PRIVACY POLICY

Introduction

Zal Al Baas Limited Liability Company, Commercial Registration No. 4030371354, operating as “Adam” or the “Platform,” is committed to protecting users' privacy and personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia, the PDPL, and applicable healthcare, regulatory, and related laws.

This Privacy Policy applies to your use of Adam's services, including telemedicine consultations, Adam Clinics, Adam Labs, and the related operational and technical services provided through the platform.

By using the platform, you acknowledge and agree that Adam may collect, process, and use your data as described in this Privacy Policy.

Data We Collect

Adam may collect and process the data necessary to operate and provide the Services, including the following:

A. Identification Data

• full name;
• national ID or iqama number;
• date of birth;
• mobile number;
• email address;
• account and user profile information.

B. Health Data (Sensitive Data)

• medical history and current symptoms;
• information related to medical consultations;
• prescriptions;
• laboratory test results provided through Adam Labs;
• biomarkers and preventive health data;
• records or communications related to healthcare services.

C. Operational and Technical Data

• payment and transaction information;
• device information, IP address, and usage logs;
• appointment and booking information;
• customer support and operational communication records.

Adam does not store bank card details. Payment transactions are processed through approved payment service providers.

Legal Basis for Processing Data

Adam processes data based on:

• the user's consent;
• the performance of Services and contractual obligations;
• compliance with applicable laws and regulations in the Kingdom of Saudi Arabia;
• healthcare and regulatory requirements related to digital healthcare services.

How We Use Data

Adam may use data for the following purposes:

• operating and providing digital healthcare services;
• managing appointments, bookings, and subscriptions;
• enabling Healthcare Providers to provide consultations and medical recommendations;
• coordinating laboratory services, medication services, and related services;
• improving the user experience and service quality;
• communicating with users for operational, technical, or regulatory purposes;
• complying with legal and regulatory requirements.

Consultation Recordings and Health Records

You acknowledge and agree that consultations and communications related to healthcare services may be recorded, documented, or retained in accordance with applicable legal and regulatory requirements in the Kingdom of Saudi Arabia.

Data Sharing

Adam does not sell users' personal data.

Adam may share data where operationally or legally necessary with:

• licensed Healthcare Providers;
• laboratories, pharmacies, or service providers connected to the relevant Service;
• approved technical or operational service providers;
• regulatory or official authorities where required by law or regulation.

Adam takes appropriate measures to protect data confidentiality when sharing data with approved parties.

Operational Communications

Adam may contact users through:

• phone calls;
• SMS;
• email;
• WhatsApp or similar communication applications;
• digital communication tools and notifications available through the platform or application.

These communications may relate to appointments, Services, support, updates, reminders, or other operational matters connected to the Services.

Data Security

Adam applies appropriate technical, organizational, and security measures to protect data against unauthorized access, use, disclosure, alteration, or loss, including:

• encryption of data in transit and at rest where appropriate;
• access controls and permission restrictions;
• use of approved service providers and technologies;
• periodic security review and monitoring.

User Rights under the PDPL

Subject to applicable laws and regulations, users may have the right to:

• request access to their personal data;
• request correction or updating of inaccurate data;
• withdraw consent where processing is based on consent;
• request destruction of data where legally permitted;
• inquire about how their data is processed.

Some requests may be subject to legal, healthcare, or regulatory limitations, including requirements relating to medical records and regulatory obligations.

Data Retention

Adam retains records and data in accordance with applicable legal and regulatory retention periods in the Kingdom of Saudi Arabia, or for as long as necessary to operate the Services and meet legal and regulatory obligations.

Cookies and Technical Data

The platform may use cookies or similar technical tools to improve performance, enhance the user experience, analyze usage, and develop the Services.

Changes to this Privacy Policy

Adam may update this Privacy Policy from time to time to reflect operational, legal, regulatory, or technical changes. The updated version will be published through the platform.

Contact and Inquiries

For any inquiries or requests relating to privacy or personal data processing, you may contact Adam through the following official channels:

• Website: foradam.health
• Email: business@foradam.health
• WhatsApp: +966582134493
• Headquarters: Jeddah, Kingdom of Saudi Arabia