Last updated: 5 August 2026
This Privacy Policy explains how Mohammed Al Shaibani Law Firm, operating MS Desk Italy (“MS Desk Italy”, “we”, “us” or “our”), collects, uses, discloses and protects personal data through msdeskitaly.com. It applies to website visitors and people who contact us through the website. Client matters may also be governed by engagement terms, professional duties and applicable law.
1. Data controller and contact details
Data controller: Mohammed Al Shaibani Law Firm, operating MS Desk Italy
Address: 3480 Prince Turki Al Awwal Road, Al Nakheel, Riyadh 12382–6260, Kingdom of Saudi Arabia
Email: info@msdeskitaly.com
Telephone: +966 11 221 7933
Please use the email address above for privacy questions or requests.
2. Personal data we collect
Depending on how you use the website, we may collect:
- Contact and enquiry data: name, email address, telephone number, subject, message and any file you choose to upload.
- Professional or business information: company, role and information you provide about a potential instruction, transaction or legal matter.
- Technical and usage data: IP address, browser and device information, referring pages, pages visited, timestamps, diagnostic logs and security events.
- Consent data: cookie choices, consent status and related technical records.
- Communications: correspondence and records of our response to your request.
Please do not send sensitive personal data, confidential documents or privileged material through the website unless it is necessary and you are authorised to do so. Submitting an enquiry does not by itself create a lawyer-client relationship.
3. How we collect data
We collect data directly from you when you submit a form, send an email, telephone us or otherwise communicate with us. We also collect limited technical data automatically through essential website technologies, security tools and, where permitted by your consent, analytics or embedded third-party services.
4. Purposes and legal bases
We process personal data only when we have an appropriate legal basis. Depending on the circumstances, we use data to:
- respond to enquiries and take steps requested before entering into a contract;
- provide services and administer our relationship with clients;
- operate, maintain, troubleshoot and secure the website;
- prevent fraud, abuse, spam and cybersecurity incidents;
- comply with legal, regulatory and professional obligations;
- establish, exercise or defend legal claims;
- understand website use and improve our services, where analytics consent has been provided; and
- display third-party media or functionality when you consent to the relevant cookie category.
The legal bases may include your consent, performance of or steps prior to a contract, compliance with a legal obligation, and our legitimate interests in operating a secure website, responding to enquiries and managing our professional services. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
5. Cookies, analytics and embedded services
We use necessary cookies for website functionality and consent management. With your permission, the website may use analytics, media and third-party services such as Google Analytics, Google Maps, Google reCAPTCHA, Google Fonts, YouTube, LinkedIn, Instagram, TikTok and Snapchat. These providers may receive technical data such as your IP address and device information and may process data under their own privacy terms.
You can accept, deny or manage optional categories through the consent banner. For more detail, including current cookie categories and providers, see our Cookie Policy (EU).
6. Recipients and service providers
We may share personal data only as necessary with:
- authorised personnel and professional advisers who require access;
- website hosting, maintenance, email, form delivery and IT support providers;
- security, spam-prevention and consent-management providers, including Wordfence and Complianz;
- analytics and embedded-content providers where you have consented;
- courts, regulators, public authorities or law-enforcement bodies when required or permitted by law; and
- other parties involved in a matter when authorised by you or otherwise legally permitted.
We do not sell personal data.
7. International transfers
Our activities and service providers may involve processing in Saudi Arabia, the European Economic Area, the United States or other countries. Where personal data is transferred across borders, we take steps required by applicable law to ensure an appropriate level of protection, such as contractual safeguards, transfer assessments, adequacy mechanisms or another lawful transfer basis.
8. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, regulatory, professional, accounting, security and dispute-resolution requirements. Retention periods are determined by the nature of the information, the purpose of processing, the sensitivity and risk involved, whether an enquiry becomes a client matter, and mandatory legal or professional periods. When data is no longer required, it is deleted, anonymised or securely archived as appropriate.
9. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. No internet transmission or storage system can be guaranteed to be completely secure.
10. Your privacy rights
Subject to applicable law and any relevant exemptions, you may have the right to:
- be informed about how your personal data is processed;
- request access to and a copy of your personal data;
- request correction of inaccurate or incomplete data;
- request deletion or destruction of personal data;
- request restriction of, or object to, certain processing;
- withdraw consent at any time;
- request data portability where applicable; and
- lodge a complaint with the competent data-protection authority.
To exercise a right, email info@msdeskitaly.com. We may need to verify your identity and may retain information where required by law or professional obligations.
11. Children
The website is intended for business and professional audiences and is not directed to children. We do not knowingly seek to collect children’s personal data through the website.
12. Third-party websites
The website contains links to external websites and social-media platforms. Their privacy practices are governed by their own policies, and we are not responsible for their content or privacy practices.
13. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices, services or legal requirements. The current version and its update date will be published on this page.
14. Complaints and contact
Please contact us first at info@msdeskitaly.com so that we can address your concern. You may also complain to the competent supervisory authority under the Saudi Personal Data Protection Law or, where the GDPR applies, to the data-protection authority in your place of residence, work or the alleged infringement.