Privacy & Policy

Privacy Policy

This Privacy Policy is provided by Stefani Legal Consultants FZ-LLC, with registration number 47017258 and registered under the laws of the Government of Ras Al Khaimah, operating at Office B19-B12, Emirates Islamic Bank Building, Ras Al-Khaimah, UAE for and on behalf of itself and where applicable, other entities operating as partners of Stefani Legal Consultants across the globe, as further specified here (collectively, “Stefani & Co.”, “we”, “us”, “our”). This Privacy Policy has been prepared with reference to applicable data protection laws including RAKEZ (Ras Al Khaimah Economic Zone) Data Protection Law considerations, as may be amended from time to time.
 At Stefani & Co., we prioritize the privacy and protection of the personal information entrusted to us. This Privacy Policy explains how we collect, use, store, and share personal information in the course of our business. It also outlines the rights of individuals regarding their personal data and our commitments under applicable data protection laws.
 As the “data controller”, we are responsible for determining the purposes and means of processing personal information we receive from you (“you” or “your”). In certain instances, we may act as a “data processor”, handling personal information solely according to the instructions of a data controller or as permitted by law.
 We encourage you to review this Privacy Policy carefully to understand our approach to handling personal information. If you have any questions or concerns that are not addressed within this document, please don’t hesitate to reach out using the contact information provided at the end of the policy.

Personal Data Collection Practices

In the course of our business, we may collect personal information directly from you in various contexts, such as when you contact us, request information, instruct us to provide legal services, use our website or other platforms, or engage with our personnel or clients.

The types of personal information we process may include, but are not limited to:

(a) Basic details, such as your name, role/title, employer/s, your relationship to a person, marital status, and your contact information (such as your email address, physical address, contact numbers, and details of your public social media profiles);

(b) Identification information to enable us to check and verify your identity (e.g. your passport details or national identity number; utility provider details; tenancy contracts), and information collected from publicly available resources to verify the same;

(d) Information relating to the matter on which you are seeking our legal services;

(e) Bank account, payment card details, or other financial information, if relevant to our engagement with you;

(f) Technical information (including your location, IP address, browser details, traffic data, and location data), such as information from your visits to our website or mobile app (page interaction information, length of visits, etc.), or in relation to marketing emails, and digital communications we send to you;

(g) Information relating to your visits to our offices or our meetings and events, including appointment details (e.g. time, location, participants), CCTV images, and other photographic or video images;

(h) Personal information provided to us by or on behalf of our clients, or generated by us in the course or providing services to them, which may include special categories of personal data;

(i) Professional and educational information related to your job such as your former or current employer and job title;

(j) Health Information may include access or dietary requirements;

(k) Preferences, such as your stated interests, how often you would like to receive our newsletters or other communications; and

(l) Any other information relating to you which you may provide to us.

We may collect your personal information:

(a) As part of our business development, new business intake and client onboarding or client maintenance activities, and when you seek legal services from us;

(b) When you apply for a role or work experience opportunity or open day with us;

(c) When you seek employment from us, as part of our new employee on-boarding and maintenance of the employment relationship, or when you engage with our internship programme (if applicable);

(d) When you provide (or offer to provide) services to us, either yourself or on behalf of your employer;

(e) When we are acting on a matter where you or your employer are a party to the same;

(f) When you interact with our website (or other platform) or use any of our online services;

(g) When you interact with us in respect of any of our marketing communications, digital communications, or events or visit our offices.
 We primarily collect personal information directly from you or through your use of our website. However, we may also gather data about you from third-party sources, including:

(a) Our clients;

 (b) Recruitment agencies; 

 (d) Other law firms or professional advisers;

 (e) Parties involved in matters where we are engaged;

 (f) Platform operators for technology used in our business (i.e. webinar platforms, seminars etc.) 

(g) Organizations you interact with; 

(h) Regulators, governmental or semi-governmental authorities; 

(i) Credit reporting agencies; 

(j) Information service providers;

 (k) Publicly available records, including electronic sources used to comply with applicable laws.
 Some of the information you provide may be confidential. We are committed to upholding the confidentiality and security of your information in line with our professional obligations and applicable laws. We also have stringent arrangements with our personnel and service providers who may process your personal information to ensure that confidentiality is respected and maintained.

Purpose

 Whether we obtain your personal data directly from you or from a third party, we will only use it when we have a lawful basis to do so. This may include situations where:

(a) We have obtained your consent (when necessary);

(b) The use is required for the performance of a contract to which you are a party or to take steps at your request prior to entering into such a contract;

(d) It is necessary to protect your vital interests or those of another natural person.

(e) It is required for our legitimate interests or the legitimate interests of a third party, provided that these are not overridden by your rights or interests.
 The purposes for which we process your personal information are as follows:

(a) Providing legal services to you;

(b) Communicating with you in respect of legal developments, publications, and the promotion of our legal practice;

(c) Managing our business relationship with you (or your organisation), whether in connection with the provision of our legal services, the procurement of your goods and services, or as your employer (or potential or former employer),
including processing payments, accounting, auditing, billing and collection, and related support services;

(d) Complying with our risk management and legal obligations to identify and verify the identity of our clients and their beneficial owners, including with respect to legal and regulatory considerations (e.g. anti-money laundering and sanctions checks, audits, enquiries by regulatory authorities);

(e) Managing and securing access to our premises and information technology systems, and monitoring the technology side of our operations;

(f) Processing and respond to requests, enquiries, or complaints received from you;

(g) Keeping your contact details accurate and current using information provided by you, or information publicly available; and

(h) For any purpose related and/or ancillary to any of the above or any other purposes for which your personal data was provided to us.

