Official document — Balghsoon Polyclinic

Privacy Policy

Last Updated: July 6, 2026

01Introduction

Balghsoon Polyclinic respects the privacy of patients and users and is committed to protecting the personal and medical information handled through the patient mobile application, patient portal, and related digital services. This Privacy Policy explains the types of information we may handle, why we use it, how we protect it, and the choices available to users regarding their information.

021. Information We Handle

We may handle information necessary to provide digital patient services, including: • Identity and account information, such as name, national ID or residency number, and medical file number. • Contact information, such as mobile number. • Appointment and booking information. • Visit and medical record information made available to the patient. • Laboratory, radiology, and other diagnostic results available through the system. • Prescriptions and medications. • Insurance coverage and approval information. • Billing and financial information related to patient services. • Suggestions and complaints voluntarily submitted by the user. • Account deletion and privacy-related requests. • Technical information necessary to operate and protect the service, such as session information, error logs, and security logs.

032. How We Use Information

We use information as necessary to provide patient services, including: • Verifying the user's identity and linking the account to the correct medical record. • Enabling access to appointments, visits, results, prescriptions, and available services. • Processing appointment and digital service requests. • Displaying insurance, approval, and billing information. • Receiving and responding to suggestions and complaints. • Processing privacy and account deletion requests. • Protecting accounts and preventing unauthorized access or misuse. • Improving the stability of our digital services and resolving technical issues. • Meeting applicable medical, regulatory, and legal obligations.

043. Medical Information

The application and patient portal may display medical information associated with the patient's record at Balghsoon Polyclinic. This information is used to provide patient services and enable the patient to access information and services available to them. Users must not use another person's account or attempt to access a medical record they are not legally authorized to access.

054. Sharing of Information

We do not sell users' personal or medical information. We do not use medical information for targeted advertising. When necessary, limited information may be processed by technical service providers that support the operation, hosting, security, or related services of the application (such as the push notification delivery service), only to the extent required to provide those services and subject to applicable safeguards. Information may also be disclosed when required by applicable law or a legally authorized authority.

065. Information Security

We use appropriate technical and organizational measures to protect information against unauthorized access, use, alteration, or unlawful disclosure. However, no electronic method can be guaranteed to be completely secure. We therefore continuously work to improve security measures and reduce risk.

076. Data Retention

We retain information for as long as necessary to provide services, protect accounts, process requests, and meet applicable medical, regulatory, and legal obligations. Deleting an access account may result in the deletion of certain account information, while some medical, financial, or regulatory records may need to be retained for the period required by applicable obligations.

087. Account Deletion

Users may request deletion of their account through: • The patient mobile application. • The patient portal. • The public account deletion page on our website. We may need to verify the identity of the requester before completing the request. Account deletion includes removing or disabling access to the application and patient portal and deleting or de-identifying account-related information where there is no legitimate medical, regulatory, or legal requirement to retain it. Deleting an access account does not necessarily mean deleting medical or financial records that must be retained for medical or legal purposes. Users will be informed of the status of their request and may be contacted if additional information is required for verification.

098. User Rights and Choices

Users may contact us to: • Ask how their information is handled. • Request correction of inaccurate account information. • Request account deletion. • Submit a privacy-related inquiry or complaint. Identity verification may be required before certain requests are processed.

109. User Responsibilities

Users are responsible for: • Protecting access to their account. • Not allowing others to use their account. • Signing out when using a shared device. • Contacting us immediately if unauthorized access is suspected.

1110. External Services and Links

The application may open external services such as: • Phone calls. • WhatsApp. • Email. • Website. • Maps. • Social media services. When users leave our application and access an external service, the privacy practices of that service apply.

1211. Changes to This Privacy Policy

We may update this policy when our services, regulatory requirements, or data practices change. The updated version will be published with a revised "Last Updated" date.

1312. Contact Us

For questions regarding privacy, personal information, or accounts: Balghsoon Polyclinic Phone: 920012865 Email: info@balghsoon.sa Website: balghsoon.sa

14Legal Entity

Balghsoon Polyclinic is the registered trade name of Company MADJEME AHMAD SALMEEN AHMAD BELGSON Medical, the legal healthcare entity that owns and operates the application and provides the medical services.

Questions about this document? 920012865•info@balghsoon.sa