Privacy Policy

01

About This Policy

This Privacy Policy explains how Alinaya Alrafia Medical Company ("we", "us", or "the Company") collects, uses, stores, and protects personal data obtained through our website alinayamedical.com and any related communications.

We are committed to protecting your privacy in accordance with the Saudi Personal Data Protection Law (PDPL), issued by Royal Decree M/19 dated 9/2/1443H, and its implementing regulations.

02

Data We Collect

We may collect the following categories of personal data when you interact with our website or contact us directly:

• Contact information you submit voluntarily — such as your name, email address, and phone number via our contact form or email.
• Technical data automatically collected when you visit our website — including IP address, browser type and version, device type, operating system, pages viewed, time and date of visit, and referring URL.
• Communication data — the content of any messages, emails, or inquiries you send us.
• Language preference — we store your selected language (English or Arabic) locally in your browser to improve your experience. This data does not leave your device.

We do not collect sensitive personal data (health records, biometric data, national ID numbers, financial account details) through this website.

03

How We Use Your Data

We use collected data solely for the following purposes:

• To respond to your inquiries and communications in a timely and professional manner.
• To improve our website's performance, usability, and content based on aggregated usage patterns.
• To fulfil legal and regulatory obligations we are subject to as a company registered in Saudi Arabia.
• To send you information about our services or updates, only if you have explicitly requested this or consented to receiving such communications.

We do not use your personal data for automated decision-making or profiling.

04

Legal Basis for Processing

Under the Saudi Personal Data Protection Law (PDPL), we process your personal data on the following legal bases:

• Consent — when you voluntarily submit a contact form or email inquiry, you consent to us processing those contact details to respond to you.
• Legitimate interest — we process technical/analytics data to operate, secure, and improve our website. This does not override your privacy rights.
• Legal obligation — we may retain or disclose data where required by applicable Saudi law, court order, or regulatory authority.

05

Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers — trusted third-party companies that assist us in operating our website or conducting our business (e.g., website hosting, email services), subject to strict confidentiality obligations.
• Legal authorities — when we are legally required to disclose information to governmental or regulatory bodies under Saudi law.
• Group companies — within the Alinaya Alrafia Medical Company group, where necessary for operational or administrative purposes, under the same privacy standards.

Any third party receiving your data is required to process it only for the specified purpose and in compliance with applicable data protection laws.

06

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Contact inquiries — retained for up to 2 years from the date of last correspondence, then securely deleted.
• Technical/analytics data — typically retained in aggregated, anonymised form for up to 13 months.
• Legal compliance records — retained for the period required by applicable Saudi regulations.

When data is no longer needed, we will destroy or anonymise it in a manner that prevents recovery.

07

Your Rights

Under the Saudi PDPL, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at the address in Section 12:

We will respond to all valid requests within 30 days of receipt. In complex cases, we may extend this by a further 30 days, with notification.

08

Cookies & Tracking

Our website uses the following types of storage:

• localStorage (language preference) — we store your language selection ('en' or 'ar') in your browser's local storage. This data stays on your device and is not transmitted to our servers.
• Google Fonts — our website loads Raleway and Cairo typefaces from Google Fonts CDN. Google may collect limited technical data in accordance with their Privacy Policy.

We do not currently use advertising cookies, third-party tracking pixels, or analytics platforms that track individual users. If this changes, this policy will be updated and you will be notified through a visible banner on the website.

09

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:

• Secure HTTPS connection (TLS encryption) for all website traffic.
• Access controls limiting data access to authorised personnel only.
• Regular review of security practices and data handling procedures.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

10

Children's Privacy

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a minor, we will promptly delete such data.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

11

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational procedures. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

12

Contact Us

If you have questions, concerns, or wish to exercise any of your rights under this Privacy Policy, please contact us: