Effective Date: December 14, 2024

This Privacy Policy outlines the practices of Faisal Basit Sheikh & Cō. LLP (“FBS&Co.”, “we”, “us”, or “our”) concerning the collection, use, disclosure, and protection of personal data in compliance with applicable laws, including the General Data Protection Regulation (GDPR), Data Protection Act, and other global privacy laws.

By accessing our website, https://fbsandco.com (“Website”), or engaging our legal services (“Services“), you agree to the terms of this Privacy Policy.

1. Who We Are

FBS&Co. is a law firm established under the laws of Pakistan, providing comprehensive legal services to domestic and international clients. For additional information about our firm, refer to the “About Us” section of our Website.

2. Scope of this Privacy Policy

This Privacy Policy applies to all personal data collected through:

• The Website.

• Direct communications with clients, prospective clients, or third parties.

• Engagements for the provision of legal Services.

3. Categories of Personal Data We Collect

A. Data Provided Voluntarily

We may collect personal data directly from you, such as:

• Identification Data: Full name, date of birth, and national identification numbers (e.g., CNIC, passport details).

• Contact Details: Email address, phone number, and postal address.

• Legal Information: Case details, contracts, and other documents necessary for the provision of legal services.

• Preferences: Data you voluntarily share regarding service preferences or participation in surveys.

• Special Categories of Data: Sensitive personal data where required by law or consented to by you, e.g., health or financial information in specific legal matters.

B. Data Collected Automatically

When accessing our Website, we collect certain data automatically, including:

• Technical Data: IP addresses, browser types, operating systems, and geographic location.

• Usage Data: Pages viewed, links clicked, and other interactions.

• Cookies: Small data files stored on your device to enhance user experience. Details are available in our Cookie Policy.

C. Data Collected During Service Engagement

We collect additional personal data during client engagements, such as:

• Financial details for billing purposes.

• Case-specific details, including third-party information required for legal proceedings.

• Identification and due diligence information for anti-money laundering (AML) and know-your-customer (KYC) compliance.

4. Purpose and Legal Basis for Processing

We process personal data for the following purposes and on the corresponding legal bases:

• Provision of Legal Services: To perform contractual obligations, including representing clients in courts, preparing legal documents, and providing advisory services.

• Regulatory Compliance: To fulfill legal obligations, including AML, KYC, tax reporting, and court-mandated disclosures.

• Legitimate Interests: To enhance our services, conduct internal audits, prevent fraud, and manage client relationships.

• Consent: Where explicit consent is required, such as for marketing or sharing information with third parties.

5. Data Sharing and Disclosure

We may disclose your personal data to:

• Legal and Regulatory Authorities: Courts, law enforcement agencies, and regulatory bodies to comply with legal obligations.

• Service Providers: Third-party vendors assisting with IT support, secure data storage, and analytics, subject to strict confidentiality agreements.

• Professional Advisers: Auditors, consultants, or other legal professionals where disclosure is necessary for client representation.

• Consent-Based Disclosures: Any party authorized by you.

In the event of a merger, acquisition, or business restructuring, personal data may be shared with relevant parties, provided adequate safeguards are in place.

6. International Data Transfers

FBS&Co. does not currently transfer personal data outside Pakistan. If international transfers are required in the future, we will ensure compliance with applicable cross-border data transfer frameworks, including the use of Standard Contractual Clauses (SCCs) or equivalent mechanisms.

7. Data Retention

We retain personal data for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy.

• Comply with legal, tax, and regulatory requirements.

• Preserve evidence for potential legal claims.

Upon expiry of the retention period, data will be securely deleted or anonymized.

8. Security of Your Personal Data

We employ robust technical and organizational measures, including encryption, secure servers, and access controls, to protect personal data against unauthorized access, alteration, or destruction.

9. Your Rights

Depending on applicable laws, you may have the following rights concerning your personal data:

• Access: Request a copy of the personal data we hold about you.

• Correction: Rectify inaccurate or incomplete data.

• Erasure: Request deletion of your data where it is no longer required.

• Restriction: Limit the processing of your data in specific circumstances.

• Objection: Object to data processing based on legitimate interests.

• Data Portability: Receive a copy of your data in a machine-readable format.

• Withdraw Consent: Revoke consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us at info@fbsandco.com. We will respond in accordance with applicable laws.

10. Updates to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. The “Effective Date” reflects the most recent update. Material changes will be communicated via the Website or other appropriate channels.

11. Contact Information

For questions or concerns regarding this Privacy Policy or data processing activities, contact us:

• Email: info@fbsandco.com

For further details, please visit the Contact Us page on our Website.