Privacy policy

1. Data controller

The data controller responsible for processing personal information under this policy is:

Karameh & Partners
Aley Plaza Building, 4th Floor, Aley, Mount Lebanon, Lebanon
Contact for data matters: info@karamehandpartners.com

2. Legal framework

We process personal information in accordance with applicable Lebanese law, including Law No. 81/2018 on Electronic Transactions and Personal Data. Where users access the website from the European Union, the United Kingdom, or other jurisdictions with extraterritorial data protection rules, we also seek to align our practices with the relevant requirements (such as the EU General Data Protection Regulation, where applicable).

3. Information we may collect

We may collect limited personal information that you voluntarily provide, including:

• Name
• Email address
• Telephone number
• Company or organization name
• Information contained in your message or inquiry

Certain technical information - such as IP address, browser type, device type, and website usage data - may also be automatically collected for security, analytics, and website functionality purposes.

4. Legal basis for processing

We rely on the following legal bases to process personal information:

• Your consent, where you voluntarily submit information through a contact form or communication channel;
• Our legitimate interest in responding to your inquiries, operating and securing the website, and developing our professional activity;
• The performance of, or steps preparatory to, a professional engagement; and
• Compliance with applicable legal and professional obligations.

5. How we use information

Information collected through the website may be used to:

• Respond to inquiries and contact requests;
• Communicate regarding legal services or consultations;
• Maintain website security, integrity, and functionality;
• Comply with legal and professional obligations.

We do not sell, rent, or commercially distribute personal information to third parties.

6. Data retention

We retain personal information only for as long as necessary for the purposes for which it was collected, including to satisfy legal, professional, accounting, or reporting requirements.

As a general rule: inquiry and contact-form data is retained for up to 24 months from the last interaction unless a professional engagement is established; engagement-related records are retained for the period required under Lebanese professional and statutory rules; technical server logs are retained for up to 90 days for security purposes.

7. International data transfers

Because our website is hosted by Netlify, Inc. in the United States, and because the firm operates offices in Lebanon and the United Arab Emirates, personal information you submit may be transferred to, stored in, or accessed from countries outside your country of residence. Where such transfers occur, we take reasonable steps to ensure that the data continues to be protected in accordance with this Privacy Policy and applicable law.

8. Third-party services

This website may use third-party services necessary for its operation, including hosting providers, email services, map services, analytics tools, or WhatsApp communication links. Such third-party services may process limited technical data in accordance with their own privacy policies. We encourage you to review the privacy policies of those providers.

9. Cookies

This website uses cookies and similar tracking technologies for essential functionality, security, and - where applicable - analytics. Detailed information about the cookies used, their purpose, and how to manage your preferences is provided in our separate Cookie policy.

10. Data security

Karameh & Partners takes reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, alteration, or disclosure. However, no method of internet transmission or electronic storage can be guaranteed as completely secure, and transmission of information through the website or by email is undertaken at the user's own risk.

11. Confidentiality

Contacting Karameh & Partners through the website, email, or WhatsApp does not automatically create an attorney–client relationship. Users are advised not to transmit confidential, sensitive, or time-critical information before a formal professional engagement has been established.

12. Your rights

Subject to applicable law, you may exercise the following rights in respect of your personal information:

• Right of access to the data we hold about you;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”);
• Right to restrict or object to processing;
• Right to data portability, where applicable;
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
• Right to lodge a complaint with the competent supervisory or judicial authority in your jurisdiction.

To exercise any of these rights, please contact us at privacy@karamehandpartners.com. We will respond within a reasonable timeframe in accordance with applicable law.

13. Children's privacy

This website is not directed at children under the age of 18, and we do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us so that we may take appropriate action.

14. Updates to this policy

Karameh & Partners reserves the right to update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The “Last updated” date at the top of this policy will reflect any such revisions.

15. Contact information

Karameh & Partners
Aley Plaza Building, 4th Floor, Aley, Mount Lebanon, Lebanon
Lebanon: +961 81 260 567
UAE: +971 55 401 4069
General inquiries / data protection / privacy requests: info@karamehandpartners.com