Legal

Privacy & Cookie Policy

Effective Date: June 1, 2026 — ENRULE LEGAL CONSULTANCY FZE

This Privacy and Cookie Policy explains how ENRULE LEGAL CONSULTANCY FZE, a Free Zone company registered in Fujairah, United Arab Emirates, with its registered office at 2002, 20th Floor, Creative Tower, Fujairah, UAE (Company, Enrule Legal, we, us, or our) collects, uses, stores, discloses, and otherwise processes personal data through www.enrulelegal.com and any related pages, portals, forms, communications, and services (collectively, the Website).

This Policy also explains how we use cookies and similar technologies. By using the Website, you acknowledge this Policy. Where required by applicable law, we will request your consent before placing non-essential cookies or processing personal data based on consent.

1. Important Notice

We provide legal advisory, litigation support, contract drafting, corporate advisory, dispute resolution, and related legal services in or relating to the United Arab Emirates, India, and other jurisdictions. Privacy obligations may vary depending on where you are located, where services are provided, and which applicable laws apply. This Policy is intended to provide a general and transparent notice of our data practices and should be read together with any engagement letter, service agreement, cookie banner, or supplemental privacy notice that may apply.

2. Information We Collect

We may collect and process the following categories of information:

A. Information you provide directly

contact details, such as your name, job title, company name, email address, phone number, and postal address;
inquiry details, such as the subject of your request, legal needs, jurisdiction of interest, and communications with us;
identity or compliance information, where required for onboarding, conflict checks, know-your-customer, anti-money laundering, sanctions screening, or legal compliance;
billing and transaction information, if you engage us for services;
documents and materials you send to us, including those relevant to legal matters; and
any other personal data you choose to provide.

B. Information collected automatically

device information, including device type, operating system, browser type, language, and approximate location based on IP-derived information;
usage information, including pages viewed, links clicked, dates and times of access, referring pages, session duration, and navigation paths;
technical information, including IP address, log files, identifiers, cookie IDs, and diagnostic data; and
information collected through cookies and similar technologies as described below.

C. Information from third parties

We may receive personal data from:

analytics providers;
advertising or social media platforms;
referral partners and professional contacts;
publicly available sources, registers, and databases;
sanctions, compliance, and identity verification providers;
courts, tribunals, and regulatory authorities in connection with legal matters; and
your employer or representatives where they involve you in a matter or inquiry.

3. How We Use Personal Data

We may use personal data for the following purposes:

to operate, maintain, secure, and improve the Website;
to respond to inquiries, requests, and communications;
to assess potential engagements and provide requested legal and consultancy services;
to conduct client onboarding, due diligence, conflict checks, identity verification, sanctions screening, and legal compliance checks;
to prepare proposals, engagement letters, legal documents, contracts, and other deliverables;
to manage client relationships and administer accounts;
to process payments and maintain financial records;
to send service-related communications and administrative notices;
to send marketing communications where permitted by law;
to personalize Website content and user experience;
to analyze Website usage and performance;
to prevent fraud, abuse, unauthorized access, and other misuse;
to establish, exercise, or defend legal claims; and
to comply with legal, regulatory, professional, and contractual obligations, including those applicable to legal practitioners in the UAE.

4. Legal Bases for Processing

To the extent required by applicable law, we process personal data on one or more of the following legal bases:

your consent;
performance of a contract or taking steps at your request before entering into a contract;
compliance with a legal obligation;
our legitimate interests, including operating our business, securing the Website, responding to inquiries, managing relationships, improving services, and protecting our legal rights, provided such interests are not overridden by your rights where applicable; and
any other lawful basis permitted under applicable law.

5. Cookies and Similar Technologies

We use cookies, pixels, tags, scripts, SDKs, and similar technologies (Cookies) to operate the Website and collect information about usage and preferences.

A. Types of Cookies we may use

Strictly Necessary Cookies: required for the Website to function properly, including security, network management, and basic functionality;
Performance and Analytics Cookies: help us understand how visitors use the Website, improve functionality, and measure performance;
Functionality Cookies: remember preferences and settings to improve your experience; and
Advertising or Targeting Cookies: may be used to deliver relevant advertisements or measure the effectiveness of campaigns, if applicable.

B. Cookie Consent

Where required by law, we will obtain your consent before placing non-essential Cookies on your device. You can manage your preferences through our cookie banner or settings tool, where available. You can also control Cookies through your browser settings, although disabling certain Cookies may affect Website functionality.

