Privacy Notice | NASALAW

Introduction

Nasser Al Habsi & Saif Al Mamari Law Firm is committed to protecting personal data and processing it responsibly, fairly and in accordance with applicable law.

This Privacy Notice explains how Nasser Al Habsi & Saif Al Mamari Law Firm collects, uses, stores, shares, transfers and otherwise processes personal data during its business and operations. It also explains your rights in relation to your personal data and how you may exercise those rights.

This Privacy Notice covers personal data we process about clients and prospective clients, individuals connected with them or our matters (including client personnel, counterparties, witnesses and experts), our and our staff’s professional or business contacts, supplier and service-provider personnel, website and office visitors, and others connected with our legal services or business operations.

This Privacy Notice is intended to comply with the Personal Data Protection Law of the Sultanate of Oman issued by Royal Decree 6/2022, as amended by Royal Decree 68/2026, and its Executive Regulations issued by Ministerial Resolution 34/2024, together, the “PDPL”. It may be supplemented, where relevant, by other notices explaining how we process your personal data for specific activities.

Nasser Al Habsi & Saif Al Mamari Law Firm provides legal services in the Sultanate of Oman and works in collaboration with Addleshaw Goddard Oman Legal Consultancy (Civil Legal Consultancy Firm), a member of the Addleshaw Goddard group (“AG Group”). Depending on the circumstances, personal data may also be processed by Addleshaw Goddard LLP or another member of the AG Group where it provides systems, administrative or other support to us or is involved in providing services to our clients. For details of the AG entities and their processing activities please see here.

Who we are

For the purposes of the PDPL, the controller of your personal data is:

Nasser Al Habsi & Saif Al Mamari Law Firm

Address: Beach One, Shatti Al Qurum, PO Box 4, PC 102, Al Qurum, Muscat, Sultanate of Oman

Email: dpo.oman@nasalaw.com

References in this Privacy Notice to “Nasser Al Habsi & Saif Al Mamari Law Firm”, “we”, “us” or “our” mean the above entity acting as controller of your personal data, unless stated otherwise.

What this notice explains

This notice explains:

what personal data we collect about you;
why we collect and use it;
how we protect it;
when we share it;
whether we transfer it outside Oman;
how long we keep it; and
your rights under the PDPL.

Please read this Privacy Notice carefully. Where we ask for your consent, you may choose whether to provide it and may withdraw it as explained below.

Data protection officer

Nasser Al Habsi & Saif Al Mamari Law Firm has appointed a Data Protection Officer.

If you have any questions, requests or complaints about this Privacy Notice or how your personal data is processed, you may contact the Data Protection Officer using the details below:

Data Protection Officer: Data Protection Officer, Nasser Al Habsi & Saif Al Mamari Law Firm

Address: Beach One, Shatti Al Qurum, PO Box 4, PC 102, Al Qurum, Muscat, Sultanate of Oman

Email: dpo.oman@nasalaw.com

What personal data we may process

We may collect and use the following categories of personal data about you:

identity and contact information, such as your name, title, organisation, postal address, email address and telephone number;
identification and verification information, such as civil ID, passport or other identity details, where needed for client due diligence, conflicts checks or legal and regulatory requirements;
client and matter information, including information provided by you or others in connection with enquiries about legal services and information relating to instructions, transactions, disputes, investigations or proceedings;
communications and correspondence with you, including enquiries submitted through our website;
billing and financial information, such as payment details, invoices and transaction records;
professional and business information, such as your role, employer, business interests and relationships relevant to a matter;
website and technical information, such as your IP address, browser type, device information, pages visited, access times and information collected through cookies or similar technologies;
event and marketing preferences, including records of invitations, attendance and communications preferences, with your prior consent and as permitted by law;
visitor information, such as office visitor records and CCTV footage; and
other personal data provided to us or generated in connection with our legal services, business operations, compliance obligations or website.

Sensitive personal data

Some categories of personal data are subject to additional protection under the PDPL. These include personal data relating to genetics, health, ethnic origin, sexual life, political or religious opinions or beliefs, criminal convictions, and security measures.

Nasser Al Habsi & Saif Al Mamari Law Firm may process sensitive personal data where it is relevant and lawful to do so, including when providing legal advice or representation, conducting client due diligence, establishing, exercising or defending legal claims, complying with legal or regulatory obligations, or protecting the vital interests of an individual.

We will process sensitive personal data only in accordance with the PDPL, including obtaining any consent or permit required by law or relying on an applicable legal exception.

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, access, destruction or other misuse. These measures include proportionate confidentiality, access-control, security, incident-management and retention controls.

How we collect your personal data

We may collect your personal data:

directly from you, including when you contact us, use our website, supply services, attend events, visit our office or instruct us or communicate with us;
from our clients, prospective clients, counterparties, witnesses, experts and other persons involved in legal matters;
from your employer, organisation, authorised representative or advisers;
from courts, regulators, governmental authorities, law enforcement bodies and official records, where lawful;
from service providers, professional advisers and other third parties;
from publicly available sources; and
automatically when you use our website, systems or facilities, including through cookies, server logs and similar technologies.

