Privacy & Personal Data Protection Policy

1. Who We Are

Dr. Saed Al Harthi Medical Group is the controller of the personal data collected through this website, C.R. 1010254705, Chamber of Commerce 182950. The complex is located in Al Sahafa, Riyadh, postal code 13321. For privacy inquiries contact info@shmg.care or phone 011 489 7666.

2. Data We Collect

When you submit the contact form on the homepage, we collect only the following data:

• Full name
• Mobile number
• The general inquiry type you select from the list, such as general inquiry, partnership, careers, or complaint
• Any additional details you choose to write in the message field, which may reveal a health-related detail about you if you choose to include one

If the additional details you write include a health-related detail, it is classified as sensitive data and processed under the conditions described in this policy.

3. Legal Basis & Consent

The collection and processing of your data is governed by the Saudi Personal Data Protection Law issued under Royal Decree No. M/19 dated 9/2/1443H, overseen by the Saudi Data & AI Authority (SDAIA). Sensitive data, such as health data, may not be processed without explicit written consent, except in limited cases defined by the law, such as protecting public health. By checking the consent box on the contact form, you provide this explicit consent to process your data for the purpose described in this policy.

4. Purpose of Collection

Your data is used solely to respond to the contact or inquiry you submitted. It is not used for marketing or any other purpose without obtaining your separate consent.

5. Data Sharing

Your data is not shared with any third party, except where required by law, such as an official request from a competent authority or matters related to protecting public health or safety. The contact form is processed entirely on the complex's own servers, and your data is sent directly to the complex's official email address without using any external third-party form-processing service, so your data is not transferred to any server outside the Kingdom.

6. Data Retention

Data is retained only for as long as needed to process and respond to your request, after which it is deleted or anonymized, unless the law requires a longer retention period.

7. Data Security

We are committed to applying appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

8. Your Rights

Under the Personal Data Protection Law, you have the right to:

• Know the legal basis for processing your data and obtain a copy of it
• Request correction of inaccurate data
• Withdraw your consent to data processing at any time
• Request deletion of your data when there is no legal basis to retain it
• File a complaint with the Saudi Data & AI Authority (SDAIA) in case of a violation

9. Updates to This Policy

This policy may be updated from time to time to reflect changes in regulation or in how data is collected. Any update will be published on this page along with its date.