Privacy Policy, Heirkin Legacy

Heirkin Legacy ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL").

1. Data controller

Heirkin Legacy is the data controller for personal data submitted through this website. Legal drafting services are provided by our retained partner law firm, AZ&Co Legal, who act as a separate data controller in respect of legal documents prepared on your behalf.

2. Personal data we collect

Identification data: name, date of birth, nationality, residency status
Contact data: telephone, email, postal address
Family data: spouse, dependants, beneficiaries
Asset information: property, accounts, shareholdings (only as needed)
Technical data: IP address, browser type, device data, cookies

3. How we use your data

To provide our consulting services and prepare your engagement
To communicate with you about your enquiry or matter
To instruct AZ&Co Legal on legal drafting where you proceed
To comply with our regulatory and legal obligations under UAE law
With your explicit consent, to send you relevant insights and updates

4. Lawful basis

We process your data on the basis of your consent, the necessity of performing a contract with you, or our legitimate interests in operating the consultancy, in each case as permitted by the PDPL.

5. Data sharing

We do not sell your personal data. We share it only with: (i) AZ&Co Legal when you instruct us to proceed; (ii) registration authorities (DIFC, Dubai Courts, ADJD) as required for your will; (iii) trusted service providers under written confidentiality terms; and (iv) where required by UAE law.

6. International transfers

Where your data is transferred outside the UAE, we ensure adequate protection in line with PDPL requirements, including the use of standard contractual safeguards.

7. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by UAE law. Engagement records are typically retained for ten years following the conclusion of our services.

8. Your rights under the PDPL

Right to be informed about processing of your data
Right of access to your data
Right to correction of inaccurate data
Right to deletion in defined circumstances
Right to restrict or object to processing
Right to data portability
Right to withdraw consent at any time

9. Cookies

We use strictly necessary cookies to operate this website, and, with your consent, analytics cookies to understand site usage. See our Cookie Policy for full details and controls.

10. Security

We apply organisational and technical safeguards appropriate to the sensitivity of the data we hold, including encryption in transit, access controls and confidentiality undertakings from all personnel.

11. Contact & complaints

To exercise any of your rights, or to raise a concern, contact us at privacy@heirkinlegacy.ae. You also have the right to lodge a complaint with the UAE Data Office.