How we use your personal data

We may process personal data to:

respond to enquiries and assess whether we can act for you;
conduct identity, client due diligence, sanctions and conflicts checks;
provide legal advice, representation and other legal services;
manage client relationships, matters, correspondence, documents, billing and payments;
manage supplier and service-provider relationships, procurement and payments;
communicate with courts, regulators, governmental authorities, counterparties, experts, witnesses and other participants in legal matters;
operate, administer, improve and secure our website, systems, offices and services;
maintain records, manage risk, obtain insurance and establish, exercise or defend legal claims;
comply with legal, professional, regulatory, tax, accounting and reporting obligations;
prevent and detect fraud, misuse, security incidents and other unlawful activity;
organise events and provide legal updates and marketing communications with your prior consent and as permitted by law; and
support our business administration and other lawful activities connected with providing legal services.

Why we use your personal data

Nasser Al Habsi & Saif Al Mamari Law Firm will only process your personal data where permitted by the PDPL. We obtain your explicit consent unless a specific statutory ground permits processing without it. Depending on the circumstances, these grounds may include where:

you have given consent, where consent is required by law;
processing is necessary to take steps at your request or to perform a contract to which you are a party;
processing is necessary to comply with a legal, regulatory or professional obligation;
processing is necessary to establish, exercise or defend legal claims or for the administration of justice;
processing is necessary to protect your vital interests or those of another person; or
another lawful basis or exception under the PDPL applies.

Where we rely on your consent, you may withdraw it at any time by contacting the Data Protection Officer at dpo.oman@nasalaw.com. Withdrawal will not affect the lawfulness of processing carried out before your consent was withdrawn.

If we do not rely on your consent, we will only use your personal data where we have another lawful basis and the PDPL allows us to do so.

Transfers outside Oman

We may transfer personal data outside the Sultanate of Oman, including to members of the AG Group and service providers that support the provision of legal services and our business operations.

Any transfer outside Oman will be made in accordance with the PDPL. We will obtain your explicit consent before transferring your personal data unless a specific legal exception applies. We will assess the risks of the transfer and ensure that the recipient provides protection no less than that required under the PDPL, including through appropriate contractual and security safeguards.

How long we keep your personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide legal services, comply with applicable legal and professional obligations, resolve disputes, enforce agreements and meet legitimate records-management requirements.

When your personal data is no longer required, we will securely delete, anonymise or destroy it in a way that prevents unauthorised access, recovery or misuse.

Automated processing

We may use automated tools to support document review, legal research, matter administration, security and other business processes. We do not intend to make decisions that produce legal effects or similarly significant effects on you solely by automated means unless permitted by law and subject to appropriate safeguards.

Where the PDPL gives you rights in relation to automated processing, you may contact the Data Protection Officer to request information, object or ask for human review, as applicable.

Children’s personal data

Our website and services are not generally directed at children. We may nevertheless process a child’s personal data where necessary in connection with legal services or another lawful purpose. In that case, we will comply with the PDPL, including obtaining the consent of the child’s parent or legal guardian where required, acting in the child’s best interests and applying appropriate safeguards.

Your rights

Subject to the conditions and limits under the PDPL, you have the right to:

withdraw your consent;
request correction or updating of your personal data;
request blocking or restriction of processing;
obtain a copy of your personal data in paper or electronic form;
request transfer of your personal data to another controller, where applicable;
request deletion of your personal data in certain circumstances;
be notified of a personal data breach where required by law;
submit a complaint if you believe your personal data has been processed unlawfully.

To exercise your rights, contact the Data Protection Officer at dpo.oman@nasalaw.com. We may ask for information needed to verify your identity and respond to your request.

If you are dissatisfied with our response, you may submit a complaint to complaints@nasalaw.com. You may also complain to the Ministry of Transport, Communications and Information Technology through its applicable complaint procedure.

Marketing communications

Nasser Al Habsi & Saif Al Mamari Law Firm may send you legal updates, event invitations and other marketing communications where permitted by the PDPL. We will obtain your consent where required.

You may opt out of marketing communications at any time, free of charge, by using the unsubscribe method included in the communication or by emailing unsubscribe@nasalaw.com. We will stop sending marketing communications immediately upon receiving your request, although we may continue to send non-marketing communications relating to legal services, matters or our relationship with you.

Changes to this privacy notice

Nasser Al Habsi & Saif Al Mamari Law Firm may update this Privacy Notice from time to time to reflect changes in the law, our services, our website, our systems or how we process personal data.

The latest version will be made available on our website. Where appropriate, we will draw material changes to your attention.

This Privacy Notice was last updated in October 2026.

nasalaw.com

For further information about Nasser Al Habsi & Saif Al Mamari Law Firm, including how we are regulated, please refer to the Legal Notices on our website. For information about how we process your personal data, please refer to the Privacy Notice on our website. This document is for general information only and is correct as at the publication date. It is not legal advice, it does not create a solicitor-client relationship and Nasser Al Habsi & Saif Al Mamari Law Firm assumes no duty of care or liability to any party in respect of its content.