Privacy Policy

Privacy Consent Form

At myFarabi platform (hereinafter referred to as “The Company,” “We,” or “Us”), the protection of your Personal Data is an essential part of our commitment to delivering high-quality care. We understand the importance of maintaining your Privacy and are committed to managing your Personal Data with the highest level of integrity and transparency.

We collect, use, and disclose your Personal Data in a responsible manner, in accordance with applicable laws and regulations. This includes Processing information to provide our services effectively, meet regulatory and legal obligations, and support operational requirements that enhance your experience with us. Your consent plays a vital role to comply with the obligations stated herein above

All Staff members who come in contact with your Personal Data are aware of the sensitive nature of the data that you have disclosed to us. They are all trained in the appropriate use and protection of your Personal Data. In this consent form, we have outlined what The Company is doing to ensure that:

Only necessary information is collected about you
We only share information with your Consent
Storage, retention and destruction of your Personal Data complies with the existing legislation and Privacy Protocols
Our Privacy Protocols comply with Privacy legislation, standards of the applicable regulatory bodies and the laws.

What Personal Data we collect

We collect Personal Data which identifies you such as your Name, Email ID, Contact Details, Gender, Appointment Details etc. This further includes both Sensitive Personal Data (financial data, biometric data, genetic data, skin type, family personal information etc.) and Patient Health Information (Medical Records, Test reports, Prescriptions etc.)

Use of Personal Data

Your Personal Information may be used or processed for various purposes including but not limited to the following:

To Provide you with medical, diagnostic, and healthcare services.
To contact you via phone, SMS, WhatsApp or email for appointments, technical issues, payment reminders, deals and offers and other announcements.
To send promotional communications via SMS, WhatsApp, email, and other channels, and to support related services such as customer support, marketing, analytics, advertising, and performance tracking etc.
To carry out insurance-related purposes, including claims processing, verification, and billing.
To support and enhance our Corporate Social Responsibility (CSR) initiatives.
To transfer information about you if we are acquired by or merged with another company,
To share with our business partners for provision of specific Services you have ordered so as to enable them to provide effective Services to you.
To perform studies, research, and analysis for improving our information, Services, and technologies.
To manage financial transactions and invoice etc.
To comply with legal and regulatory requirements.
To carry out obligations related to any agreement you have with us

By signing the consent section of this Patient Consent Form, you have agreed that you have given your informed consent to the collection, use and/or disclosure of your Personal Data for the purposes that are listed.

Sharing and transferring of Personal Data

Basis your consent, you authorize us to exchange, transfer, share, your Personal Data within the myFarabi platform affiliates/agents/third party service providers/partners/authorities, Health Information Systems (HIS) and from your country to any other countries across the world for legal documentation, insurance processing, marketing purposes, or for providing our services for the purposes specified under this consent form or as may be required by applicable laws and regulations.

We may share your information with authorized third-party vendors and service providers that help us with specialized services, including customer service, email deployment, business analytics, marketing (including but not limited to advertising, attribution, deep-linking, direct mail, mobile marketing, optimization and retargeting) advertising, performance monitoring, hosting, and data processing. These authorized third-party vendors are subject to risk assessment test and will not use your information for purposes other than those related to the services they are providing to us. All such data sharing is conducted in accordance with applicable data localization requirements, security protocols, and applicable regulatory standards.

If you choose to engage in public activities on the third-party sites that we link to, you should be aware that any information you share there can be read, collected, or used by other users of these sites and forums. You should use caution in disclosing personal information while participating in these areas. We are not responsible for the information you choose to submit in public areas.

Please note that, in line with regulatory requirements and basis your consent, all health-related data is securely shared with government-mandated Health Information Exchanges (HIEs) such as the Ministry of Health, NABIDH, MALAFFI and other applicable platforms to support better care coordination and public health outcomes.

Special Considerations for Children’s Privacy

The Company is committed to protecting the privacy of children. If you are a parent or legal guardian, by signing this consent form, you authorize The Company to collect, use, and disclose Personal Data regarding your child. The data will be used solely for the purposes of providing healthcare services and treatment. We ensure that all Personal Data is stored securely and will be shared only with necessary healthcare providers.

