Privacy Policy

Who we are: Saad Ahsan Legal Aid Management (“SALAM”, “we”, “us”, “our”) is a Pakistan-based law firm providing litigation,court representation, mediation (as neutral facilitators), and negotiation services to individuals, companies, in local and particularly Overseas Pakistanis. We deliver services both online through our website and CRM and in person at our law firm, while prioritizing client confidentiality and data security.

1) Scope & Legal Basis

This Policy explains how we collect, use, disclose, transfer, and protect personal data in connection with our legal services, website, apps, messaging platforms, subscription services, and in-person engagements.

We comply with applicable Pakistani laws, including t not limited to:

• Attorney–client privilege under the Qanun-e-Shahadat Order, 1984 and Legal practitioners and Bar council Act 1973, (Amended 2025)
• Electronic recognition of records & e-signatures under the Electronic Transactions Ordinance, 2002 (ETO).
• Cybersecurity & system safeguards under the Prevention of Electronic Crimes Act, 2016 (PECA), (Amended 25)
• Draft Personal Data Protection Bill, 2023 (PDPB) — while not yet enacted, we voluntarily align with its core principles, including rights of access, rectification, erasure, and breach notification.

Where international frameworks apply including but not limited to SDGs we extend protections in line with those standards.

2) What Data We May Require 

Depending on our engagement, we may require:

• Identity & verification data: CNIC, NICOP, passports, residence permits, photographs, and other ID documents.
• Case-related documents: property records, inheritance papers, contracts, order sheets, previous court orders, powers of attorney, financial statements, previous litigation filings, and evidence. In case of appeals, review, revisions, dismissal/DNP cases, we shall require complete previous record. 
• Regulatory/KYC data: conflict checks, AML compliance (if applicable).
• Communications: emails, messages, call notes, meeting records, video conference metadata, and recordings of communications made between Representative of Salam Law Firm and Client with mutual consent. 
• Digital usage data: IP addresses, cookies, device details, and logs from our website or CRM.
• Subscription & billing data: when you enroll in legal subscription packages, we would require contact details, billing details, payment information, and usage of subscription services.
• Marketing & email subscription data: if you opt in to newsletters or alerts, we collect your email address and preferences.

3) Why we require your data

We collect and process personal data with the due care and responsibility, as it allows us to serve you better and protect your rights. Your information helps us deliver legal services such as litigation, court representation, negotiations, mediation, and case management with accuracy and efficiency. It also enables us to represent you in settlements or contracts, administer mediation in a fair and neutral manner, and ensure smooth handling of scheduling, filings, and related documentation. Additionally, we use this data to manage your subscription plans, provide account access, and deliver services you rely on. Where you choose to give consent, we may also share newsletters, legal updates, and communications that could be valuable to you, with the option to withdraw at any time. Beyond service delivery, your data supports our client care by maintaining accurate records, improving quality, and ensuring responsive support. Finally, processing this information allows us to comply with legal requirements and safeguard both online and offline systems, ensuring your privacy, security, and trust remain at the center of everything we do.

 4) Online Systems & Overseas Clients

As a law firm catering both Overseas Pakistanis and local Pakistanis, We use a secure Client Relationship Management (CRM) system to store and manage client data.

• Cloud storage: Client data may be stored on servers inside and outside Pakistan.
• Encryption: All data is encrypted in transit and at rest.
• Access control: keeping your privacy in mind,  Only authorized lawyers of SALAM  assigned to your case will access your data.
• Audit logging: CRM access is tracked to prevent unauthorized use.
• Retention: IDs and case files are kept only as long as legally required or needed for your matter, then securely deleted.

5) Subscriptions & Membership Plans

SALAM offers subscription-based legal services or membership models (e.g., half yearly and yearly retainers).

When you subscribe, we process:

• Contact and billing details
• ID verification
• Case Material (All documents related to the case)
• Payment information
• Subscription usage (covered services, frequency of consultations, support requests)
• Children Data (e.g. Pictures, B-Forms, Birth Certificates, Smart Card and other documents as may be required by courts)

We use this data to provide your subscription benefits, manage billing, and maintain your account securely.

6) Email Subscriptions & Newsletters

If you opt in to our newsletters or updates:

• We collect your email address and preferences.
• Emails may include legal updates, practice insights, or offers.
• You can unsubscribe anytime via the link in each message or by contacting us.
• We never share your email address (add address) with third parties for marketing. 

7) Sharing Information

We share data only where necessary:

• Courts, tribunals, as required by law or as subjectivity of the case.
• Regulatory and Compliance authorities– e.g., SECP, FBR, NAB, FIA, or other national regulators if required. 
• Hospitals and healthcare providers: for obtaining Medico legal reports, evidence or expert opinions. 
• Counter parties/counsel for advancing your matter.
• Trusted service providers (cloud hosting, IT, foreign 0ffice,e-signatures, couriers, translators, law enforcement agencies) bound by strict contracts.
• Professional advisers: (barristers, Advocates, experts, accountants, government department officials)
• Consulate General & Foreign Offices: We may share data with consulate generals and foreign offices where required for visa matters, attestations, verifications, or other overseas legal issues.
• Insurance Companies: for claims or litigation support.
• Corporate transitions (mergers, restructuring, acquisition, forming and winding up companies) with safeguards.

8) Cross-Border Transfers

As many of our clients reside abroad, certain data may be transferred internationally. To ensure its protection, we implement strict safeguards including encryption, access controls, and contractual security measures.

9) Children’s Data

While dealing in family matters (e.g.child custody, guardianship), children’s information is handled with enhanced protection. 

10) Data Security

We apply technical and organizational measures consistent with PECA Act and international best practice:

• Network segregation & MFA
• Encryption of files and communications
• Role-based access & least privilege
• Continuous monitoring & logging
• Staff confidentiality training
• Secure deletion when retention ends

11) Data Retention

• Litigation & core matter files:  Subject to the nature of the case.
• Routine logs/analytics: shorter retention.
• Identity, subscription, and billing documents: only until case closure, subscription end, or legal requirement expires.

12) Your Rights

Subject to privilege and law, you may request to:

• Access or copy your data (subject to retention periods) 
• Correct inaccuracies
• Withdraw consent (where applicable)
• Request deletion or restriction
• Data portability (where feasible) 

13) Data Breaches

In case of an alleged data breach, once proved in a court of law, the matter will be dealt with in accordance with the laws and regulations of Pakistan.

14) Third-Party Sites
Linked services (e.g., payment gateways, conferencing tools) are governed by their own privacy policies and terms of use. Users are advised to review these independently. We are not responsible for any third-party errors, negligence, or technical issues/glitches.

15) Updates

SALAM reserves the right to amend or update this policy at any time. Any revisions will be posted with the updated effective date, and where significant changes are made, users/subscribers will be notified directly.