Privacy Policy & Data Protection Notice

Last updated: 18 May 2026

This Privacy Policy & Data Protection Notice describes how Arkan Legal Translation collects, processes, retains, and discloses personal data in connection with interpretation and translation enquiries. Assignment-specific data-processing, confidentiality, retention and transfer terms can be agreed in writing before work begins.

1. Controller Details

The controller responsible for personal data processed in connection with the services offered at arkancertifiedtranslation.ae is:

• Legal entity: Arkan Legal Translation
• Trade brand: Arkan Interpreters & Translators
• Personal legal-translator licence: Mohamed Khalid holds UAE Ministry of Justice legal-translator licence #688 for written Arabic–English legal translation.
• Office: Office 1-04-106, Riqaa Al Buteen Plaza Building, 35 Al Maktoum Road, Al Muraqqabat, Deira, Dubai
• Email: info@arkancertifiedtranslation.ae
• WhatsApp: +971 50 520 3966
• Verify hotline: 800 333333

Privacy enquiries may be sent to info@arkancertifiedtranslation.ae with the subject line "Privacy request" or "Data subject request". Requests are reviewed under the applicable legal and assignment-specific requirements; no incident-response or notification commitment is represented here.

2. Legal Basis under UAE PDPL

Personal data is processed in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). The lawful bases recognised under Article 4 of the PDPL are:

1. Consent of the data subject;
2. Performance of a contract to which the data subject is a party, or pre-contractual steps at the data subject's request;
3. Compliance with a legal obligation imposed on the controller;
4. Protection of the data subject's vital interests;
5. Performance of a task carried out in the public interest;
6. Legitimate interests of the controller or a third party, balanced against the rights of the data subject.

The bases that ordinarily apply to our work are contract performance (translating documents you submit, issuing certified copies, invoicing), legal obligation (MOJ ledger duties, anti-money-laundering checks where applicable, tax record-keeping), and legitimate interests (network security, fraud prevention, service-quality monitoring, and limited analytics - see Section 13). Where we rely on consent (for example, marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

3. Categories of Data Collected

• Contact information: name, employer/organisation, email address, telephone and WhatsApp numbers, postal address, role.
• Document contents submitted for translation: this is the central category. Source documents may contain special-category data including data revealing legal proceedings, criminal records, court judgments, medical conditions, financial statements, biometric identifiers, photographs, government identification documents (passport, Emirates ID, residence visa), family-status data (marriage/divorce/birth/death certificates), academic records, employment data, and similar personal data of the data subject and of third parties named in those documents.
• Payment records: transaction references, invoice records, and tax records may be retained where applicable. Any card or online-payment provider and handling arrangement is identified at the point of payment.
• Communications: WhatsApp messages, email correspondence, call logs, and in-office intake notes related to your project.
• Technical and cookie data: IP address, browser type, device identifiers, pages visited, referring URL, and similar telemetry collected by the analytics provider described in Section 13.

4. Purpose Limitation - How Each Category Is Used

• Contact information - to quote, confirm, deliver, invoice, follow up on, and provide support for the requested service; to send transactional notifications; and (with consent) to send marketing updates.
• Document contents - to produce the translation, perform quality assurance, attach the MOJ certification stamp, and retain the certified copy in the MOJ-licensed translator's ledger as required by law. Document contents are not used for any purpose other than performing the service and complying with statutory retention.
• Payment data - to process the payment, issue tax invoices, and meet UAE Federal Tax Authority record-keeping obligations.
• Communications - to coordinate the project, evidence instructions, and resolve disputes.
• Technical and cookie data - to keep the site secure and to measure aggregate site usage. We do not sell or share this data with advertising networks.

5. Document Confidentiality and Handling

We handle documents confidentially and can agree assignment-specific confidentiality, retention and transfer arrangements before work begins.

No particular access, encryption, logging, deletion, storage or incident-response control is represented as in place unless confirmed in writing for the assignment. Statutory retention, if applicable to a specific formal written service, is confirmed for the assignment.

