1. General
This policy sets out how we process and protect the personal data of users of dubailegal.ru (the Site). It takes into account Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
By using the Site and submitting data through its forms, you confirm that you have read this policy. Consent to the processing of personal data is given separately, by ticking the box in the form before submitting it.
2. The controller
The controller of personal data is ALROA Legal Consultancy (Legal Consultancy licence No. 20474/2026, Dubai Department of Economy and Tourism), Bay Square, Business Bay, Dubai, UAE. Contact for data protection matters: info@dubailegal.ru.
3. The data we process
- Data you provide: your name, phone number, email address, the topic of your enquiry, your message and any information it contains.
- Data collected automatically: cookies, IP address, browser and device information, pages viewed, referral source and time of visit — via the Yandex Metrica web analytics service.
Please do not send special categories of data (health, beliefs, criminal records and the like) or detailed case documents through the Site's forms; it is better to share them over a secure channel once we are in contact.
4. Purposes
- replying to your enquiry, providing a consultation, preparing a proposal and entering into a contract;
- sending materials you have requested (guides) by email;
- sending news and event announcements — only with your separate consent; you can unsubscribe at any time;
- analysing traffic and improving the Site;
- complying with legal obligations.
5. Legal bases
We process data on the basis of your consent, and where processing is necessary to enter into or perform a contract with you or to comply with the law. You may withdraw consent at any time by writing to info@dubailegal.ru; withdrawal does not affect the lawfulness of processing carried out before it.
6. Processing and storage
We carry out the operations needed for the purposes above: collection, recording, organisation, accumulation, storage, updating, use, transfer (provision, access), blocking, deletion and destruction, with and without automated means.
Data submitted through the Site's forms is recorded and stored on servers of the hosting provider Beget LLC, located in the Russian Federation.
We keep data no longer than the purposes require: enquiries that do not lead to a contract — no more than 3 years from the last contact; client data — for the term of the contract and the period required by law; mailing list data — until you unsubscribe or withdraw consent. After that, the data is deleted or anonymised.
7. Sharing with third parties
- Beget (Russia), hosting provider — storage of Site data.
- Yandex LLC (Russia) — web analytics (Yandex Metrica), on Yandex's terms.
- Telegram — notifications of new enquiries are sent to the controller's staff via Telegram; Telegram's servers are located outside Russia.
- The controller's staff and engaged specialists in the UAE — to respond to your enquiry and handle your matter, under confidentiality obligations.
Because the controller is located in the UAE and notifications are sent via Telegram, processing involves cross-border data transfers. These are limited to what is needed to respond to your enquiry. We do not sell personal data or share it for third-party advertising. Data may be disclosed to public authorities only where the law requires it.
8. Cookies and Yandex Metrica
The Site uses cookies: technical cookies needed for it to work, and analytics cookies for Yandex Metrica, which helps us understand how visitors use the Site. You can block or delete cookies in your browser settings and opt out of Yandex Metrica using the tools Yandex provides. Restricting cookies may affect some Site features.
9. Your rights
You have the right to:
- obtain information about the processing of your data and a copy of it;
- have your data corrected, blocked or deleted if it is incomplete, inaccurate, out of date or unlawfully processed;
- object to or restrict processing, or withdraw your consent;
- opt out of mailings;
- complain to the competent authority — Roskomnadzor in Russia or the competent data protection authority in the UAE — or to a court.
Send requests to info@dubailegal.ru. We reply within the time limits set by applicable law (under 152-FZ, within 10 working days, extendable by no more than 5 working days with notice).
10. Security
The controller takes organisational and technical measures to protect data against unauthorised access, alteration, disclosure and destruction: access limited to staff who need it, confidentiality obligations, secure transmission (HTTPS) and controlled server access.
11. Other terms
The Site is not intended for anyone under 18. The controller may amend this policy; the new version takes effect when published on this page, and the version date is shown at the top. Questions about this policy may be sent to info@dubailegal.ru.
Version date: 31 October 2026.