Privacy Policy

1. Introduction

At Sarhan Data Law ("we," "us," or "our"), we prioritize your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, and protect your information when you visit our website, interact with our marketing content, subscribe to our newsletter, or submit inquiries through our contact form or booking system.

This policy applies to website visitors and prospective clients. If you engage our legal services, your relationship with us will be governed by a separate engagement letter that addresses confidentiality and solicitor-client privilege.

2. Information We Collect

We collect information in the following ways:

Website Analytics

We use privacy-focused analytics to understand how visitors interact with our website. Our analytics approach:

• Does not use cookies or store personal identifiers in your browser
• Cannot identify individual visitors or track you across sessions
• Provides only aggregated insights like page views and traffic sources
• Is self-hosted on our own Canadian infrastructure

Because no personal data is collected through our analytics, no consent banner is required under GDPR or PIPEDA.

Newsletter Subscriptions

When you subscribe to our newsletter, we collect your email address. You can unsubscribe at any time using the link provided in every email.

Consultation Bookings

When you book a consultation through our website, we collect your name, email address, and any notes about your inquiry. This information is:

• Stored securely on our self-hosted scheduling system in Canada
• Used solely to confirm and conduct your appointment
• Synchronized with our calendar system for scheduling purposes

Contact Form Submissions

When you submit a message through our contact form, we collect your name, email address, phone number (if provided), and the content of your message. We use this information to respond to your inquiry.

Third-Party and Publicly-Available Sources

We may collect personal information from third-party sources and publicly-available sources, such as professional networking sites, public records, news sources, and industry databases. This information may be used to better understand your business needs, conduct conflict checks, or verify information you have provided to us.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and schedule consultations
• Send newsletter content you have subscribed to
• Improve our website based on aggregated usage patterns
• Comply with legal and professional obligations

We do not sell or rent your personal information to third parties.

4. Data Storage and Security

Your data is stored on secure servers located in Canada. We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/HTTPS
• Encryption of data at rest using industry-standard encryption algorithms
• Role-based access controls and multi-factor authentication requirements
• Regular security assessments and vulnerability monitoring
• Secure backup procedures with encrypted storage
• Employee training on data protection and privacy best practices
• Incident response procedures for potential data breaches

5. Third-Party Services

We use third-party services to help operate our practice:

• Email and productivity tools: For email communications and document management
• Customer relationship management: To manage inquiries and maintain contact records

These services have their own privacy practices. Where possible, we use self-hosted solutions on Canadian infrastructure to maintain data residency.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your personal information
• Correction of inaccurate information
• Deletion of your personal information
• Unsubscribing from marketing communications

To exercise these rights, please contact us using the information provided below.

7. Data Retention

We retain your information only as long as necessary for the purposes described in this policy:

• Newsletter subscribers: Until you unsubscribe
• Contact form submissions: 6 years, in accordance with professional obligations and conflict checks
• Booking information: 6 years, in accordance with professional obligations and conflict checks

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on our website with an updated revision date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us: