adopted by the European Commission, or equivalent safeguards approved by the Jordanian Personal Data Protection Council.
• Your explicit consent, after being informed of the risks.
• Necessity for the performance of a contract with you or for the establishment, exercise, or defence of a legal claim.

A list of the countries to which we routinely transfer data is available on request to info@abdullahfirm.com.

09How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with our legal and professional obligations, and to defend against potential claims. Typical retention periods are:

• Active client files, for the duration of the engagement.
• Closed matter files, for a minimum of ten years from the end of the engagement, in line with Jordanian Bar Association guidance and the limitation periods under Jordanian law.
• Accounting & tax records, for the periods required by Jordanian tax law.
• Website analytics, up to 14 months, anonymised.
• Newsletter subscriptions, until you unsubscribe.
• Unsuccessful job applications, up to 12 months, then securely deleted.

10How We Protect Your Data

We maintain technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, and destruction. These include encryption in transit (TLS 1.2+), encryption at rest for sensitive files, access controls on a need-to-know basis, multi-factor authentication for all staff accounts, physical security at our offices, regular staff training on confidentiality and data protection, and a documented incident-response procedure.

11Your Rights

Subject to the conditions and exceptions set out in the applicable law, you have the following rights in respect of your personal data:

• Right of access, to obtain confirmation that we process your data, and a copy of it.
• Right of rectification, to have inaccurate data corrected and incomplete data completed.
• Right of erasure, to request deletion, subject to our retention obligations.
• Right to restriction, to limit our processing in certain circumstances.
• Right to data portability, to receive a structured, machine-readable copy of data you provided, where processing is based on consent or contract.
• Right to object, to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent, where processing relies on consent, at any time.
• Right not to be subject to solely automated decision-making that produces legal effects.
• California-specific rights, the rights to know, delete, correct, and limit the use of sensitive personal information under the CCPA/CPRA, and the right not to receive discriminatory treatment for exercising these rights. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

To exercise any of these rights, write to info@abdullahfirm.com. We will respond within 30 days. We may need to verify your identity before acting on your request.

12Legal Professional Privilege & Client Confidentiality

Communications between you and the Firm made for the purpose of seeking or giving legal advice, and materials created in contemplation of litigation, are protected by legal professional privilege under Jordanian law and by the duty of confidentiality owed by every advocate of the Jordan Bar.

13Children's Privacy

Our website and services are directed to adults, to legal and business decision-makers, to parties to litigation, and to professional counterparts. We do not knowingly collect personal data from children under the age of 16. Where we represent a minor, we process their personal data only on the instruction of a parent, legal guardian, or the court. If you believe we hold data about a child without proper authority, please contact us and we will delete it.

14Third-Party Links

Our website links to external resources, including government portals, law-reform publications, and the social-media profiles of the Firm. We do not control those sites, and we are not responsible for their privacy practices. Please read the privacy policy of any third-party site before providing personal data to it.

15Changes to This Policy

We review this Policy regularly and may update it to reflect changes in our practices, in technology, or in the law. When we make material changes, we will post the revised Policy on this page with an updated "Last Reviewed" and, where appropriate, notify clients directly. We encourage you to review this page periodically.

16Contact & Complaints

Any question, concern, or request relating to this Privacy Policy or to the way we handle your personal data should be addressed to:

Attorney Raghad Qasem, Confidentiality & Data Protection Contact
Abdullah & Partners
3rd, 4th & 5th Floors, Al Rashed Building, No. 11 Zahar Street, Umm Al Summaq
Amman 11108, Jordan
Email: info@abdullahfirm.com
Telephone: +962 79 566 6696

You also have the right to lodge a complaint with the competent supervisory authority:

• Jordan, the Personal Data Protection Council, Ministry of Digital Economy & Entrepreneurship.
• European Economic Area, the data-protection authority of the Member State in which you reside, work, or where the alleged infringement took place.
• United Kingdom, the Information Commissioner's Office (ICO).
• California, the California Privacy Protection Agency (CPPA) or the California Attorney General.

We would, however, appreciate the opportunity to resolve any concern before you approach a regulator, and we respond to every enquiry we receive.