First: Introduction
Health Holding Company is a state-owned national company specializing in providing comprehensive and integrated healthcare through health clusters across all regions of the Kingdom. This is achieved by developing the healthcare sector, improving the quality and efficiency of care, and implementing an innovative and sustainable care model that supports the goals of Saudi Vision 2030.
Health Holding is committed to respecting the privacy of users’ personal data or sensitive personal data that is shared with Health Holding, in accordance with the Personal Data Protection Law, its regulations, and applicable data protection standards in the Kingdom of Saudi Arabia. Health Holding will only use the user’s personal data to deliver the services requested by Health Holding.
This notice applies to all users and visitors (hereinafter referred to as “User” or “Personal Data Subject”) who have access to or use the Health Holding website.
Second: Contact Information
You can reach us through the following channels:
Email: info@health.sa
Address: Health Holding Company, Al Malqa District, King Fahd Road
Third: Privacy Policy Updates
Health Holding is keen to regularly update this policy by publishing a new version on the website. The updated policy will be posted on this page without prior notice. It is worth noting that the latest update to this policy was on 2025/09/25.
Fourth: Methods of Collecting Personal Data and Purpose of Collection
Health Holding collects personal data either directly or indirectly. This can occur through the user’s interaction with the Health Holding website, other social media platforms, phone calls, emails, or correspondence with Health Holding. The data is used for several purposes in accordance with relevant laws and regulations, including the following:
Data that the user may provide to Health Holding
Health Holding may collect personal data directly from the user as part of providing services on the website. This may include email address, mobile phone number, job title, first name, last name, CV, date of birth, nationality, or any other personal data that the user provides to Health Holding through the website.Data collected automatically
Health Holding may automatically collect some personal data sent by the user’s browser whenever they visit the website, such as data gathered through cookies or other tracking technologies.
Fifth: Use of Personal Data
Health Holding may use the personal data collected from the user, either directly or indirectly, for the purpose of enhancing the user experience on the company’s website and services, such as:
Creating a user account - if necessary - where the user can log in using a username and password and access various services provided by the site.
Using data provided by the user during the account registration process, such as their CV, the jobs they applied for, and messages sent or received through this site or from third parties.
Responding to inquiries submitted by the user, which may require their personal data to be visible to the support team at Health Holding.
Conducting any quality checks to improve the services provided by Health Holding.
Improving the site’s performance, software security, systems, network, and authenticating the user’s identity during login.
Sixth: Processing of Personal Data
Processing of data is limited to achieving the purpose for which it was collected.
However, Health Holding may process personal data for additional purposes beyond those for which it was originally collected, when necessary, in accordance with the provisions of the Personal Data Protection Law and its implementing regulations.
Seventh: Disclosure of Personal Data
Health Holding will not share the user’s personal data with any third party for marketing purposes. However, Health Holding reserves the right to disclose the user’s personal data in the following cases:
When the user consents to the disclosure of their personal data.
When the personal data is collected from a publicly available source.
Upon request from a public authority, provided that the request is for purposes of public interest, security, enforcement of another law, or to meet judicial requirements in accordance with the provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia.
When disclosure is necessary to protect public health or safety, or to protect the life or health of a specific individual or individuals.
When disclosure is made in a manner that does not reveal the user’s personal identity or that of any other individual.
When disclosure is necessary to achieve the legitimate interests of Health Holding, provided that this does not infringe upon the user’s rights or conflict with their interests.
Data collected may be disclosed to third parties for the purpose of providing services to Health Holding, provided that these parties adhere to the necessary security controls and related policies.
Eighth: Legal Bases for Processing Personal Data
The following are the legal bases for processing personal data. Any processing activity that meets one of the following conditions is considered lawful according to the laws and regulations in force within the Kingdom of Saudi Arabia:
· The user’s consent to the processing of their personal data for a specific purpose. Health Holding will inform the user of this, but may process the user’s personal data without obtaining consent in the following cases:
- When the processing serves a specific interest of the user and it is impossible or difficult to contact them.
