Privacy Policy

Introduction

At Al-Dawaa Medical Services Co. (DMSCO), we recognize our clients’ privacy and are committed to protecting their personal data in accordance with the Saudi Personal Data Protection Law, issued by Royal Decree No. (M/19), dated 09/02/1443 AH, and amended by Royal Decree No. (M/148), dated 05/09/1444 AH, and all other relevant regulations.

This Policy outlines our practices regarding the collection, use, and protection of Personal Data.

"Personal Data" means any information that can be used to specifically identify you, or make your identification possible, directly or indirectly. This includes Name, national ID number, addresses, contact numbers, date of birth, gender, still or moving images of the individual, and other data relating to you personally.

Data Collection

We collect Personal Data that you provide to us when you use our online services, visit our Al-Dawaa pharmacies located throughout the KSA, or communicate with us through various channels. Personal Data may include, but is not limited to, your name, contact information, payment details, purchase history, browsing behavior, and health data in a manner that ensures the privacy of data subjects and protects their rights as stipulated in the Law.

Purpose of Data Processing

Your Personal Data is processed for specific purposes, including:

Personalizing client experiences (The client information enables DMSCO to tailor our offerings to meet your individual needs).
Optimizing DMSCO's website (DMSCO continuously strives to enhance its online offerings based on client feedback and data).
Enhancing client service (Client data enables DMSCO to respond more effectively to client inquiries and provide superior support).
Dispatching periodic emails (DMSCO may utilize the provided email address to dispatch information, respond to the customer's inquiries and/or address other requests or questions).
Providing healthcare services.
Offering health insurance programs.
Promoting health awareness and education.
Delivering requested products and services.
Enhancing your customer experience.
Communicating with you regarding your account or transactions.
Conducting market research and analysis.
Sending marketing and promotional offers based on your consent to receive marketing and advertising messages.
Complying with legal obligations and enforcement of our Terms and Conditions.

Please note that data processing is strictly limited to the right to access health data, including medical records, by the fewest possible number of employees or staff, on a need-to-know basis to provide essential health services.

Terms and Conditions

Please refer to our Terms and Conditions section for the full terms of use, disclaimers, and limitations of liability applicable to your use of DMSCO's website.

Consent

We will obtain your consent before processing any Personal Data for purposes that require it under the applicable Personal Data Protection Law. You have the right to withdraw your consent at any time, which may result in the deletion of your account.

By using DMSCO's website, the customer agrees to our Privacy Policy.

Our use of the data you provide is limited to the minimum necessary personal information and is solely for the purposes outlined herein.

Data Sharing and Disclosure

We will not share your Personal Data with any third party except where necessary to provide our services, for legitimate business purposes, to comply with the law, or to protect our rights. When we do share data, we ensure that appropriate safeguards are in place to protect your privacy.

Data Security

We implement technical and organizational measures to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction.

Does DMSCO disclose client information to third parties?

DMSCO undertakes not to sell, trade, or transfer any personal information relating to the customer to any third party. Exceptions include trusted third parties who assist in operating DMSCO's website, managing DMSCO's business, or providing services to the customer, provided that such third parties agree to keep the information confidential. DMSCO may disclose the customer's information where required by law, to enforce its policies, and to protect its rights, the rights of third parties, or DMSCO's property and security.

Processing Health Data

DMSCO is committed to taking the necessary organizational, technical, and administrative measures to safeguard health data from any unauthorized use, misuse, use for purposes other than those for which it was collected, or disclosure, and to take any measures that ensure the privacy of data subjects. In particular, DMSCO will adopt the following Controls and Procedures:

DMSCO adopts and applies the Requirements and Controls issued by the Ministry of Health (MOH), the Saudi Health Council (SHC), the Saudi Central Bank (SAMA), the Saudi Council of Health Insurance (CHI), and other relevant authorities regulating health services and health insurance, which specify the duties and responsibilities of healthcare providers, health insurance companies, health insurance claims management companies, and their contractors who process health data.
DMSCO distributes duties and responsibilities among employees or workers in a manner that prevents overlap of responsibilities and diffusion of accountability, taking into account the need to limit access to data among employees or workers in a way that ensures the highest level of privacy for data subjects.
DMSCO limits the processing of data to the minimum necessary to provide healthcare services, products, or health insurance programs.

