Last Updated: August 26, 2025
This Privacy Policy applies to the personal data (“Data”) collected from users of the website https://shiftclinics.com , affiliated digital platforms, and online forms, including lead generation campaigns run on social media platforms such as LinkedIn, Facebook, Instagram, or Google (collectively, the “Sites”). Shift Clinics, a healthcare company registered in the Kingdom of Saudi Arabia (“Shift Clinics,” “we,” “us,” or “our”), is committed to protecting your privacy.
This policy outlines how we collect, use, store, disclose, and protect your personal data. By using our Sites, services, or submitting a lead form, you agree to the terms of this Privacy Policy.
1. Jurisdiction and Compliance: Our Sites and services are intended for individuals located in the Kingdom of Saudi Arabia (KSA). We comply with all applicable local data protection laws, including the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
2. What We Collect: We may collect and process the following categories of data:
a. Identifiable Information: Name, gender, date of birth; National ID/Iqama number or passport details; address, phone number, email; marital status; employment details.
b. Health and Medical Information (Sensitive Personal Information): Medical history, diagnoses, prescriptions, test results, biometric data, chronic conditions, insurance data if relevant to billing or treatment.
c. Technical and Usage Data: IP address, browser type, device identifiers, cookies, and interaction with the Sites.
d. Financial Data: Payment methods, bank or card details, and transaction history.
e. Voluntary Information: Feedback, reviews, or responses in forms or surveys; communications via support chat, email, or other channels.
f. Lead Form Data (Social Media and Advertising Platforms): If you submit information via a LinkedIn Lead Gen Form, Meta (Facebook/Instagram) form, Google Ads form, or other advertising platform, we may collect: Name, Email address, Phone number, Job title, company, or other business details (if provided), Any additional information you provide.
3. Why We Use Your Data: We use your data for the following purposes:
- To deliver healthcare services and manage your care.
- To communicate with you about appointments, treatments, or inquiries.
- To process billing, payments, and insurance claims.
- To improve our Sites, services, and client experience.
- To respond to social media or advertising lead form submissions (e.g., booking consultations, providing information, or sharing offers).
- To contact you with your explicit consent for updates, resources, or services you may find useful.
- To comply with legal or regulatory obligations.
We will not use your data for any purpose inconsistent with this Privacy Policy or beyond what is legally permitted.
4. Cookies and Site Tracking: We use cookies and similar technologies to improve your experience on our Sites. Essential cookies (e.g., secure logins) cannot be disabled. You may manage other cookies via your browser settings.
5. Data Sharing and Disclosure: We do not sell your data. We may share your personal data only in the following cases:
- With licensed medical professionals involved in your care.
- With laboratories, diagnostic centers, and pharmacies supporting your treatment.
- With insurers to process and validate claims.
- With regulatory or legal authorities, as required by law.
- With emergency services or public health authorities, when necessary for safety.
- With secure technology and service providers supporting our platforms and campaigns (e.g., CRM, email systems, analytics), bound by confidentiality.
6. Data Transfers Outside KSA: Your data may be stored on secure servers outside KSA. In such cases, we comply with PDPL transfer regulations and implement contractual safeguards to ensure protection.
7. Your Rights: Subject to applicable law, you have the right to:
- Access and obtain a copy of your data.
- Request correction, update, or deletion of your data.
- Withdraw consent (where applicable).
- Object to processing or request data portability.
To exercise these rights, contact us at info@shiftclinics.com.
8. Data Retention: We retain data only as long as necessary to provide services, comply with medical record-keeping requirements, and fulfill legal obligations. Lead form data collected from social media platforms will be retained for a maximum of 12 months, unless ongoing engagement requires longer retention.
9. Protecting Your Data: We maintain strict security measures, including encryption, access controls, secure hosting, and regular audits, to safeguard your personal data.
10. Contact Us: If you have questions about this Privacy Policy or wish to exercise your rights, you can contact us:
📧 Email: info@shiftclinics.com
📍 Mail: Ibrahim Aljaffali Street, Al Andalus, Jeddah 23326, Kingdom of Saudi Arabia.
If you are unsatisfied with our response, you may file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) at https://sdaia.gov.sa.
11. Updates to This Policy: We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised 'Last Updated' date. You are encouraged to review it regularly.