Of records.

1. Who we are

Samaha & Co. ("the practice", "we", "us") is a private financial advisory practice operating in Beirut, Lebanon, led by Anthony Samaha as principal. We can be reached at anthony@samahaco.ltd or on WhatsApp at +961 71 073 321. This privacy notice applies to information we collect through this website (samahaco.ltd), through our intake materials, and in the course of any engagement we accept.

2. What we collect, and why

We collect only what is necessary to consider, accept, and carry out an engagement, and to maintain the records required to do so responsibly.

Contact details — your name and WhatsApp number, voluntarily provided when you request a sitting or when an existing client communicates with us. We use these to contact you, schedule meetings, and send confirmations.

The substance of your matter — the situation you bring to us, your goals, and the information you choose to share with us in writing, in conversation, or via the intake materials we send. We use this to advise you.

Records of the work — the written picture we produce for you, our internal notes, and the analytical materials we develop in the course of an engagement. These are kept so that the work persists beyond a single conversation.

We do not knowingly collect information from any person under the age of 18. We do not collect special categories of personal data (such as health or political affiliation) unless they are directly relevant to the matter you have asked us to advise on, and only with your knowledge.

3. How we collect it

Information reaches us through three channels: (i) this website, when you submit a booking request; (ii) WhatsApp and email, in the course of communication; and (iii) the intake form we send privately after an appointment is confirmed.

The website does not run third-party advertising trackers, behavioural cookies, or social-media pixels. The only measurement we use is our hosting provider's first-party page-view counting (Vercel Web Analytics and Speed Insights). It counts page visits in aggregate and reports anonymised performance metrics; it does not set cookies, does not identify individuals, and does not share data with third parties. Standard server-level access logs may be retained by our hosting provider for security and operational purposes (IP address, timestamp, page requested); these are not used to build a profile of you.

4. How we use it

We use the information you share with us to: respond to enquiries; consider whether we are the right practice for your matter; scope and quote an engagement; advise you; produce the written picture you keep; and maintain the records customarily kept by a professional practice.

We do not use your information for marketing. We do not sell, rent, or trade your information. We do not share your information with banks, brokers, advisers, or any other third party for their commercial purposes.

5. When we share information

Information is shared only in the following narrow circumstances, and only as needed:

With your consent, when a matter touches on legal, tax, notarial, accounting, or specialised structuring questions and you have agreed that we may coordinate with a trusted partner on your behalf.

With service providers we use to operate the practice — for example, our website hosting and email providers. These providers act on our instructions, are bound to confidentiality, and process information only to the extent necessary to provide their service.

Where required by law, by a court of competent jurisdiction, or by a regulator with proper authority. We will resist disclosure where we are able to do so on lawful grounds.

6. Where information is held

Client records are kept on systems we control, with access restricted to the principal. Communications on WhatsApp are subject to WhatsApp's own end-to-end encryption and its own privacy terms; we treat WhatsApp as a communication channel, not as a system of record. Email is treated similarly.

Some of our service providers may process information outside Lebanon. Where that is the case, we use providers with appropriate technical and contractual protections in place.

7. How long we keep it

We keep client records for as long as you remain a client of the practice and for a reasonable period afterwards, consistent with the obligations of a professional practice and any retention requirements under applicable law. Where information is no longer needed, it is removed.

Booking requests that do not become engagements are retained briefly for operational continuity and then removed.

8. Your rights

You may, at any time, ask us what we hold about you, ask us to correct it, ask us to delete it (subject to any record-keeping obligations we are bound by), or withdraw a consent you have previously given. We will respond in writing.

To exercise any of these rights, write to anthony@samahaco.ltd.

9. Security

We apply technical and organisational measures appropriate to the sensitivity of the work, including limited access, secure communication channels, and the discretion expected of a private practice. No system is perfectly secure; we ask that you also use reasonable care in how you share information with us — particularly through unencrypted channels.

10. Cookies

This website does not set advertising or tracking cookies. The only cookies it may set are strictly functional — for example, those required for authenticated areas of the client portal to remember that a session is in progress.

11. Changes to this notice

We will update this notice from time to time. The "last updated" date above will reflect any change. Material changes will be communicated to active clients on WhatsApp.

12. Contact

Questions, requests, or complaints in respect of this notice can be sent to anthony@samahaco.ltd.

This notice will be finalised with counsel before public launch and reviewed periodically thereafter.