Privacy Policy

Who operates this website

This website introduces the professional practice of Lawyer Abdulhussein Al-Aridhi in Najaf, Iraq. For any privacy question, write to: abdulhussein@alaridhilaw.com.

Information collected by the forms

The website collects personal information only when a visitor types it into one of the two forms:

• Contact form: name, email, phone number (optional), general subject, and message.
• Appointment form: name, contact method and its value (email or phone), general type of matter, preferred day and time of day, and notes (optional).
• A record of consent to this policy and the language of the page the request was sent from.

Why it is collected

Information is used only to respond to the message or appointment request. It is not used for marketing, is not sold, and is not shared with anyone for promotional purposes.

How messages are processed

On submission, software on the website’s server validates the fields and then sends the content of the request by email to the lawyer’s professional mailbox on the alaridhilaw.com domain. The website keeps no copy of the message in a database or file.

Once delivered, the message remains in the professional mailbox and is treated as professional correspondence in accordance with professional rules.

Protection against abuse

To limit spam and repeated submissions, the server temporarily keeps a non-reversible fingerprint derived from the IP address (not the address itself) together with submission times; it is deleted automatically after 24 hours.

A hidden field is used to detect automated software, together with a verification token (CSRF) tied to a strictly necessary cookie.

Cookies

The website uses a single, strictly necessary cookie, created when a page containing a form is opened, to verify that a submission comes from this website’s own page (CSRF protection). It contains no personal data and lasts at most two hours.

If a visitor chooses the dark theme, their browser stores that choice locally (localStorage) for the next visit; it is never sent to the server.

The website uses no analytics, no advertising trackers, and no third-party fonts, maps or embedded media.

Third-party providers

The website relies on two technical service providers only:

• Namecheap: website hosting and email. The hosting server keeps ordinary technical access logs (such as IP address, time of request and page requested) according to the hosting provider’s settings.
• Cloudflare: management of the domain’s DNS records.

Security measures

The website is served over an encrypted connection (HTTPS). Forms are protected by server-side validation, length limits, prevention of email header injection, and rate limiting. Even so, no transmission over the internet is absolutely secure, so we advise against sending highly sensitive information through the forms.

Your rights

You may ask whether correspondence from you is held in the professional mailbox, or ask for it to be deleted, unless a professional or legal obligation requires it to be kept, by writing to abdulhussein@alaridhilaw.com.

Changes to this policy

This policy may be updated when the way the website works changes; the date of the last update appears at the top of the page.