Abeer Medical Group is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. This notice applies to abeermedicalgroup.com and any online services, forms, or features offered through the website, in addition to services provided inside AMG facilities.
Personal Data We Collect
Through the website, we may collect and process:
- Identification Data: Name, National ID/Iqama or passport number, and Medical Record Number (MRN) if you register or request services online.
- Demographic Data: Date of birth, gender, nationality, and preferred language.
- Contact Data: Mobile number, email address, and any details submitted through contact or inquiry forms.
- Appointment & Service Request Data: Details submitted when booking appointments, requesting services, or messaging us online.
- Health Data (Sensitive): Any medical details you choose to share through online forms (e.g., symptoms, preferred specialty).
- Technical & Usage Data: IP address, device/browser type, pages visited, and cookies or similar tracking technologies used to operate and improve the website.
Why We Process Your Personal Data
We process personal data collected through the website only for specific healthcare, operational and legal purposes, including:
- Responding to inquiries and processing appointment or service requests.
- Operating, securing and improving the website and online services.
- Complying with MOH, CHI and other legal or regulatory obligations.
- Protecting patient safety, public health and facility security.
- Marketing communications only where your explicit consent is obtained.
The legal basis for processing may include healthcare provision, legal and regulatory obligations, contractual requirements, public health or vital interests, and explicit consent where required by law. Failure to provide mandatory data may affect our ability to deliver services through the website.
Who We Share Data With
Your data may be disclosed only when necessary to:
- Treating healthcare professionals.
- MOH and competent authorities.
- Insurance providers and TPAs.
- Laboratories, pharmacies and approved service providers.
- IT and website service providers acting on our instructions.
Disclosures are limited to the minimum necessary data and protected by confidentiality obligations.
Data Retention
We retain personal data collected through the website only for as long as necessary to fulfil the purpose for which it was collected and in accordance with applicable Saudi laws, MOH regulations, CHI requirements and AMG's retention policies. Once the applicable retention period expires, personal data is securely destroyed or permanently anonymized where required. Specific retention periods vary depending on the type of record. You may contact the Data Protection Officer for further information.
Data Breach Notification
In the event of a personal data breach affecting information collected through the website, AMG will notify SDAIA within 72 hours of becoming aware of the breach, in accordance with the PDPL Implementing Regulations. Where the breach poses a risk to your rights or personal data, we will inform you directly without undue delay and provide the contact details of the Data Protection Officer.
Your PDPL Rights
You have the right to:
- Be informed about how your personal data is collected, used, shared, retained and the legal basis for processing.
- Access and obtain a copy of your personal data in a clear and readable format.
- Request corrections or updates.
- Request destruction where legally permissible.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with SDAIA.
Requests are handled within the timelines required by law, subject to identity verification.
Contact Details
Abeer Medical GroupJBSA7889, Sharafiyah, Jeddah 22234
+966 92 001 5888
Data Protection Officer (DPO)
dpo@alabeermedicalgroup.com
Thank you for trusting Abeer Medical Group.