6. Subcontractors and Sub-Processors

We engage the following categories of sub-processors:

• Proposed language-service personnel, subject to assignment requirements, availability and client confirmation;
• Payment provider, if card or online payment is offered for the assignment;
• Technology providers where an assignment-specific storage or transfer arrangement is confirmed;
• Communications platforms (WhatsApp Business, email) for client communication.

The named list of current sub-processors, including the legal name of each provider, is available to enterprise clients under NDA on written request. Material changes to the named sub-processor list will be notified to enterprise contract holders in line with the contractually-agreed change-notification period.

7. International Data Transfers

Arkan Legal Translation operates from the United Arab Emirates. If a proposed assignment would involve a provider or transfer outside the UAE, the location and transfer terms are disclosed to the client and agreed before personal data is transferred.

8. Data Subject Rights under UAE PDPL

Subject to the conditions and limitations set out in Articles 13–19 of the PDPL, you have the following rights with respect to your personal data:

• Right of access - to obtain confirmation of whether we process your data and, if so, a copy of that data and information about the processing (Article 13).
• Right to rectification - to have inaccurate data corrected and incomplete data completed (Article 14).
• Right to erasure - to have your data deleted where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other lawful basis, or where the data has been processed unlawfully (Article 15). Erasure may be restricted where retention is required by law, including the MOJ ledger duty and UAE tax record-keeping obligations.
• Right to restriction - to require that processing be restricted in defined circumstances (Article 16).
• Right to portability - to receive a structured, commonly-used and machine-readable copy of data you have provided to us (Article 17).
• Right to object - to object to processing carried out on the basis of our legitimate interests (Article 18).
• Right to withdraw consent - at any time, where processing is based on consent, without affecting the lawfulness of prior processing (Article 19).
• Right to lodge a complaint - with the UAE Data Office in accordance with the PDPL and its executive regulations.

Requests are handled by the designated privacy contact. We aim to respond within the timeframes set out in the PDPL and may need to verify your identity before acting on a request.

9. Retention Schedule

10. Assignment-Specific Security Requirements

We handle documents confidentially and can agree assignment-specific confidentiality, retention and transfer arrangements before work begins.

Ordinary email and WhatsApp are communication channels, not a secure enterprise portal. Clients with specific security requirements should provide those requirements before sending sensitive files. The Security page is a procurement checklist, not a representation that listed controls are currently implemented.

11. Children's Data

Our services are directed at adults (typically legal and corporate clients, individual professionals, and persons handling their own personal documents). We do not knowingly market to children under 18. Where a parent or legal guardian submits a minor's document - for example, a school transcript or birth certificate - that minor's personal data is processed under the same protections as any other data subject's, and rights under the PDPL are exercisable by the parent or legal guardian.

12. Scope of This Notice

This notice applies to personal data submitted through arkancertifiedtranslation.ae. Other service websites publish their own applicable notices.

13. Cookies and Analytics

This site uses two categories of cookies and similar technologies:

• Essential cookies - required for the site to function (session management, security, preference storage). These cannot be switched off.
• Analytics cookies - used to understand aggregate site usage. Analytics is delivered through the Ahrefs analytics tag, loaded via a Partytown web-worker so it does not delay the main thread or read your DOM directly. The tag collects aggregate session data and does not collect document contents.

You can control cookies through your browser settings; blocking analytics cookies will not impair core site functionality.

14. Updates to This Policy

This Policy is versioned by the "Last updated" date at the top. Material changes that affect lawful bases, sub-processor categories, retention arrangements, or data-subject rights will be published on this page and handled under any applicable written enterprise contract.

15. Contact for Data Subject Requests

To exercise any of the rights described in Section 8, or to make any other enquiry about the processing of your personal data, contact us:

• Email (designated privacy contact): info@arkancertifiedtranslation.ae - use subject line "Privacy request" or "Data subject request"
• WhatsApp: +971 50 520 3966
• Postal: Arkan Legal Translation, Office 1-04-106, Riqaa Al Buteen Plaza Building, 35 Al Maktoum Road, Al Muraqqabat, Deira, Dubai, UAE