Last updated: July/2026
This Privacy Policy explains how Wefaq Law Firm ("Wefaq", "the Firm", "we", "us", "our") collects, uses, discloses, and protects personal data when you visit our website (www.wefaqlaw.com), contact us, or engage our services, and sets out the rights available to you in respect of your personal data.
1. Who we are
Wefaq Law Firm is a law firm established in the State of Kuwait, with its offices at Sharq, Block 4, Al-Shuhada Street, Building 32, Floor 11, Office 33, Kuwait City, State of Kuwait. For the purposes of this Policy, the Firm determines the purposes and means of the processing of personal data collected through this website and in the course of its practice, and is therefore responsible for that data as the data controller.
2. Scope and legal framework
This Policy applies to visitors to our website, individuals who submit enquiries or request consultations, clients and their representatives, counterparties and other individuals whose data we process in the course of client matters, job applicants, and recipients of our publications and legal updates.
We process personal data in accordance with the laws of the State of Kuwait, including Law No. 20 of 2014 concerning Electronic Transactions and its Executive Regulations, and Law No. 63 of 2015 concerning the Combating of Information Technology Crimes. As a law firm, we are also bound by the duty of professional secrecy under Law No. 42 of 1964 regulating the profession of advocacy before the courts, as amended, and the applicable rules of professional conduct. Where we act on matters subject to foreign data protection regimes, such as the UK GDPR or the EU GDPR, we apply the additional standards required by those regimes to the relevant engagement.
3. Personal data we collect
• Identity and contact data: your name, title, organisation, nationality, telephone number, email address, and postal address.
• Enquiry and matter data: the information and documents you provide when you contact us, request a consultation, or instruct the Firm, which may relate to disputes, transactions, or other legal matters. Information received in the course of a client relationship is protected by professional secrecy.
• Purchase and transaction data: order details, billing name and email address, and payment confirmations relating to purchases of templates through the Website. Payment card details are collected and processed directly by our payment gateway and are not stored on our systems.
• Due diligence and compliance data: information required for client identification, conflict checks, and compliance with anti-money laundering obligations under Law No. 106 of 2013 and related regulations, including identification documents and corporate ownership information.
• Recruitment data: CVs, qualifications, employment history, and related information submitted through our Careers page or otherwise in connection with an application.
• Technical and usage data: IP address, browser type and version, device and operating system information, interface language, pages visited, and the dates and times of visits, collected through cookies and similar technologies as described in the Cookies section below.
• Communications data: records of our correspondence with you, including by email, telephone, and messaging platforms such as WhatsApp, together with enquiry timestamps.
4. How we collect personal data
• Directly from you, when you complete a form on our website, correspond with us, attend a meeting, or instruct the Firm.
• Automatically, through cookies and similar technologies when you use our website.
• From third parties, where necessary for a matter, including public registers, courts, government authorities, counterparties and their advisers, and persons acting on your behalf.
5. Purposes and legal bases of processing
We process personal data only where there is a proper basis for doing so, namely:
• Performance of a contract: to provide legal advice and services, to perform engagement letters, and to take steps at your request before entering into an engagement.
• Compliance with legal obligations: to satisfy requirements under Kuwaiti law, including anti-money laundering, client identification, court and government filing, and record-keeping obligations.
• Legitimate interests: to operate, secure, and improve our website; to manage our relationships with clients and contacts; to carry out conflict checks; and to administer, protect, and develop our practice, provided that these interests are not overridden by your rights and freedoms.
• Consent: for optional communications such as newsletters, legal updates, and event invitations. You may withdraw your consent at any time.
6. Marketing communications
We may send you legal updates, newsletters, and invitations where you have subscribed to receive them or where we have an existing professional relationship with you and applicable law permits. Every such communication will include a means of unsubscribing, and you may opt out at any time by contacting us at hello@wefaqlaw.com.
7. Disclosure of personal data
We do not sell personal data. We disclose personal data only in the following circumstances:
• to courts, regulators, and government authorities, where required by law or necessary for the conduct of a matter;
• to counterparties and their advisers, experts, translators, notaries, and correspondent law firms, where necessary for a matter and, where applicable, on your instructions;
• to service providers who support our operations, such as IT hosting, document management, email, and website analytics providers, our payment gateway (Hesabe), which processes payments for template purchases, and our email delivery platform (Brevo), which we use to deliver template downloads, updates, and subscribed communications, in each case under arrangements that restrict their use of the data to the services they provide to us; and
• to a successor entity in the event of a merger or reorganisation of the Firm, subject to equivalent protections.
8. International transfers
Some of our service providers, correspondent firms, and matters may involve the processing or storage of personal data outside the State of Kuwait. Where personal data is transferred abroad, we take reasonable steps to ensure that it receives an adequate level of protection, including through contractual safeguards, and we remain bound by our duty of professional secrecy in respect of client information.
9. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction, including access controls, encryption of data in transit, confidentiality undertakings, and staff training. In the event of a personal data breach, we will act promptly to contain and assess the incident, remedy its causes, and notify affected individuals and the competent authorities where required by law.
10. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected. In determining retention periods, we take into account the duration and nature of the engagement, the statutory limitation periods applicable to legal claims under Kuwaiti law, record-keeping requirements, including those relating to anti-money laundering, and our professional obligations concerning the retention of client files. When personal data is no longer required, we delete it securely or anonymise it.
11. Your rights
Subject to applicable law and to our professional obligations, including professional secrecy and duties owed to clients, you have the right to:
• request access to the personal data we hold about you;
• request the correction of inaccurate or incomplete personal data;
• request the deletion of personal data where it is no longer necessary and we are not required or entitled to retain it;
• request the restriction of processing in certain circumstances;
• object to processing carried out on the basis of our legitimate interests, including direct marketing; and
• withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at hello@wefaqlaw.com. We may need to verify your identity before responding, and we will respond within a reasonable period consistent with applicable law. Please note that these rights may be limited where the personal data is protected by professional secrecy, is subject to duties owed to a client, or must be retained under applicable law.
12. Minors
Our website and services are not directed at minors. We do not knowingly collect personal data from minors without the consent of a parent or legal guardian, and matters involving minors are handled through their legal guardians in accordance with Kuwaiti law. If you believe that a minor has provided personal data to us without such consent, please contact us so that we can take appropriate action.
13. Cookies
Our website uses cookies that are necessary for it to function and may use basic analytics cookies to understand how the website is used. You can control or delete cookies at any time through your browser settings.
14. Third-party websites
Our website contains links to third-party websites and social media platforms, including LinkedIn, Instagram, X, Facebook, YouTube, and WhatsApp. We are not responsible for the privacy practices of those platforms, and we encourage you to review their privacy policies before providing personal data to them.
15. Changes to this Policy
We may update this Policy from time to time. The revised version will be published on this page with an updated date and, where the changes are material, we may bring them to your attention by an appropriate notice on our website.
16. Governing law
This Policy is governed by the laws of the State of Kuwait, and any dispute arising in connection with it is subject to the jurisdiction of the Kuwaiti courts.
17. Contact us
Wefaq Law Firm
Sharq, Block 4, Al-Shuhada Street, Building 32, Floor 11, Office 33, Kuwait City, State of Kuwait
Email: hello@wefaqlaw.com
Telephone: +965 97009013
Website: www.wefaqlaw.com