How we handle your personal data.

Nexus Legal Consultancy is the controller of personal data collected through this website and through our engagement with clients. We are a UAE legal consultancy operating in the United Arab Emirates.

We may collect the following categories of personal data:

• Contact details — name, email, phone, organisation — submitted through enquiry forms or correspondence.
• Matter information — the brief details you provide so we can assess fit and conflict before engagement.
• KYC and onboarding information — identification documents, beneficial-ownership disclosures and source-of-funds information required by UAE AML/CFT law (Federal Decree-Law No. 20 of 2018).
• Technical data — IP address, browser type and pages visited, captured by privacy-respecting analytics where enabled.

• To respond to your initial enquiry and assess scope and conflict.
• To deliver the services we are engaged to deliver.
• To meet our regulatory obligations (KYC, AML/CFT, sanctions screening).
• To maintain financial and matter records as required by UAE law.
• To send client updates and briefings, where you have opted in.

We process personal data on the bases permitted by the PDPL: your consent (for marketing), the performance of our retainer or engagement letter, the protection of our legitimate interests (subject to the data-subject test), and compliance with UAE legal obligations.

We do not sell or rent personal data. We share it only with:

• UAE-licensed advocates or other licensed professionals, where separately engaged to provide court representation.
• Sister entities under formal cooperation agreement (Provident Consulting and Advisory FZCO).
• Auditors, tax agents and regulators where compelled by law or in the proper discharge of our regulatory obligations.

Personal data is held within the UAE wherever practicable. Where transfer outside the UAE is necessary (for example, secure cloud email hosting), we ensure the destination jurisdiction offers an adequate level of protection or that contractual safeguards are in place.

We retain matter files and engagement records for a minimum of seven years following the conclusion of an engagement, in line with UAE professional-record-keeping expectations. Enquiry data from unsuccessful approaches is retained for twelve months and then deleted.

Under the PDPL, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (subject to our retention obligations).
• Object to processing or withdraw consent for marketing.
• Lodge a complaint with the UAE Data Office.

To exercise any of these rights, write to contact@nexuslegal.me.

We apply technical and organisational measures appropriate to the sensitivity of legal data, including encrypted document storage, multi-factor authentication on practice-management systems, and quarterly access reviews.

We may update this notice from time to time. The version date at the top of this page reflects the most recent update.