Privacy Policy

Last Updated: August 14, 2026 — Version 2026-08-14

Introduction

SA.Doctor (the “Platform”) is a doctors directory for Saudi Arabia, owned and operated by Algorithma AI Company, a Saudi technology company based in Jeddah. We act as the data controller for the personal data described below and process it in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.

This policy explains what data we process, why we process it, who we share it with, how long we keep it, and the rights available to you. It should be read together with our Terms of Service.

Data We Process

Doctor and facility data — Name, specialty, qualifications, professional experience, clinic and facility details, consultation fees, and photographs, published so that patients can find suitable care.
Account and contact data — Name, email address, and phone number provided when you sign in, submit an application to be listed, or use our contact forms.
Communications — Messages and enquiries you send to us through the Platform.
Usage data — Technical information such as device type, browser, approximate location, and the pages you view, used to operate, secure, and improve the service.
Acceptance records — The version of the Terms of Service and this policy you accepted, the date and time of acceptance, and technical metadata such as IP address and browser identifier.

We do not collect patient medical records or clinical information, and we ask that you do not send such information to us.

Where the Data Comes From

Most of the information we publish is provided directly by the doctor, the facility, or an authorized representative.

We also compile basic professional information — such as name, specialty, and place of practice — from publicly available professional sources, in order to build a complete and accurate directory. A listing created this way contains professional details only, is shown as unclaimed, and is excluded from search-engine indexing. The doctor or facility may claim it, correct it, or ask us to remove it at any time and at no cost — either through the removal link shown on the listing itself, or by writing to info@sa.doctor. We act on removal requests without asking for a reason.

Why We Process Data, and on What Basis

To operate and maintain the Platform, respond to enquiries, and provide support — necessary to deliver the service you have asked for.
To publish doctor and facility profiles and keep them accurate — on the basis of the consent given by the doctor, facility, or authorized representative; and, for professional information compiled from public sources, on the basis of our legitimate interest in maintaining an accurate public directory, balanced against the rights of the individuals concerned.
To send service communications — such as profile confirmations, account notices, and replies to your enquiries — necessary to provide the service. Marketing messages are sent only with your separate consent, which you may withdraw at any time.
To keep the Platform secure — including detecting and preventing fraud, unauthorized access, and automated data extraction — on the basis of our legitimate interest in protecting the Platform and the people listed on it.
To produce aggregated and anonymized statistics and insights about the healthcare sector, which do not identify any individual.
To comply with legal obligations in the Kingdom of Saudi Arabia.

We share personal data only in the following cases:

Service providers that support the operation of the Platform — such as hosting, email, payment, and analytics providers — acting on our instructions under written agreements that require them to protect the data and to use it only for the services they provide to us.
Affiliates of Algorithma AI Company, where they support the operation of the Platform and under the same protections.
Competent authorities, where disclosure is required under the laws of the Kingdom of Saudi Arabia or by a valid order, or is necessary to protect the rights or safety of individuals.
With your consent in any other case, on the basis of a separate and specific consent given at the time.

We do not sell personal data, and we do not license or otherwise make personal data available to third parties for their own commercial purposes.

Aggregated and anonymized information — statistics that do not identify, and cannot reasonably be used to identify, any individual — may be published or used commercially. Directory information is, of course, also displayed publicly on the Platform, which is the purpose for which it is submitted.

Transfers Outside the Kingdom

Some of our service providers — including our hosting, email, and analytics providers — process data on servers located outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we do so in accordance with the PDPL and the Regulations on Personal Data Transfer outside the Kingdom, and only where an appropriate level of protection is ensured through contractual and technical safeguards.

Cookies and Analytics

We use cookies and similar technologies that are necessary for the Platform to work — for example to keep you signed in — together with analytics that help us understand how the Platform is used and how to improve it. Analytics results are reviewed in aggregate. You can block or delete cookies in your browser settings, although some features may then not work as intended.

Acceptance Records

Where we ask you to confirm your acceptance of our Terms of Service and this policy — for example when signing in to an account, submitting an application to be listed, or reviewing and approving your profile — we record the version accepted, the date and time of acceptance, and technical metadata such as your IP address and browser identifier. We keep these records as evidence of the agreement formed under the Electronic Transactions Law and as part of our documentation obligations under the PDPL.

Photographs and Media

Photographs and other media of doctors and facilities are published with the permission of the person or entity concerned, and are used to display the profile on the Platform and to promote the Platform and its services. We do not authorize unrelated third parties to download, copy, reuse, or redistribute this media. If you are a doctor or facility and would like your photograph or other media added, updated, or removed, write to info@sa.doctor and we will act on your request.

Protecting the Directory from Unauthorized Extraction

The information published on the Platform is made available for personal use by visitors looking for care. Automated collection, bulk extraction, redistribution, and the use of Platform data to train artificial-intelligence or machine-learning systems are not permitted, as set out in our Terms of Service. We apply technical and organizational measures — including rate limiting, access controls, and monitoring — to detect and prevent unauthorized extraction, which also protects the personal data of the people listed. Search engines that follow the directives in our robots.txt are welcome.

Publishing information on the Platform does not place it in the public domain or grant any right to copy or reuse it.

Data Security

We apply appropriate technical and organizational measures — including access controls, encryption in transit, rate limiting, and monitoring — to protect personal data against unauthorized access, alteration, disclosure, extraction, or loss.

Data Retention

We keep personal data only for as long as it is needed for the purposes described in this policy: profile data for as long as the listing is published; communications for as long as needed to handle and document your enquiry; and acceptance and consent records for as long as they may be needed as evidence or to meet our legal obligations. When data is no longer needed, it is deleted or anonymized.

Your Rights

Under the PDPL, you have the right to:

Be informed of the legal basis and the purpose for which your personal data is collected
Access your personal data and request a copy of it in a readable format
Request the correction of inaccurate, incomplete, or outdated data
Request the deletion of your personal data, including the removal of your profile and media
Withdraw your consent at any time, where processing is based on consent
Object to processing that is based on our legitimate interest
Lodge a complaint with the competent supervisory authority, the Saudi Data and Artificial Intelligence Authority (SDAIA)

Withdrawing consent takes effect from the moment of withdrawal and does not affect processing lawfully carried out before it. We may keep the minimum records we are required or permitted to retain, such as acceptance records and records needed to establish or defend a legal claim.

We respond to requests within the period set by the PDPL, and there is no charge for exercising these rights. To make a request, write to info@sa.doctor.

Children

The Platform is intended for adults and is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, write to info@sa.doctor and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Each version is identified by its effective date. An updated version takes effect when it is posted on this page, and where the changes are material we will ask you to review it and confirm your acceptance again.

Contact Us

If you have a question about this policy, or would like to make a request about your personal data, please contact us or write to us at:

Platform: info@sa.doctor
Company: support@algorithma.sa

The Platform is operated by Algorithma AI Company, Jeddah, Kingdom of Saudi Arabia.