Personal Data Protection Law — PDPL
Privacy Policy
Last updated: June 2026
DHAS is committed to the Saudi Personal Data Protection Law (PDPL) and works to protect your privacy and secure your data.
1. Who We Are
DHAS is a Saudi non-profit organization registered in the Kingdom of Saudi Arabia, dedicated to advancing digital health awareness.
Email: info@dhas.sa
Website: dhas.sa
2. Data We Collect
a. Registration & Account
- Full name (Arabic & English)
- Email address
- Password (encrypted)
- Phone number (optional)
- Profile photo (Google login)
b. Membership Data
- SCFHS professional license number
- City, professional specialization
- Membership fee payment proof
c. Usage Data
- Health questions entered in the AI checker
- Course & volunteer activity records
- IP address (for abuse protection only)
3. Why We Collect Your Data
| Purpose | Legal Basis | Retention |
|---|---|---|
| Account management & login | Contract performance | Duration of account |
| Membership applications | Contract performance | 5 years |
| Transactional emails | Contract performance | As needed |
| AI health verification | Explicit consent | 1 year |
| Newsletter | Explicit consent | Until unsubscribed |
| Google Analytics | Explicit consent | 26 months |
| Admin audit log | Legal obligation | 5 years |
5. Your Rights under PDPL
We will respond to your requests within 30 days:
Access
Obtain a copy of your personal data
Correction
Correct inaccurate data from your profile
Deletion
Request deletion of your account and data
Objection
Object to processing not based on your consent
Withdraw Consent
Withdraw consent at any time
Lodge Complaint
Contact SDAIA to report any violation
6. Data Security
🔒
Encryption
All communications encrypted via HTTPS/TLS
🔑
Passwords
bcrypt-hashed, never readable
🛡️
Access Control
Role-based access to sensitive data
7. Data Breach Notification
In the event of a data breach, we will notify SDAIA within 72 hours and inform affected users as soon as confirmed.
8. Cookies
Essential cookies: Required for login sessions — no consent needed.
Google Analytics: For content improvement — requires your consent.
9. Policy Updates
We may update this policy periodically. We will notify you of material changes by email before they take effect.
Questions about your privacy?
Contact Privacy Officer