Privacy Policy

Integrated Medical Care Complex – DIGEST ("we", "the Complex") is committed to protecting your personal data in accordance with the Saudi Arabia Personal Data Protection Law (PDPL) and its executive regulations. This policy explains how we collect, use, and protect your data when you visit imcc.med.sa or use our services.

Data we collect

• Identifiers: name, national ID or iqama number, date of birth, gender.
• Contact data: mobile, email, address.
• Health data: medical history, lab and imaging results, treatment plans, prescribed medications.
• Booking data: appointment dates, doctor name, visit type.
• Browsing data: IP address, browser and device type, pages visited, session duration (via privacy-friendly analytics).

How we use your data

• To provide medical care and clinical management.
• To schedule appointments and follow up on visits and procedures.
• To contact you (call, WhatsApp, or email) about appointments and results.
• To improve site performance via aggregate analytics.
• To comply with regulatory obligations (Ministry of Health, Saudi Health Council).
• To bill and process insurance claims.

Data sharing

We do not sell your personal data. We share it only:

• With doctors and clinical staff caring for you within the Complex.
• With health insurance companies when submitting a claim with your consent.
• With Athir (athir.net) for booking processing.
• With technical service providers (e.g., Vercel, Google Analytics) under data-protection agreements.
• When required by Saudi authorities pursuant to applicable law.

Your rights

Under Saudi PDPL you have the right to:

• Access your personal data and obtain a copy.
• Request correction of inaccurate data.
• Request deletion of your data where the law permits.
• Withdraw consent to processing at any time.
• File a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

Data retention

We retain medical records for the period required by Saudi regulations (no less than 10 years after your last visit) for continuity of care and regulatory compliance. Non-medical data is deleted once the purpose for collection has expired.

Security

We apply advanced technical and administrative safeguards: TLS encryption in transit and at rest, strict staff access controls, and regular security reviews.

Cookies

We use essential cookies for site operation and analytics cookies for performance measurement. You can disable cookies in your browser settings without significantly affecting site functionality.

Contact

For privacy questions or to exercise your rights, contact our Data Protection Officer:
Email: care@imcc.med.sa
Phone: +966 920012758
Address: 2765 Khalid Ibn Al Walid St, Riyadh, Kingdom of Saudi Arabia

We may update this policy from time to time. Updates will be posted on this page with the revision date.