Last Updated: April 16, 2025
This Privacy Policy applies to the personal data (the "Data") collected from users of the website https://shiftclinics.com and any affiliated digital platforms or services (collectively the "Sites"), owned and operated by Shift Clinics, a healthcare company registered in the Kingdom of Saudi Arabia ("Shift Clinics", "we", "us", or "our"). This policy outlines how we collect, use, store, disclose, and protect your personal data. By using our Sites or services, you agree to the terms of this Privacy Policy.
1. Jurisdiction and Compliance: Our Sites and services are intended for individuals located in the Kingdom of Saudi Arabia (KSA). We comply with all applicable local data protection laws, including the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
2. What We Collect: We may collect and process various types of data from you, including but not limited to:
a. Identifiable Information: Name, gender, date of birth; National ID/Iqama number or passport details; address, phone number, email; marital status, family members or dependents; employment details (job title, employer, etc.).
b. Health and Medical Information (Sensitive Personal Information): Medical history, diagnoses, prescriptions, lab results; height, weight, blood pressure, and other biometric data; disabilities or chronic conditions; data from medical tests or physical exams; details relating to body or substance donations or samples; insurance data, if relevant to billing or treatment.
c. Technical and Usage Data: IP address, browser type, operating system; device information and interaction with the Sites; cookies and usage tracking (see Section 7).
d. Financial Data: Payment method details (bank, card, receipts, etc.); transactional data for services or products.
e. Voluntary Information: Feedback, reviews, or responses in forms or surveys; communications via support chat, email, or other channels.
3. Why We Use Your Data: We use your data for the following purposes: to deliver healthcare services and manage your medical care; to communicate with you (e.g., appointments, prescriptions, support); to process billing and insurance claims; to improve our digital experience and service delivery; to contact you for follow‑up if an online session is interrupted; to analyze aggregated usage patterns for improving the Site; to comply with legal or regulatory obligations; and to contact you with your explicit consent for services you may find useful. We will not use your data for any purpose that is inconsistent with this Privacy Policy or beyond what is legally permitted or contractually agreed.
4. Cookies and Site Tracking: We use cookies and other tracking tools to enhance your experience on our Sites. You may manage cookie preferences through your browser settings. Essential cookies (such as those used for secure logins) are necessary for the Sites to function and cannot be disabled.
5. Data Sharing and Disclosure: We do not sell your data. We only share your personal data, including sensitive health data, when necessary to deliver healthcare services, support business operations, or comply with legal requirements. Your data may be shared with licensed medical professionals within Shift Clinics involved in your care; accredited laboratories, diagnostic centers, and pharmacies supporting your treatment; insurance providers to process and validate claims; regulatory authorities or legal entities, only when required by law; emergency services or public health bodies, where needed to protect you or the public; technology providers, cloud services, and analytics partners, who support our platforms and data systems (bound by strict confidentiality); and internal teams (e.g., billing, IT, administrative support) responsible for secure service delivery. All third parties are required to use your data solely for the agreed purpose and maintain robust security and confidentiality.
6. Data Transfers Outside KSA: Your data may be stored or processed in secure servers located outside KSA. If this happens, it will be in compliance with the PDPL and its transfer regulations. We will implement contractual safeguards, such as Standard Contractual Clauses approved by SDAIA, to ensure data remains protected.
7. Your Rights: Subject to applicable law, you have the right to access and obtain a copy of your data; request correction or update of your personal information; withdraw your consent (where applicable); request deletion of data under certain circumstances; and object to processing or request data portability. To exercise your rights, please contact us (see Section 10). We may need to verify your identity and will respond within the legally permitted timeframes.
8. Data Retention: We retain personal and health data only as long as necessary to deliver services and support; comply with medical retention standards in KSA; and respond to legal, regulatory, or operational requirements. When your data is no longer needed, we ensure it is securely deleted or anonymized.
9. Protecting Your Data: We implement robust security controls to protect your data from unauthorized access, loss, or misuse. These include data encryption; controlled access to medical records; regular security audits; secure hosting and access policies; and restricting access to authorized personnel under strict confidentiality agreements.
10. Contact Us: For any queries or to exercise your rights under this Privacy Policy, contact: 📧 Email: info@shiftclinics.com 📍 Mail: Ibrahim Aljaffali Street Al Andalus, Jeddah 23326, Kingdom of Saudi Arabia. If you are unsatisfied with how we process your data, you have the right to raise a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) at https://sdaia.gov.sa.
11. Updates to This Policy: We may update this Privacy Policy from time to time. All changes will be posted on this page with a revised “Last Updated” date. You are encouraged to review it regularly.