Security

The security of your Personal Data is important to us. We have adopted and maintained reasonable technical and organizational security measures and procedures including rigorous third-party risk assessments, strong access controls and information sharing on a need-to-know basis, encryption of Personal Data, secure storage of Personal Data, rapid data breach management procedures, etc. to ensure that the Personal Data collected is secure at rest and in transit. We restrict access to your Personal Data to our and our affiliates’ employees, agents, third-party service providers, partners, and agencies on a need-to-know basis and absolutely limited to the purposes as specified above in this Policy.

Retention

myFarabi platform will retain your personal information only for the period necessary to fulfill the intended purposes or as required by Saudi Arabian laws and regulations, whichever is longer. Upon expiry, the data shall be securely deleted or anonymized.

Your Rights

We will respect your legal rights in relation to your Personal Data. myFarabi platform is committed to protecting them and ensuring compliance if you wish to exercise any of the rights. You may refer to The Company’s Privacy Policy to further understand any of these rights:

Right to obtain Information – Right to request information about the Personal Data we hold about you.
Right to withdraw consent – Right to withdraw consent from further Processing your Personal Data.
Right of Grievance Redressal – Right to grievance redressal where your exercise to request your rights is refused.
Right of Data Portability – Right to request a copy of your Personal Data transferred to you or another party in a machine-readable and easy-to-read format.
Right of Correction – Right to request correction of your Personal Data if the information is incorrect.
Right of Erasure – Right to get your Personal Data erased or removed at any time.
Right to Restrict Processing – Right to restrict the Processing of your Personal Data.
Right to Object – Right to object to the Processing of your Personal Data if such Processing is not necessary.
Right not to be subject to Automated Decision-Making – Right to not be subject to a decision solely based on automated Processing, including profiling, which significantly affects you.

Contact Us and Grievance redressal

In case of any query and concerns, you may contact our Group Data Protection Officer:

DPO Details: Privacy@asterdmhealthcare.com

Contact No.- +971565037221

Or you can write to us/post at:

The Data Protection Officer,

Aster DM Healthcare Limited.

Official Address: 33rd Floor - Aspect Tower, Business Bay, P.O. Box: 8703 - Dubai - U.A.E

Article (X): Data Protection Officer

In accordance with Article 30 of the Saudi Personal Data Protection Law (PDPL), the Company shall appoint a Data Protection Officer (DPO), who shall be responsible for:

Monitoring the Company’s compliance with the PDPL, its Implementing Regulations, and any related legal requirements.
Serving as the primary point of contact with relevant regulatory authorities, including the Saudi Data and Artificial Intelligence Authority (SDAIA).
Handling inquiries from data subjects and enabling the exercise of their rights under the PDPL.
Preparing regular compliance reports to be submitted to senior management.
Ensuring proper incident response and timely resolution of complaints or data breaches in accordance with applicable timelines.

The DPO’s contact information shall be made available through official channels, and a local representative may be appointed inside the Kingdom of Saudi Arabia if required.

If you have any questions, concerns, or complaints regarding our compliance with the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us. We will investigate and attempt to resolve complaints and disputes and will make every reasonable effort to honour your wish to exercise your rights as quickly as possible and, in any event, within the timescales provided by data protection laws.

Patient Consent

I have reviewed the above information that explains how myFarabi platform will use my Personal Data, and the steps myFarabi platform is taking to protect my information.

I agree that myFarabi platform can collect, use and disclose Personal Data as mentioned above and under the myFarabi platform’s Privacy Policy (Refer to the QR code attached)

I agree that my health care provider that participate in the NABIDH HIE may disclose my health information to the NABIDH system and my health information may be shared with all health care provider participants of the NABIDH that are involved in my care in KSA.

I agree that myFarabi platform can collect, use and disclose Personal Data for marketing and promotional activities.

Disclaimer

The Company is committed to protect your privacy. To respect your preferences, we provide multiple ways to opt out of receiving marketing and promotional communications. You can do this at any time using the unsubscribe or opt-out links provided in our emails and messages. If you wish to withdraw your consent for marketing or for the sharing of information via NABIDH or exercise any of your rights as stated above, you can do so by writing to us through an email at Privacy@asterdmhealthcare.com

Name _________________________________ Age_________________________________

Date __________________________________

Signature______________________________

Loading…