Privacy Policy
The NHC treats the information confidentiality of its users and visitors as its top priority. Our aim is to offer a high-quality service to all beneficiaries while maintaining maximum privacy. This privacy policy has been developed to help you understand the nature of the personal data we collect from you as well as the purpose of collecting and processing it. Therefore, it is critical to be aware of how the NHC employs your personal data and your rights regarding your processed personal data in accordance with the relevant regulations and laws applicable in the Kingdom of Saudi Arabia. This policy and the information detailed below are part of the terms of using all the NHC’s platforms.

Acceptance of the Privacy Policy
Your use of the online portal and its associated platforms means your acceptance of the privacy policy as well as the rules and conditions governing the portal and its related platforms. If you do not agree to this policy, you are not allowed to have access to any of the services provided through the online portal and its relevant platforms.
The beneficiary of the Company’s services and the online portal visitors, applications and all platforms providing the service must peruse the privacy policy on an ongoing basis to follow up on any updates to it. It should be noted that the NHC does not have to announce any updates to this policy. Your use of the portal means that you have seen and agreed to the privacy policy and any continuous relevant modifications. You are solely responsible for the completeness and veracity of the data you send via the portal.

1. Privacy policy and information confidentiality 
•    If you send us an email via the NHC's digital platforms and services providing us with personal data, we may share the necessary data with other entities or departments to serve you more efficiently. We will not share your personal data with non-governmental entities unless they are authorized by the competent authorities to offer specific government services. By submitting your personal data and information via the NHC's platforms, you completely agree that this data is stored, processed and used by the Saudi authorities. At all times, we reserve the right to disclose any information to the competent authorities, where necessary, to adhere to any law, regulations or government request.
•    You are solely responsible for the completeness and veracity of the data you send via these platforms.
•    The beneficiary of the Company's e-services and the visitors to the online portals and all platforms offering services must peruse the privacy policy to follow up on any updates to it. It should be noted that that the NHC is not required to announce any updates to this policy on an ongoing basis. Your use of the portal means that you have seen and agreed to the privacy policy and any continuous modifications to it.

2. Who collects user data?
• When you visit the NHC's platforms, the platform's server, which operates automatically, records your Internet Protocol (IP) address (your IP address is the number of the computer you are using, which allows other devices connected to the Internet to determine the destination of the data issued by it and collect some information like the type of the browser and search engine, the date and time of the visit, and the URL of any website from which you are referred to the platform's portal. Your personal identity remains unknown).

3. Sharing your personal data
• Data is shared in specific ways and for legitimate and regulatory purposes or with the aim of serving a public interest without prejudice to national interests, the activities of entities, individual privacy or environmental safety - with the exception of data and entities exempted by Royal Orders.

4. Liability
• The NHC is not liable under any circumstances for any direct, indirect, incidental, consequential, special or exceptional damages arising out of the use or inability to use this portal. It should be noted that the beneficiary of the portal and other e-platforms must provide the Company with correct data and update it.

5. Methods of accessing personal data
• Some of the personal data that we process is directly or indirectly accessed, using various methods, including:
1. Accessing personal data directly:
• Products or services: On registering in the Company's official channels and using our products or services.
• Contact: On contacting the Company via the online portal or mobile phone applications.
• Opinion polls: When opinion polls are published, personal data may be collected. This data is used to conduct analyses and research for the purpose of developing the services offered by the NHC and improved customer experience. We may request other information to satisfy development requirements.

2. Accessing personal data indirectly:
• Cookies data: Cookies collect data about how you use our website, including the date and time of your visit and the type of the internet browser you use.
• Personal data may be obtained from other governmental or non-governmental sources, for example, but not limited to Absher Services, National Single Sign-On Services, banks, Yaqeen, Etisalat, etc.

6. What data is collected?
• Personal data is any information related to natural persons who can be identified, directly or indirectly. We may collect, use, store and transfer the following types of personal data:
• Data you provide us with: names, addresses, contact numbers, personal identification numbers.
• Location data: geographical information related to the location of the user's specific device associated with the time identifier.
• Digital data: Metadata (i.e. a set of data that describes and provides information about other data) and Internet identifiers such as IP addresses, cookie identifiers and other information gathered when you visit our websites.
• Payment data: (for example, the data collected for the purposes of making payments, bank account numbers and credit cards).
• Data exchanged when contacting you (for example, customer support requests and reports received from you).

7. What is the purpose of data collection?
• Collecting and processing personal data to satisfy legal and regulatory requirements.
• Fulfilling the data needed to offer services and e-transactions.
• Understanding visitors' needs to enhance products and services.
• Allowing users to access services and do transactions.
• Analyzing data and making reports that fulfill the necessary business requirements such as statistical reports.
• Resolving and addressing inquiries or complaints and improving visitor experience across all the Company’s communication channels.

8. Personal data protection system
• We ensure that the NHC’s platforms take the top security measures to protect the information you provide. These platforms encrypt information that is sensitive (such as personal data) or data that must be kept confidential as per regulatory requirements. It is worth mentioning that personal data will be stored and processed within the Kingdom’s geographical borders to ensure the national digital sovereignty of this data. This data will be retained as long as there is a regulatory purpose for it. After that, the personal data will be disposed of and destroyed in a secure way that precludes its loss, misuse, or unauthorized access in accordance with the relevant regulations and instructions.
• To preserve data, the NHC’s platforms follow a comprehensive and strict security policy. The servers that host the platforms are subject to the highest levels of protection. Personal data is stored, processed and shared through appropriate security technologies.

9. Rights of the subject of personal data
• The right to access your personal data: You have the right to request a copy of your personal data via the available channels for accessing the data.
• The right to be informed: The data subject has the right to be informed of the purpose of collecting and processing his/her personal data and the legal foundation for this purpose, the content of the data to be processed, the collection method, the means of storage and to whom it will be disclosed. (The privacy policy is one of the possible means through which a data subject can enjoy this right).
• The right to correct your personal data: You have the right to request the correction of your personal data that you consider inaccurate, incorrect or incomplete through the Company's approved channels.
• The right to request the destruction of personal data: The personal data subject has the right to request the destruction of his/her personal data with the Company and which is no longer needed.
• The right to retract consent to processing personal data: The personal data subject can retract consent to processing his/her personal data in all cases and at any time except for the cases specified in the Personal Data Protection Law and its implementing regulations.

10. How long is your personal data retained?
• The period is subject to (the content and document management policy).