Privacy policy

We value your data

We only collect your personal data for what we need to run this website, answer your enquiries and, if we work together, meet our legal and regulatory duties.

We never sell your personal data or use it for third-party advertising. You can ask to see, correct or delete what we hold at any time by emailing info@stack-counsel.com.

Who we are

Stack Counsel FZ LLE is a licensed legal consultancy practice registered in the UAE in the emirate of Fujairah under license number 20539/2026.

This policy applies to:

• visitors to www.stack-counsel.com or www.stack-counsel.co.uk;
• prospective clients and suppliers who contact us or whom we contact; and
• anyone else who sends us an enquiry or complaint, by form, email, phone or post.

It does not apply to how we handle data for clients once engaged. Clients’ data is governed by the data protection terms in our engagement letter, which we provide when you instruct us.

What we collect

If you visit our website

We automatically collect technical information: your IP address, browser type and version, device and operating system, time zone and approximate location, the pages you view, how you arrived and how long you stay. Most of this comes from cookies and similar technologies.

If you contact us, or we contact you about our services

We collect:

• your name, job title, organisation, email address, phone number and other contact details;
• what you tell us in your enquiry, and any documents or correspondence you send;
• details you give when booking a meeting through our scheduling tool Calendly;
• information about you and your business that is publicly available, such as your company website, LinkedIn profile or commercial registry entry, where we research a prospective client or supplier; and
• if you subscribe, your marketing preferences.

If we decide to work together

Before we act for you we may need to verify your identity and check the source of funds, as required by anti-money laundering and counter-terrorist financing laws. This can include copies of passports, ID or trade licenses, proof of address and details of beneficial owners.

Where we get it

Most data comes directly from you. We also receive data from our website analytics and scheduling providers, identity verification providers, public sources (such as company websites, LinkedIn and commercial registries), and people who refer or introduce you to us.

Do you have to give it to us?

Giving us personal data through the website is voluntary. But if you want to become a client, the law requires us to verify your identity. If you don’t provide what we need for those checks, we cannot act for you.

How we use it and why we are allowed to

We only use personal data where the law permits. Your personal data may be collected and processed in the following ways and for the following purposes:

We do not sell, rent or trade your personal data. We do not make decisions about you based solely on automated processing.

Depending on the applicable data protection laws which are relevant to you, we may be entitled to use your personal data in the ways listed above because:

• we have your consent;
• we need to comply with the contract we have with you;
• of legal or regulatory obligations;
• we need to establish or defend our legal rights;
• you have made the personal data public; or
• it is necessary for our legitimate interests.

Who we share it with

Our staff can see personal data only as far as their role requires. Outside Stack Counsel, we share it only with:

• Service providers who run our systems on our behalf under contract, such as our website host, email and document storage, scheduling tool, analytics provider, CRM and phone provider.
• Identity verification providers who help us carry out anti-money laundering checks.
• Professional advisers such as our auditors, insurers and external lawyers.
• Regulators, courts and law enforcement where the law requires it, or in connection with actual or prospective legal proceedings; and
• A buyer or successor if Stack Counsel is reorganised, merged or sold, under the same protection as this policy.

These providers may only use your data to provide their services to us and must keep it secure.

International transfers

Stack Counsel’s head office is based in the UAE, so personal data received from the UK or EU may be transferred to the UAE. Our service providers may also process or store personal data in other countries, including the EU, UK and US.

We protect international transfers in accordance with applicable data protection laws by transferring data to countries recognised as providing adequate protection, using approved contractual safeguards or relying on a legally permitted exception.

For a copy of the safeguards applicable to your data please email info@stack-counsel.com.

Cookies

We use cookies that are strictly necessary for the website to work, and, with your consent, analytics cookies that show us how visitors use it. We do not use advertising or cross-site tracking cookies. You can change your choice at any time through the cookie banner or your browser settings. Full details are in our Cookie Policy.

How long we keep it

The period of time that we hold your personal data may change. The retention period will be determined by different factors, including:

• The purpose for which we are using it: we will need to keep the data for as long as is necessary for the purpose that it is being used; and
• Legal obligations: laws or regulations may set a minimum period that we have to keep your personal data.

In all cases, we will continue to protect your personal data in accordance with the terms of this privacy notice. We will also routinely refresh our information to ensure we keep it up-to-date.

Your rights concerning your personal data

You have a number of legal rights in relation to your personal data. These rights may (depending on where your personal data is located) include the following:

Right to be informed

Regarding the processing of your personal data and access to the personal data which we hold about you (or which is held by others on our behalf).

Right to a copy of data

You can access or receive a copy of any personal data which we hold about you.

Right to rectification

You can request that we correct your personal data if it is inaccurate or incomplete.

Right to erasure

You can request that we erase your personal data in certain circumstances. This may include circumstances in which:

• we do not need to retain your personal data for the purposes for which we collected it; or
• we are only entitled to process your personal data with your consent (i.e. because no other lawful ground for processing the personal data applies) and you withdraw your consent.

Right to restrict

You can request that we restrict the means or manner in which we are processing your personal data, even though we may store it.

Right to transfer data

You can request that we move, copy or transfer your personal data back to you (or to another controller) to reuse it.

Right against discrimination

You have the right to not be discriminated against by us when exercising your rights.

Right to object

You can object to the processing of your personal data by us.

Right to withdraw consent

You are entitled to withdraw your consent to personal data processing at any time. Please note, however, that we may still be entitled to process your personal data if we have another legitimate reason for doing so (for example, we may need to retain personal data to comply with a legal obligation).

Right to raise a complaint

You can complain to the local data protection regulator if you think that we have infringed any of your rights. However we would like the opportunity to address your complaint before you contact the regulator.