Privacy notice
Your information, handled as carefully as your case.
What we collect, why, who sees it, how long we keep it, and your rights. Choose an activity below to see exactly what happens to your data.
The essentials
- Only what we needWe ask for what your matter requires, and no more.
- Never soldWe do not sell your data or use it for advertising.
- Encrypted when storedYour contact details and description are encrypted when stored, and documents reach you only through private links.
- No AI on your enquiryMahmoud reads your enquiry himself. Any AI assistant added later will be optional, and used only with your consent.
- Shared only as neededWith the team in Egypt for your matter; with a specialist only with your consent.
- Your rights, easy to useAsk for a copy, a correction or deletion at any time.
Contents
- 01Who is responsible
- 02What happens to your data
- 03What we collect
- 04Information about other people
- 05Sensitive information
- 06Why we use it
- 07Who we share it with
- 08Transfers outside the UK
- 09How long we keep it
- 10Your rights
- 11Cookies and this device
- 12Security
- 13Children and young people
- 14Changes to this notice
Who is responsible
Mahmoud Hussein, who runs egyptlaw, is responsible for your personal data.
Under UK data protection law (the UK GDPR and the Data Protection Act 2018), the controller is Mahmoud Hussein (egyptlaw). Contact: TBC: practice email.
Where the team in Egypt handles your data, Egypt's Personal Data Protection Law (Law No. 151 of 2020) may also apply.
What happens to your data
Choose what you are doing on the site to see what we collect, why, who sees it and how long we keep it.
What we collect
Contact details, what you tell us about your matter, documents you send, and payment records.
- Contact details: name, email, phone, country and preferred language.
- Your matter: what you tell us, the names of others involved, deadlines and documents.
- Identity documents, where we need to check who you are.
- Billing and payment records.
- Technical data needed to deliver the website, such as your IP address, handled by our hosting provider.
- With each enquiry, a one-way code made from your IP address, which changes every day, to protect the form from abuse. It cannot be turned back into your address.
- Information about other people involved in a matter (see the next section).
Information about other people
Our work involves information about people who are not our clients, such as the other side, debtors and witnesses.
To act for our clients, we handle information about other people: the other party to a dispute or contract, a debtor and their assets, an accused person, witnesses, and a company being checked before a deal.
- Where it comes from: our client, court files, public registers and other lawful sources.
- Why we use it: to establish, exercise or defend legal claims, and our legitimate interest in acting for our client.
- What we do not do: obtain information unlawfully, or use it for anything other than the matter.
- How long we keep it: as part of the client file, for as long as professional rules and the law require.
If this applies to you, you have the rights described below. Some may be limited where telling you would prejudice the legal matter or reveal privileged information, as data protection law allows. You can still contact us, or complain to the ICO.
Sensitive information
Some matters involve sensitive information. We use it only for your legal matter, and limit who sees it.
Legal matters can involve sensitive information, such as details of an alleged crime or health information. We process it only where it is needed to advise you or to establish, exercise or defend legal claims (UK GDPR Article 9(2)(f); Data Protection Act 2018, Schedule 1, paragraph 33). Only the people working on your matter can see it.
Please do not send us intimate images. If a complaint needs them, we will explain how they are given to the authorities.
Why we use it
To do what you ask, to carry out our engagement, to meet legal duties, and with your consent for introductions.
- Contract: to respond to your enquiry at your request, and to carry out the work you instruct us to do.
- Legal obligation: to keep records and carry out identity checks where the law requires.
- Legitimate interests: to check for conflicts, keep the site secure and improve our service, where this does not override your rights.
- Consent: to share information with a specialist we introduce. You can withdraw consent at any time.
Transfers outside the UK
Your data moves between the UK and Egypt, because the work is done in both.
Egyptian legal work means your information will be handled in Egypt, which is not covered by UK adequacy regulations. These transfers rely on the exception for transfers necessary to establish, exercise or defend legal claims (UK GDPR Article 49(1)(e)).
Some service providers may process data in other countries. Where they do, appropriate safeguards are used.
How long we keep it
Only as long as needed, as set out below.
- Enquiries that do not become matters: deleted automatically, usually within a year
- Client files: kept for as long as professional rules and the law require after the matter ends
- Billing records: kept for as long as tax rules require
Your rights
You can ask for a copy of your data, its correction or deletion, and more. We respond within one month.
You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable form, and withdraw consent. Some rights have limits, for example where the law requires us to keep records.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would welcome the chance to put things right first.
Cookies and this device
No advertising or tracking cookies. Some tools save your progress in your own browser, and you can clear it here.
We do not use advertising or tracking cookies.
Some tools save your progress in your browser's storage on this device, so you don't lose it. It stays on your device and we cannot see it. You can see and clear it below.
Security
Encrypted connections, enquiries encrypted when stored, private links for documents, and access limited to those working on your matter.
The site is served over an encrypted connection, and what you send through the enquiry form is encrypted when it is stored. Quotes, engagement letters and invoices are shared through private links rather than attachments, and access to matter files is limited to the people working on them. The back office where enquiries are handled is behind a separate sign-in.
Children and young people
If a young person is affected, a parent or guardian should contact us.
Our services are for adults. If a child or young person is being blackmailed or is otherwise affected, a parent or guardian should contact us on their behalf. If a child is in immediate danger, contact the police where you are.
Changes to this notice
When this notice changes, we update the date and record what changed.
Changes are recorded in the version history below.
Version history
| Version | Date | Change |
|---|---|---|
| 0.5 | 17 October 2026 | How enquiries are stored added to the essentials; service providers and retention described without names or fixed periods; a request not to send intimate images; the power of attorney checklist removed with the guide |
| 0.4 | 7 October 2026 | Matched to the first version of the site: no AI assistant yet, hosting named, protection of the form and the items kept on your device described |
| 0.3 | 6 October 2026 | Free introductory calls, written quotes and payment by bank transfer |
| 0.2 | 6 October 2026 | Added a section on people who are not our clients |
| 0.1 | 6 October 2026 | First draft for review |