Privacy Policy

At Mohamed Aldossary Hospital, we are committed to protecting
your privacy and ensuring that your personal and health
information is handled with the highest standards of
confidentiality and security.

This Privacy Policy explains how we collect, use, disclose,
and protect your personal and health information when you use
our website, mobile applications, and other electronic
services and platforms provided by the hospital.

This policy applies to all electronic services provided by
Mohamed Aldossary Hospital, including the website, smart
device applications, and any other electronic platforms
affiliated with the hospital, unless otherwise stated.

By using any of our electronic services, you acknowledge that
you have reviewed this policy and agree to the collection, use,
and processing of your personal information as described herein.

We may collect or process the necessary personal and health
data to provide our electronic services, including:

• Full name.
• National ID number, Border Number, or Medical Record Number.
• Mobile number.
• Email address (if available).
• Medical appointment data.
• Medical file records.
• Laboratory results.
• Radiology reports.
• Prescriptions and dispensed medications.
• Health insurance data when needed.
• Billing and medical services data.
• Technical information, such as device type, operating
  system version, IP address, and crash logs, to improve
  the quality and performance of electronic services.

Some of our electronic services may require user identity
verification before granting access to their personal or
health data, using appropriate verification methods depending
on the service type.

These methods may include the National ID number, Border
Number, or Medical Record Number, in addition to other
verification means such as a One-Time Password (OTP)
when necessary.

The information collected is used for the following purposes:

• User identity verification.
• Providing electronic health services.
• Managing appointments and medical services.
• Displaying the user’s medical information.
• Following up on health insurance requests.
• Displaying bills and related services.
• Sending notifications and reminders related to health services.
• Improving and developing the quality of electronic services.
• Complying with regulations, instructions, and legal obligations.

Mohamed Aldossary Hospital does not sell or rent personal or
health data to any party for commercial purposes.

Data may be shared in the following cases:

• With healthcare providers involved in delivering the service.
• With insurance companies or relevant parties when
  necessary to provide the service.
• When required by legal obligation or an order from a
  competent authority.
• With technical service providers who offer operational
  or hosting services for the systems, provided they
  commit to maintaining the confidentiality of the information.

The hospital is committed to applying appropriate security,
administrative, and technical measures to protect personal
and health data, including:

• Encrypting data during transmission.
• Protecting data during storage.
• Applying access permissions based on job functions.
• Monitoring systems and detecting unauthorized access attempts.
• Periodically updating security systems.
• Training employees on information confidentiality and data security.

Personal and health data are retained according to the periods
specified by applicable laws and regulations in the Kingdom
of Saudi Arabia, or as long as necessary to provide health
services and fulfill legal obligations.

The hospital’s smart device applications may require certain
device permissions necessary to provide services, such as:

• Internet connectivity.
• Sending notifications.
• File storage (saving or uploading) when this feature
  is available.

None of these permissions are used except for the specific
purpose for which they were granted, and the user can control
them through their device settings.

We may automatically collect certain technical information
when using our electronic services, such as:

• Device type.
• Operating system version.
• IP address.
• Time of service use.
• Crash and error logs.

This information is used to improve performance, service
quality, and address technical issues.

Some of our electronic services may be used by parents or
legal guardians of patients to manage accounts for their
children or dependents, in accordance with applicable
regulations and procedures and after identity verification.

Data is processed within the hospital’s approved systems.
Personal data is not transferred outside the Kingdom of
Saudi Arabia unless legally permitted or if it is necessary
to provide the service or fulfill a legal obligation.

The user has the right, in accordance with applicable laws
and regulations, to:

• Access their personal data.
• Request correction or update of inaccurate data.
• Request deletion of their account or personal data by
  contacting the hospital via email at
  info@mdh.com.sa,
  while noting that data or medical records required to
  be retained by health regulations or laws will be maintained.
• Object to certain data processing operations according
  to the regulations.
• Withdraw consent in cases where processing is based
  on the user’s consent.

Mohamed Aldossary Hospital reserves the right to amend or
update this Privacy Policy at any time. The updated version
will be posted on this page with the date of the latest revision.

For any inquiries regarding the Privacy Policy or personal
data protection, please contact us at: