Privacy Policy

1. Who We Are

Alpha Clinic is a licensed medical dental facility operating in Riyadh, Kingdom of Saudi Arabia, under the legal ownership entity البيانات الأساسية للسجل التجاري (Global Vision Company Medical Complex) under Saudi Commercial Registration and Medical License No. 7043654396.

References in this policy to "we", "us", "our", or "the Clinic" designate Alpha Clinic and Global Vision Company Medical Complex.

2. Information We Collect

We collect only the minimum personal and health information necessary to provide safe dental treatments and schedule your visits:

• Contact Identifiers: Full legal name, Saudi mobile telephone number, email address, and occupation sector (Private, Government, Household).
• Appointment & Queue Details: Preferred appointment date, time window, dental service code requested ([A], [C], [AC], [BR], [O]), assigned dentist, and clinical visit notes.
• Clinical & Health Records: Diagnosis, orthodontic progress, oral radiography (digital X-rays), periodontal charts, prescribed medications, and doctor consultation notes recorded during clinic visits.
• Billing & Financial History: Invoices, payment transaction receipts (Mada, Visa, Mastercard, cash), and structured installment agreements.
• Technical Diagnostics: Browser type, operating system, and IP address collected for system security and audit logging.

3. How We Use Your Information

Your personal and healthcare data is processed strictly for legitimate medical and administrative purposes:

• To allocate appointment time slots, manage in-clinic queue sequencing, and confirm your reservations.
• To deliver professional dental healthcare, orthodontics, and maintain legally mandated medical charts.
• To transmit automated transactional SMS and WhatsApp reminders regarding your upcoming bookings.
• To process financial transactions, issue VAT-compliant electronic invoices, and satisfy statutory tax requirements.
• To fulfill audit, safety, and epidemiological directives established by the Saudi Ministry of Health.

4. Data Sharing & Third Parties

We do NOT sell, rent, or commercialize your personal or medical data to third parties.

Data is shared strictly on a confidential need-to-know basis with:

• Treating dental physicians, certified hygienists, and direct clinic reception staff.
• Certified infrastructure partners (SMS gateways for OTP delivery, encrypted cloud hosting providers, and authorized Saudi electronic payment processors).
• Saudi Arabian regulatory, judicial, or healthcare authorities when mandated by statutory law.

5. Data Retention

Patient dental records, diagnostic digital X-rays, and clinical history files are archived securely for the statutory duration required by Saudi health regulations.

Online booking metadata and customer service communications are retained only for as long as necessary to administer active patient accounts and settle ongoing clinical workflows.

6. Security & Infrastructure

We enforce comprehensive technical, administrative, and physical safeguards to prevent unauthorized access, loss, or disclosure of patient health information:

• Role-based access control (RBAC) ensuring patient records are restricted exclusively to treating personnel.
• End-to-end Transport Layer Security (TLS 1.3) encryption in transit and AES-256 database encryption at rest.
• Continuous vulnerability assessments and offline in-clinic data synchronization resilience.

7. Patient Rights & Choices

Under the Saudi Personal Data Protection Law (PDPL), you have the right to:

• Request access to or obtain a certified copy of your personal dental records and digital X-rays.
• Request correction or rectification of outdated contact details or demographic information.
• Request restriction of processing or deletion of non-medical records, subject to statutory healthcare retention rules.
• Opt out of non-essential clinic announcements by notifying reception or via WhatsApp.

8. Cookies & Local Storage

Alpha Clinic utilizes only essential session cookies and local browser storage (such as language preferences and offline check-in caching via alpha.offline.checkins.v1). We do not deploy invasive third-party cross-site behavioral tracking cookies without visitor consent.

9. Privacy Inquiries Contact

If you have inquiries, access requests, or wish to exercise your data rights, please contact our Data Protection Liaison:

10. Policy Updates

We may periodically update this Privacy Policy to reflect advancements in clinic systems or amendments to Saudi statutory regulations. Any revisions will be published immediately on this page with the updated revision date.