Privacy Notice

1. Introduction and Purpose

SHIB Academy (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of its users.

This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations.

2. Scope of Privacy Notice

This Privacy Notice applies to all users of the Platform, including individuals and authorized entities accessing or using the Platform’s services.

3. Collection and Use of Data

We collect and process the following categories of personal data:

Purposes of Data Collection and Processing:

• Providing, operating, and improving services
• Complying with applicable legal and regulatory requirements
• Enhancing platform security and preventing fraud or misuse
• Conducting analytics and generating reports to support operational and improvement decisions

4. Legal Basis for Processing

We process personal and sensitive data based on one or more of the following legal bases:

• Your explicit and informed consent
• Compliance with legal or regulatory obligations imposed by applicable laws or competent authorities

5. Special Safeguards for Sensitive Data

We implement enhanced safeguards to protect sensitive data, including:

• Advanced security measures, such as encryption, access controls, and anonymization techniques
• Data minimization and purpose limitation, ensuring only the minimum data necessary is collected for defined purposes
• Confidentiality and integrity measures to ensure data accuracy and protection against unauthorized access, use, or disclosure

6. Data Sharing and Disclosure

We do not sell personal or sensitive data. However, data may be shared, where necessary and lawful, with:

• Licensed healthcare providers for the purpose of delivering healthcare services
• Government authorities or regulatory bodies where disclosure is legally required
• Health system partners to enable integrated and interoperable services

All data sharing is conducted in accordance with applicable laws and subject to appropriate safeguards.

7. Data Retention and Security

• Personal and sensitive data are retained only for as long as necessary to fulfill the purposes for which they were collected or as required by applicable laws
• We apply strict security controls in line with the PDPL and internationally recognized standards, including ISO/IEC 27001

8. Data Subject Rights

Pursuant to the Saudi PDPL, data subjects have the following rights:

• The right to access their personal and sensitive data
• The right to request correction of inaccurate or incomplete data
• The right to request deletion of personal or sensitive data, where there is no legal basis for continued retention
• The right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal

9. Cross-Border Data Transfers

Where personal or sensitive data is transferred outside the Kingdom of Saudi Arabia, we ensure that adequate legal and technical safeguards are implemented in compliance with PDPL requirements and decisions issued by competent authorities.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyze platform performance, and improve our services.

Users may manage cookie preferences through their browser settings.

11. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. Any material changes will be communicated through our website or other appropriate communication channels.

12. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Notice or our data processing practices, please contact us at:

Email: privacy@shib.sa