Sultan Bin Abdulaziz Humanitarian City is committed to protecting the privacy and confidentiality of personal data entrusted to us by our patients, visitors, employees, and stakeholders. This Data Privacy Policy outlines how we collect, use, disclose, and safeguard personal data obtained through our healthcare services and interactions with individuals ("Users").
1.Information We Collect
We may collect the following types of personal data from our Users:
-
Patient Information: Name, date of birth, gender, contact details, medical history, health records, and other relevant healthcare information.
-
Employee Information: Name, contact details, employment history, qualifications, and other necessary employee data.
-
Visitor Information: Name, contact details, and purpose of visit.
-
Vendor and Contractor Information: Name, contact details, business information, and contractual agreements.
-
Online Information: IP addresses, cookies, and usage data collected through our website and online services.
2.Use of Personal Data
We may use personal data for the following purposes:
-
Provision of Healthcare Services: To provide medical treatment, diagnosis, and healthcare services to our patients.
-
Administrative Purposes: To manage appointments, admissions, billing, insurance claims, and other administrative functions related to healthcare services.
-
Communication: To communicate with patients, employees, visitors, vendors, and stakeholders for appointment reminders, health-related information, and hospital updates.
-
Quality Improvement: To conduct research, analyze outcomes, and improve the quality of healthcare services provided.
-
Compliance with Legal Obligations: To comply with applicable laws, regulations, and legal requirements.
3.Data Disclosure and Sharing
We may disclose personal data to third parties in the following circumstances:
-
Healthcare Providers: We may share personal data with healthcare professionals, specialists, and other providers involved in the patient's care and treatment.
-
Business Associates: We may engage third-party service providers and business associates to perform functions on our behalf, such as medical billing, IT support, and laboratory testing. These entities are contractually obligated to protect personal data and use it only for specified purposes.
-
Legal Compliance: We may disclose personal data to comply with legal obligations, court orders, or to respond to lawful requests from government authorities.
-
Patient Consent: We may share personal data with third parties if we have obtained patient consent to do so.
4.Data Security
We maintain appropriate technical, administrative, and physical safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction. We regularly review and update our security measures to ensure the ongoing confidentiality and integrity of personal data.
5.Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy, as required by law, and in accordance with our data retention policies. We securely dispose of personal data when it is no longer needed or required to be retained.
6.User Rights and Choices
Users have certain rights regarding their personal data, including:
-
Access and Correction: Users can request access to and correction of their personal data held by the Hospital.
-
Data Portability: Users may request the transfer of their personal data to another healthcare provider in certain circumstances.
-
Confidentiality and Privacy: We respect the confidentiality and privacy of our patients and will take reasonable measures to accommodate any specific requests or restrictions regarding the use and disclosure of personal data.
7.Updates to this Policy
We may update this Policy from time to time to reflect changes in our practices or legal obligations. We encourage Users to review this Policy periodically for any updates. Continued use of our services after the posting of changes constitutes acceptance of those changes.
By using our healthcare services or providing personal data to the Hospital, you acknowledge that you have read and understood this Data Privacy Policy and agree to the collection, use, disclosure, and retention of your personal data as described herein.
