Privacy policy — review draft
An initial structure for review. This is not a final policy approved for publication or delivery of care.
Saudi entity details and operating policies must be completed before public launch.
Data at the contact step
The current form asks for a name and mobile number to begin a care-request conversation. It does not ask for medical reports or sensitive health details at this stage.
The request tool
The website embeds a Monjez form to receive requests. Before public launch, processors, storage locations, any data transfers, retention periods and deletion procedures must be documented.
Data-subject rights
The final policy must explain how to request information, access, a copy, correction and destruction under applicable rules, with a clear channel for requests.
Decisions awaiting approval
The controller’s legal name, privacy contact, lawful basis, retention periods, processors, processing locations, and cookie and analytics settings. This draft is not a statement of completed compliance.