C. Third-Party Cookies

Some Cookies may be set by third-party services integrated into the Website, such as analytics, embedded content, maps, scheduling tools, chat tools, or advertising networks. We do not control third-party Cookies and recommend reviewing the relevant third-party privacy policies.

6. Marketing Communications

We may send you updates, newsletters, alerts, event invitations, or promotional communications where permitted by law or where you have consented. You can opt out at any time by using the unsubscribe link in the communication or by contacting us at info@enrulelegal.com. Opting out of marketing communications does not affect service-related or legally required communications.

We may share personal data with:

our affiliates, professional staff, and authorized personnel;
service providers that support our business operations, such as hosting, IT, communications, analytics, payment processing, customer relationship management, document management, and compliance providers;
external professional advisers, including lawyers, auditors, insurers, and consultants;
counterparties, regulators, authorities, courts, law enforcement, or governmental bodies where required or permitted by law;
banks, payment service providers, and financial institutions in connection with transactions;
business partners or subcontractors involved in delivering services, subject to appropriate safeguards;
a buyer, investor, successor, or transaction counterparty in connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business; and
any other party with your consent or at your direction.

We do not sell personal data except where the term sell has a broader meaning under applicable law and such activity is expressly disclosed and permitted.

8. International Transfers

Because we may serve clients and use service providers across multiple jurisdictions, personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including countries that may not provide the same level of data protection. This is necessary for the performance of our services, including cross-border legal matters.

Where required by applicable law, we will implement appropriate safeguards for such transfers, which may include contractual protections, adequacy mechanisms, or other lawful transfer tools.

9. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain records, comply with legal, regulatory, tax, accounting, professional, and reporting obligations, resolve disputes, enforce agreements, and protect our interests.

Retention periods may vary depending on the nature of the data, the purpose of processing, applicable limitation periods, and legal or regulatory requirements. When personal data is no longer required, we will delete, anonymize, or securely store it as required by applicable law and our retention practices.

10. Data Security

We implement reasonable technical, organizational, and administrative measures designed to protect personal data against unauthorized or unlawful access, destruction, loss, alteration, disclosure, or misuse. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Depending on applicable law, you may have rights in relation to your personal data, including the right to:

request access to personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of personal data in certain circumstances;
request restriction of processing in certain circumstances;
object to certain processing, including direct marketing;
request portability of certain personal data, where applicable;
withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal; and
lodge a complaint with a competent supervisory authority or regulator.

These rights are not absolute and may be subject to legal exemptions, professional obligations, privilege, identity verification, and other limitations permitted by law.

To exercise your rights, contact us using the details below. We may request information necessary to verify your identity and process your request.

12. Children's Privacy

The Website is not directed to children, and we do not knowingly collect personal data from children except where strictly necessary and lawful in a specific service context with appropriate authorization. If you believe a child has provided personal data to us without proper authorization, please contact us so we can take appropriate action.

13. Third-Party Websites and Services

The Website may contain links to third-party websites, plug-ins, booking tools, payment services, messaging tools, or social media platforms. We are not responsible for the privacy, security, or content practices of third parties. Your use of third-party services is governed by their own terms and policies.

14. Professional Confidentiality and Sensitive Information

If you contact us regarding legal matters, please do not submit highly confidential, privileged, or sensitive personal data through the Website unless we have expressly requested it and appropriate engagement and security arrangements are in place. Submission of information through the Website does not, by itself, create any lawyer-client relationship or duty of confidentiality beyond those required by applicable law and professional obligations.

Where we receive special category, sensitive, or protected information, we will handle it in accordance with applicable law and any relevant professional obligations, including those applicable to legal practitioners in the UAE.

15. Changes to this Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in law, regulation, technology, business practices, or the Website. We will post the updated version on the Website and revise the effective date. If required by law, we will provide additional notice or obtain consent for material changes.

16. Contact Us

If you have questions about this Policy or our privacy practices, or if you wish to exercise your rights, contact us at:

ENRULE LEGAL CONSULTANCY FZE
Email: info@enrulelegal.com
Phone: +971 4 255 1628
Mobile: +971 52 189 2358
Address: 2002, 20th Floor, Creative Tower, Fujairah, UAE

17. Jurisdiction-Specific Supplements

Where required, we may provide additional privacy disclosures or supplements for users in specific jurisdictions, including the United Arab Emirates, Dubai International Financial Centre, Abu Dhabi Global Market, the Kingdom of Saudi Arabia, India, the European Economic Area, or the United Kingdom. In the event of a conflict between a jurisdiction-specific supplement and this Policy, the supplement will govern to the extent of that conflict for the relevant jurisdiction.