Privacy Policy
E Law is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and safeguard your information.
PDPL Compliant
Our data processing activities comply with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) of the United Arab Emirates.
Last Updated: January 4, 2026 • Version 1.0 • Effective Date: January 4, 2026
Comprehensive Privacy Protection
Transparent data practices with industry-leading security measures to protect your information and maintain your trust.
01
Introduction
- •Committed to protecting privacy and security
- •Applies to Platform users and website visitors
- •Complies with UAE PDPL (Decree-Law No. 45/2021)
- •We're Data Controller for user data
- •We're Data Processor for your Client Data
- •Contact: privacy@elaw.ae
02
Definitions
- •Personal Data: Info about identified/identifiable person
- •Client Data: Your clients' data uploaded to Platform
- •User Data: Our data about you and authorized users
- •Processing: Collection, storage, use, disclosure, deletion
- •Data Subject: Individual whose data is processed
- •Sensitive Data: Race, religion, health, biometric data
03
Information We Collect
- •Professional info: Name, firm, bar membership, license
- •Account credentials (encrypted)
- •Billing: Payment cards, tax ID (via processors)
- •Client Data you upload (you control)
- •Usage data: IP, browser, device, access times
- •Communications: Support tickets, emails, calls
04
How We Use Your Information
- •Provide Platform and Services per agreement
- •Process payments and manage billing
- •Improve services and develop features
- •Prevent fraud and ensure security
- •Comply with UAE laws and regulations
- •Marketing (only with your explicit consent)
05
Data Sharing & Disclosure
- •We do NOT sell your personal data
- •Share with trusted service providers only
- •Cloud hosting, payment processors, email services
- •Legal requirements when mandated by law
- •Business transfers (M&A) with protections
- •Aggregated anonymized data for research
06
International Data Transfers
- •Data primarily stored in UAE
- •Cross-border transfers with adequate protection
- •Approved countries or standard contractual clauses
- •Your explicit consent when required
- •Compliance with PDPL requirements
- •Regular transfer assessments
07
Data Security
- •256-bit AES encryption for data at rest
- •TLS 1.3 encryption for data in transit
- •Firewall protection and intrusion detection
- •Role-based access controls and MFA
- •Regular security audits and penetration testing
- •72-hour breach notification to authorities
08
Data Retention
- •Active subscription + 90 days post-termination
- •Billing data: 6 years (UAE tax requirements)
- •Support tickets: 3 years
- •Email correspondence: 2 years
- •Security logs: 1 year minimum
- •Secure deletion after retention period
09
Your Rights Under PDPL
- •Right to access your personal data
- •Right to rectify inaccurate information
- •Right to erasure (with limitations)
- •Right to restrict processing
- •Right to data portability (CSV/JSON/PDF)
- •Right to object and withdraw consent
10
Children's Privacy
- •Platform not intended for under 18
- •We don't knowingly collect children's data
- •Parental consent required for minors
- •Will delete if inadvertently collected
- •Report concerns to privacy@elaw.ae
- •Compliance with UAE age restrictions
11
Marketing Communications
- •Explicit opt-in consent required
- •Product updates and new features
- •Educational content and resources
- •Opt-out anytime via unsubscribe links
- •Can't opt-out of transactional emails
- •Account notifications always sent
12
Cookies Policy
- •Essential cookies for Platform functionality
- •Performance cookies for optimization
- •Analytics cookies (Google Analytics)
- •Functionality cookies for preferences
- •You can manage via browser settings
- •Disabling may affect functionality
13
Data Processing Agreement
- •You're Data Controller for Client Data
- •We're Data Processor acting on your instructions
- •You ensure lawful basis for processing
- •We implement appropriate security measures
- •We assist with data subject requests
- •We maintain list of sub-processors
14
Automated Decision-Making
- •No automated decisions with legal effects
- •We analyze usage patterns
- •Provide personalized recommendations
- •Detect fraudulent activities
- •You can request human intervention
- •You can challenge automated decisions
15
Changes to Privacy Policy
- •May update to reflect new practices or laws
- •Email notification for material changes
- •Prominent notice on Platform
- •Changes effective 30 days after notice
- •Continued use constitutes acceptance
- •Prior versions available upon request
16
Contact Information
- •Privacy questions: privacy@elaw.ae
- •Data Protection Officer: dpo@elaw.ae
- •Phone: +971521050160
- •Dubai - DIFC - Alsaqer Tower – 801
- •Response within 5 business days
- •Can escalate to UAE Data Office
17
User Type Provisions
- •Law firm admins control organization access
- •Admins responsible for user compliance
- •Individual practitioners control own data
- •Authorized users monitored by admin
- •Organization policies apply to all users
- •Different communication preferences per type
18
Transparency & Accountability
- •Committed to transparent data practices
- •Maintain processing activity records
- •Conduct regular privacy audits
- •Perform data protection impact assessments
- •Regular employee privacy training
- •Third-party certifications when applicable
19
Miscellaneous
- •Severability: Invalid provisions don't affect others
- •Complete privacy practices statement
- •English version prevails in conflicts
- •Governed by UAE law and PDPL
- •May be translated to Arabic
- •Entire agreement on privacy matters
20
Legal Notices
- •PDPL Compliance Statement (Decree-Law 45/2021)
- •Data transfers only with safeguards
- •Consent recording: date, time, method, purpose
- •72-hour breach notification to UAE Data Office
- •Regular compliance reviews
- •Cooperation with regulatory authorities
🔒 YOUR DATA, YOUR CONTROL
E Law acts as Data Controller for user information and Data Processor for your Client Data. You retain full ownership of all Client Data uploaded to the Platform.
We process Client Data only on your documented instructions and in accordance with PDPL.
✓ SOC 2 & GDPR COMPLIANT
Audited by Vanta & Advantage Partners. We maintain the highest standards of data security and privacy protection with regular third-party assessments.
Privacy Inquiries
Questions About Your Privacy?
Our privacy team is here to address your concerns and answer any questions.
Privacy Email
privacy@elaw.ae
Data Protection Officer
dpo@elaw.ae
Phone
+971521050160
Response Time: We aim to respond to all privacy inquiries within 5 business days.
Address: Dubai - DIFC - Alsaqer Tower – 801, Dubai, UAE
You also have the right to lodge a complaint with the UAE Data Office.
Ready to Get Started?
Experience secure, compliant legal practice management with E Law.
Get Started Today© 2026 E Law Legal Practice Management. All rights reserved.