Unified number 920 002 264 ER 24/7 · Abu Arish · Ahad Al Masarihah
Privacy
Al Hakami Medical Group مجموعة الحكمي الطبية
عربي Patient Portal Book now
الرئيسية » Privacy Policy
Privacy & data protection

Privacy Policy

How we collect, use and protect your data across Alhakami Medical Group website and apps.

Last updated: September 29, 2026

This policy explains how Al Hakami Medical Group (“we”, “us”) collects, uses and protects your personal data when you use the Alhakami MG app on Apple and Android devices, the patient portal app.alhakamimg.com, and our website. We comply with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, and with Ministry of Health rules on the confidentiality of health information.

Summary

  • We collect only the data needed to provide healthcare and manage your appointments and medical file.
  • We do not sell your data, use it for targeted advertising, or track you across other companies’ apps or websites.
  • Your data is encrypted in transit and accessed only by authorized medical and administrative staff.
  • You can request access, correction or deletion of your account at any time.

Data we collect

Data you provide

  • Identity and contact: name, national ID or Iqama number, date of birth, gender, mobile number, email.
  • Insurance: insurer, policy number, coverage class.
  • Account: medical record number and one-time verification codes (OTP). We never store passwords in readable form.

Health data (sensitive data)

  • Appointments and visits, diagnoses, prescriptions and medications, lab and radiology results, vital signs and medical reports.
  • This data is created while you receive care at our branches and is shown in the app so you can follow your care. It is never used for marketing.

Data collected automatically

  • Device and usage data: device type, operating system, app version and crash logs, used to fix errors and improve performance.
  • Push notification token: used to send appointment reminders and result alerts. You can turn notifications off in your device settings.

Device permissions (optional)

  • Calendar/Reminders: only to add your appointments to your calendar when you ask.
  • Location: to show the nearest branch and directions. It is not stored by us.
  • Camera/Photos: only to upload an insurance card or medical document when you choose to.

You can deny or revoke any permission in your device settings, and the app’s core features will keep working.

How we use your data

  • Booking and managing appointments and sending reminders.
  • Providing medical care and giving you access to your records and results.
  • Verifying insurance and processing claims with insurers through the NPHIES platform.
  • Communicating with you about your services and answering your questions.
  • Protecting accounts, preventing fraud and meeting legal obligations.
  • Improving app quality and performance using technical data not linked to your identity.

We only send promotional messages with your consent, and you can opt out at any time.

We process your data to provide the healthcare you requested, to meet the legal obligations of healthcare facilities, and with your explicit consent where required, such as for marketing notifications and device permissions.

Sharing

We share data only as needed, with:

  • Health insurers and the NPHIES platform, for eligibility, approvals and claims.
  • Competent government authorities, such as the Ministry of Health and the Council of Health Insurance, where legally required.
  • Technology service providers acting on our behalf under confidentiality agreements, such as hosting, SMS and verification codes, and Apple and Google push notification services. They may not use your data for any other purpose.

We do not sell or rent your personal data to anyone.

Security

  • Encrypted connections between the app and our servers (HTTPS/TLS).
  • Need-to-know staff access with audit logs.
  • Sign-in verification by a code sent to your registered mobile.
  • Backups and continuous security monitoring.

If a breach affects your data, we will notify the competent authorities and inform you as required by law.

Retention

We keep your account data while you use the app. Medical records are kept for the period required by Saudi healthcare regulations, even after account deletion, because they are part of your statutory medical record. After that period, data is securely deleted or anonymized.

Your rights

  • Access your data and receive a copy.
  • Request correction of inaccurate data.
  • Request deletion, subject to what the law requires us to keep.
  • Withdraw consent for any consent-based processing.
  • Lodge a complaint with the Saudi Data & AI Authority (SDAIA).

To make a request, contact us using the details at the end of this page. We respond within the statutory period.

Deleting your account

You can request account deletion at any time:

  1. In the app: Profile → Settings → Delete account.
  2. By email: send a request from your registered mobile number or email to [email protected] with the subject “Account deletion request”.
  3. By phone or WhatsApp: unified number 920002264.

On deletion, we close your account and delete your login data, notification tokens and preferences within 30 days. Medical records remain with the facility for the statutory period described under “Retention”.

Children

Accounts may not be created by anyone under 18. A parent or guardian may manage their children’s appointments and records from their own account and consents on their behalf.

Changes to this policy

We may update this policy from time to time. The date of the latest update appears at the top of this page, and we will notify you in the app of any material change.

Contact us