Privacy Policy

Dr.AliCare · Dr. Ali Al Farhan · Last updated: 17 September 2026

This policy explains how personal data is handled when you use the Dr.AliCare website, book a service, or communicate about a service. It should be read together with our Booking, Service and Confidentiality Terms.

1. Scope

This policy applies to data collected through the website and its related booking and communication services. A clinic selected for an in-person appointment may be independently responsible for data it collects or retains through its own systems, in which case its privacy policy also applies.

2. Data we may collect

• Identity and contact data: your name, mobile number, email address and information needed to verify your identity or contact you.
• Booking and service data: the selected service, appointment date, duration and status, and rescheduling or cancellation requests.
• Payment and transaction data: payment status, transaction value, invoice and refund information, to the extent made available by the payment provider. Payment-card details should not be sent through WhatsApp.
• Health and psychological data: information you voluntarily provide that is necessary to assess your needs, provide the service and maintain professional records.
• Communication data: enquiries, requests, complaints and correspondence relating to the service.
• Technical data: Internet Protocol address, device and browser type, usage logs and cookies, depending on the website features enabled.

We aim to collect only the data needed for defined purposes. Please do not send detailed health information through general communication channels unless requested through an appropriate channel.

3. Sources of data

We obtain data directly from you, from a person legally authorized to represent you, from systems used to operate the website, booking and payment functions, or from the selected clinic where necessary and legally permitted.

4. Purposes and lawful basis

We may process data to create, verify and manage bookings; provide, document and follow up psychological services; administer payments, invoices, refunds and packages; respond to enquiries, rights requests and complaints; protect the website and accounts; meet legal and professional obligations; and improve the website and service where appropriate.

Processing may be based on your consent where required, on taking steps at your request or performing a booking, on compliance with legal or professional obligations, or on another basis permitted by applicable law. General acceptance of booking terms does not replace explicit consent where a particular processing activity requires it.

5. Data sharing and service providers

Data is disclosed only to the extent necessary for a defined purpose. Recipients may include providers of website operation, booking management, hosting, technical support and cybersecurity; payment and invoicing providers; communication providers you choose to use; the selected clinic and its authorized staff; other health professionals when care is referred or coordinated after obtaining the required consent or where another lawful basis applies; and governmental, judicial or regulatory authorities where disclosure is legally required or permitted.

Service providers are expected to process data within the scope of the services entrusted to them and the legal requirements applicable to them. Certain organizations may be independently responsible for data they collect directly.

6. Processing outside Saudi Arabia

Some technical or communication services you choose to use may rely on infrastructure or organizations located outside Saudi Arabia. If their use involves transferring or making data available outside Saudi Arabia, this will be handled within the limits permitted by applicable law and subject to the required safeguards.

7. Retention and disposal

Data is retained for as long as necessary for the purpose for which it was collected and to meet professional and legal requirements relating to health records, bookings, transactions and complaints. When there is no longer a legal or professional need, data is deleted, securely disposed of or converted into a form that does not identify the individual, subject to applicable law and the capabilities of the relevant system.

8. Security and confidentiality

We apply technical and organizational measures appropriate to the nature of the data and related risks. These include limiting access to authorized persons on a need-to-know basis, managing permissions, using safeguards provided by approved systems, and reviewing incidents when they occur. No electronic method is completely secure. We therefore address incidents in accordance with applicable requirements, including notification where legally required.

Sessions must not be recorded or photographed by any participant without prior written consent from all participants.

9. Cookies and analytics

The website may use cookies necessary to operate pages, bookings, language preferences and secure sessions. Additional measurement or analytics features may be used depending on the website’s actual settings. You can manage cookies through your browser or a consent control where one is displayed, although disabling necessary cookies may affect certain functions.

10. Your data rights

Subject to applicable law, you may request information about how your data is used, access it or obtain a copy, request its correction, completion or updating, request its destruction where the applicable conditions are met, and withdraw consent from processing that relies on consent where withdrawal is legally available. We may need to verify your identity, and certain requests may be subject to legal or professional exceptions, requirements or time limits.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal and does not require the destruction of data that must be retained under a legal or professional obligation.

11. Minors’ data

If the client is under 18, the service will be provided and their data processed only in accordance with applicable professional and legal requirements and with the consent of a parent, guardian or other legally authorized person where required. Evidence of authority may be requested.

12. Location during an online session

The country or region in which the client is physically located at the time of an online session may affect whether the service can be provided. You may be asked to state your current physical location accurately when the session begins. The session may be unavailable or unable to continue where legal, professional or safety requirements prevent it.

13. Emergencies

The website, WhatsApp and email are not continuously monitored and must not be used for an immediate emergency response. If there is an urgent risk to your safety or another person’s safety, contact the emergency services where you are currently located or go to the nearest emergency department immediately.

14. External services and links

When you choose to use an external service, such as WhatsApp, a payment gateway or a clinic’s website, its operator may process your data under its own policy and terms. Please review them before sending personal or health data and avoid sharing information beyond what is needed.

15. Changes to this policy

This policy may be updated when services, processing practices or legal requirements change. The latest update date appears at the top of the page. Material changes will be communicated in an appropriate manner before taking effect where required.

16. Contact and privacy requests

To exercise a data right or submit a privacy enquiry or complaint, contact us on WhatsApp at +966 53 888 9300. Use WhatsApp to initiate the request and arrange a suitable follow-up channel; do not send detailed health information or sensitive documents unless requested through an appropriate channel.