Your Rights

You have certain rights in relation to your Personal Data, including:

The right to access your data and obtain a copy thereof.
The right to request the correction of inaccurate data.
The right to request the erasure of your data under certain circumstances.
The right to object to the processing of your data.
The right to data portability.
The right to utilize one or more of the following methods, as per your preference and subject to availability by DMSCO:
- Email
- Text messaging
- National address
- Communication via electronic applications
- Any other systematic communication method designated by DMSCO for this purpose.
The right to opt out of receiving marketing and promotional communications at any time by contacting our customer service center or by clicking the "unsubscribe" link in our emails.
If you are unable to exercise your rights under the Personal Data Protection Law, or if you believe that your privacy has been breached or your Personal Data has been compromised, or if you notice any act in violation of the provisions of the Law, you have the right to submit a complaint through one of the designated channels within DMSCO.

To manage your communication preferences and Personal Data, please visit our Privacy and Communication Preferences Center within your account on our website:

https://www.aldawaa.com/en/profile/privacy-settings

If you wish to submit a request to access, modify, or delete your personal data, you can visit the Data Request Form.

https://www.aldawaa.com/en/privacy-dsr

If you do not have an account, you can manage your communication preferences and Personal Data by sending an email to: info@al-dawaa.com or call us at: 800-244-4444 You can also contact us through direct communication channels in the mobile application.

This application utilizes Apple Pay as a payment method:

This application does not transfer any user data.
It does not collect any information from the user.

Changes to Privacy Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes via SMS.

----------------------------------------------------------------------------------------------------------------

Cookie Consent Policy of DMSCO

Introduction

At DMSCO, we are committed to safeguarding the privacy and security of our users. This Cookie Consent Policy outlines our practices regarding the use of cookies on our website, in compliance with the Saudi Personal Data Protection Law and other applicable regulations.

What is Cookie Consent?

Cookie consent is the permission granted by users of a website to store or retrieve information from their devices, typically in the form of cookies. This information helps us understand user preferences, enhance their experience on the website, and tailor our services accordingly.

Types of Cookies Used

We employ various types of cookies on our website, categorized as follows:

Strictly Necessary Cookies: These are essential for the website to function and cannot be disabled. The Company do not store any personal information.
Advertising Cookies: Used to deliver advertisements aligned with your interests.
Performance Cookies: Assist us in tracking the number of visits and traffic sources to our website, enabling us to measure and improve site performance.
Social Media Cookies: Allow you to share content via social media platforms.
Functionality Cookies: Enable the website to provide additional features and personalize the user experience.

Consent Management

Upon your initial visit to our website, you will be asked to consent to the use of cookies, with the exception of essential cookies that do not require consent. You may modify your preferences at any time via the cookie settings page.

Withdrawal or Modification of Consent

If you wish to withdraw or modify your consent, we will respect your choice and remove any non-essential or non-strictly necessary cookies. You may easily manage your cookie preferences through the communication preference and personal data management tools outlined herein.

Cookie of the Cookie Policy

The cookie of the Cookie Policy is used to store your preferences regarding the use of cookies, including the scope and validity period of consent, and your choices regarding the different categories of cookies.

Complementary to this Cookie Consent Policy, our utilization of cookies necessitates a distinct and comprehensive privacy policy, mandated by DMSCO to ensure transparency and compliance.

At DMSCO, we are committed to safeguarding your privacy while providing a personalized and efficient user experience. For more information about our privacy practices, please visit our Privacy Policy page.

If you have any questions or concerns regarding our Privacy Policy and Cookie Consent Policy, or the manner in which we process your personal data, please do not hesitate to contact us at info@al-dawaa.com

at DMSCO headquarters address:

King Fahad bin Abdulaziz Rd., Eastern Cement Tower

P.O. Box: 2439, Al Khobar 34421

Kingdom of Saudi Arabia