Privacy Notice for Sehati for Information Technology Services
Effective Date: February 24, 2025
1. Introduction and Purpose: Sehati for Information Technology Services (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of our users. This Privacy Notice outlines how we collect, use, disclose, and protect your personal data in compliance with the Saudi Personal Data Protection Law (“PDPL”).
2. Scope of the Privacy Notice: This Privacy Notice applies to all users of our services, including visitors to our website, customers, partners, and any other individuals whose personal data we process.
3. Data Collection and Usage: We may collect the following types of personal data:
• Identification details (e.g., name, national ID, or passport number)
• Contact information (e.g., phone number, email address, physical address)
• Health information as necessary for healthcare services
• Usage data (e.g., browsing history, interactions with our platform)
• Technical data (e.g., IP address, device information) We collect and use this data for the following purposes:
• To provide and improve our health IT services
• To communicate with users and provide customer support
• To comply with legal and regulatory requirements
• To enhance security and prevent fraud
• To analyze usage and improve user experience
4. Legal Basis for Processing: We process your personal data based on the following legal grounds: • Your explicit consent
• To perform a contract to which you are a party
• To comply with legal obligations
• To protect vital interests
• For legitimate interests pursued by Sehati for Information Technology Services, unless overridden by your rights
5. Data Sharing and Disclosure:
We do not sell your personal data. However, we may share your data with: • Authorized third-party service providers who assist us in delivering our services • Government authorities or regulatory bodies when required by law • Partners involved in the healthcare ecosystem to provide integrated services
6. Data Retention and Security:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or disclosure.
7. User Rights:
Under the PDPL, you have the following rights:
• Right to access your personal data
• Right to correct inaccurate or incomplete data
• Right to request deletion of personal data
• Right to object to the processing of your personal data
• Right to withdraw consent at any time
8. International Data Transfers:
If we transfer your personal data outside Saudi Arabia, we ensure adequate safeguards are in place in compliance with PDPL requirements.
9. Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance user experience. You can manage cookie preferences through your browser settings.
10. Changes to the Privacy Notice: We may update this Privacy Notice from time to time. Any changes will be communicated through our website or other appropriate channels.
11. Contact Information:
If you have any questions or concerns about this Privacy Notice or our data practices, please contact us at:
• Email: privacy@sehati.sa
• Address: Sehati for Information Technology Services, Riyadh, Saudi Arabia
By using our services, you acknowledge that you have read and understood this Privacy Notice.