Data Sharing Practices

We may disclose your personal information to a recipient:

(a) for the purposes of outsourcing one or more of the purposes-related functions described above;

(b) to confirm or update information provided by you;

(d) for other purposes disclosed at or before the time the information is collected. If we re-organise our business, we may need to transfer your personal information to other group entities or to third parties.

If you register to attend one of our events, your name and organization may be included on an attendee list provided to other participants. Additionally, we may capture photographs or video footage of our events for use in reporting or promotional activities (e.g., via social media or other platforms). Where this applies, we will make you aware through the materials related to the specific event.

In relation to other necessary disclosures to third parties for the effective provision of our services (for example, but not limited to, professional advisors such as lawyers and accountants, government or regulatory authorities, professional indemnity insurers, tax authorities, document processing and transaction services, corporate registries, counsel, arbitrators, mediators, clerks, witnesses, experts, and third-party postal and courier services), we will only share your information:

(a) when you have provided your consent;

(b) when required by law; or 

We do not sell, rent, or make personal information commercially available to any third party. Additionally, we utilize third-party technology services, including cloud-based security systems. These services may require that your personal information is stored in the cloud on infrastructure managed by the respective service provider.

Cross-border transfer

In certain circumstances, it may be necessary for us to share your personal information with affiliates or partners of Stefani & Co. operating throughout the Middle East and Europe. We may also share your personal information with governments, regulatory and enforcement agencies, courts, or tribunals in connection with inquiries, proceedings, or investigations conducted globally, or where required by law.

Additionally, we may share personal information with third parties and associated professional services firms worldwide that provide services to us or on our behalf. This includes data storage facilities or online storage providers located inside or outside the United Arab Emirates, which may be operated by independent service contractors. As a result, your personal information may be transferred between locations within the Ras Al Khaimah Economic Zone (RAKEZ) and jurisdictions outside RAKEZ.

We acknowledge that the levels of personal data protection vary between jurisdictions where we operate, and some locations may not meet internationally recognized standards of data protection. To mitigate this, we have implemented robust procedures and safeguards to ensure the security and privacy of your personal information. These measures include contractual obligations requiring all recipients of personal data to maintain its confidentiality and to use it strictly in accordance with the purposes we have specified and communicated to you.

Retention

We will retain your personal information for as long as necessary to provide our services and to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined by considering the type of information collected and the purpose for which it is collected, while bearing in mind the applicable requirements and the need to destroy outdated or unused information at the earliest reasonable time. Under applicable regulations, we will keep records containing client personal data, account opening documents, communications, and any other required information as mandated by laws and regulations.

We may rectify, update, or remove incomplete or inaccurate information at any time and at our discretion.

Personal Data rights

Various rights may be available to you, depending on the circumstances and the applicable law. We summarise key rights likely to be available to most data subjects:

(a) Withdraw consent: When personal information is processed on the basis of consent, you may withdraw consent at any time, although such withdrawal will not affect the lawfulness of processing occurring prior to such withdrawal;

(b) Access and rectification, etc.: You may request access to and rectification or erasure of personal information, or restriction of Processing concerning the Data Subject or to object to Processing as well as the right to data portability;

(c) Objecting and restricting: You may object, on legitimate grounds, to the processing of your personal information, or request that processing be restricted; and

(d) Complaints: If you believe that your data protection rights may have been breached, you may lodge a complaint with the relevant data protection authority.
 If you would like to exercise any of the above rights, or any other rights available to you pursuant to applicable law, please contact us using the contact details set out below.

Changes/Updates

 We may periodically update this Privacy Policy to reflect changes in our practices, legal requirements, or other factors. If any material changes are made, we will notify you in advance, where appropriate, to ensure you are aware of the updates. In all other cases, the amended Privacy Policy will become effective once it is posted on our website.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal information and to ensure you are aware of any updates. Your continued use of our services or engagement with us following the posting of any changes will signify your acceptance of the revised terms.

Restriction of Liability

To the fullest extent permitted by applicable law, we will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses, resulting from:

(a) Your use of our services: any use or inability to use our services.

(b) Unauthorized Access: any unauthorized access to or use of our internal servers, records and files and/or any personal information stored therein.

(c) Errors or Omissions: any errors or omissions in any content or for any loss or damage incurred as a result of the use of any content posted, emailed, transmitted, or otherwise made available through our services.

(d) Compliance with Privacy and GDPR: any failure to comply with the GDPR or any other applicable data protection regulations by third parties, including but not limited to service providers, partners, or clients. By using our services, you acknowledge that you understand these terms and agree to release us from any liability, claim, or demand arising from your use of our services, except as expressly stated in this Privacy Policy.

Cookies

Use of Cookies

We value your experience on our website and strive to enhance it in every possible way. Like most professional websites, we utilize cookies to optimize your interactions and ensure the best possible user experience.

What are Cookies?

Cookies are small data files stored on your device that help us understand how you interact with our website, improve its functionality, and tailor content to your preferences.

Managing cookies

While cookies are an essential part of enhancing your browsing experience, you have control over their use. You can modify your browser settings to block or disable cookies, allow cookies on a per-session basis, or receive notifications when cookies are being sent to your device. For detailed instructions, consult your browser’s Help section.

Please note, however, that disabling cookies may negatively affect your browsing experience. Specific parts of our website and certain features or functionalities may become inaccessible or impaired if cookies are blocked. This may also apply to other websites you visit.

Recommendation

To enjoy a fully optimized and seamless experience on our website, we recommend enabling cookies. Disabling them may limit your ability to access or use certain areas of our site effectively.

Legal Information

This Privacy Policy relates solely to this Website, if not explicitly stated otherwise herein.

Contact us

If you have any questions, concerns, or require further clarification regarding this Privacy Policy, please do not hesitate to reach out to us.
We are happy to assist you and ensure your privacy concerns are addressed.