1. Scope
This policy governs how we collect, use, store, and share your personal and medical data when you use our website or services.
2. Data we collect
- Identification: name, mobile, email.
- Booking data: date, time, department, service, notes.
- Medical data: collected during consultation/treatment in encrypted records.
- Technical: browser, IP, site navigation (for improvement).
3. Purposes
- Provide medical care and manage bookings.
- Confirm appointments and send instructions.
- Improve services and patient experience.
- Comply with legal and regulatory requirements.
4. Safeguards
We apply strict technical and administrative measures including encryption, access controls, and staff training. Medical records are confidential and accessed only by relevant clinical staff.
5. Sharing
We do not sell your data. We may share it only with: insurers (with your consent), technical service providers under confidentiality agreements, or official authorities when legally required.
6. Your rights
- Request a copy of your data.
- Correct or update your data.
- Request deletion (within regulatory limits).
- Withdraw communication consent at any time.
7. Cookies
We use essential technical cookies and, with your consent, analytics cookies. You can control these from your browser.
8. Updates
We may update this policy periodically. Material changes will be announced on the site.
9. Contact
For any privacy enquiry: privacy@lumiereclinics.sa