- When the processing is according to a preliminary contractual agreement with the user, or in accordance with applicable laws.
- When the processing is for judicial or security purposes by a public authority.
- When the personal data is publicly available or collected from a public source.
· Pursuing a legitimate interest of Health Holding or the user.
· Serving the public interest or fulfilling an official request from an authority according to its roles.
· Executing an agreement to which the user is a party.
Ninth: Storage, Retention Period, and Disposal of Personal Data
Health Holding processes and store your personal data securely. Personal data is retained for the duration of its validity, and once the required time period expires, your data will be deleted by destruction, except in cases where we are legally obligated to retain your data or where deletion would conflict or potentially conflict with relevant laws, regulations, procedures, and requirements.
Tenth: Rights of Data Subjects
Health Holding makes every effort to provide high-quality services to all data subjects, ensuring their rights within the limits set by the Personal Data Protection Law and other relevant regulations, as follows:
· Right to be Informed: Data subjects have the right to be informed when their personal data is collected and used. This includes understanding the reasons and methods of data collection, the purposes of processing, retention periods, with whom the data will be shared, the security measures taken by Health Holding to protect the data, and the individual rights of the user.
· Right to Access: Data subjects have the right to access their personal data held by Health Holding in a clear and readable format. They also have the right to obtain a copy of their data. Health Holding reserves the right to refuse the request in cases specified by the law.
· Right to Rectification: Data subjects have the right to request correction, completion, or modification of their personal data.
· Right to Erasure (Destruction): Data subjects have the right to request the destruction of their personal data in the following cases:
1. If the data subject believes that Health Holding no longer needs the data for the purposes for which it was collected.
2. If the data subject correctly objects to Health Holding’s use of their personal data.
3. If Health Holding’s use of the data is unlawful or breaches its legal obligations.
4. If the data subject withdraws consent for the collection and processing of their personal data, and consent was the sole legal basis for processing.
· Right to Withdraw Consent: Data subjects have the right to withdraw their consent to the collection and processing of their personal data unless otherwise required by legal or judicial obligations.
· Right to File a Complaint: Data subjects have the right to file a complaint with the competent authorities if they feel their rights have been violated.
To exercise their rights, data subjects can follow these steps:
1. Download and complete the Data Subject Request Form (Contact Us).
2. Send the completed form to the email: (info@health.sa)
Eleventh: Mechanism for Filing Complaints and Objections
You can contact the Data Protection Officer at Health Holding via email at [info@health.sa]
to address any questions or issues you may have regarding this Privacy Notice.
If you are not satisfied with the handling of your complaint or do not receive a response within 30 business days, you may file a complaint with the competent authority, the Saudi Data and Artificial Intelligence Authority (SDAIA), according to the procedures and channels available through the authority, at the following addresses:
Saudi Data and Artificial Intelligence Authority (sdaia.gov.sa)
National Data Governance Platform (dgp.sdaia.gov.sa)
Twelfth: Personal Data Security
All personal data shared by the user with Health Holding is handled according to the highest security standards. We store data in secure environments under strict controls. To protect this data during storage and transmission, we rely on multiple measures including encryption, access control mechanisms, periodic security assessments, in addition to implementing appropriate technical and organizational procedures. Employees are continuously trained on data protection practices, and security measures are regularly reviewed to keep pace with developments and relevant regulations. However, it is impossible to guarantee complete prevention of all risks, and Health Holding is not responsible for any unauthorized access or incidents beyond its control.
Thirteenth: Cookies
Our website uses cookies to identify you so that we can provide you with exceptional experience when visiting our site and to enhance its features and services.
Cookies are text files placed on the user’s computer to collect information about internet history and visitor behavior, remembering information about the visit. This makes your future visits easier and more user-friendly. These cookies include: Strictly necessary cookies for the operation of the website, functional cookies to provide additional features and personalize your experience, performance cookies to measure and improve website usage, and customization cookies to display content tailored to your interests.