Privacy policy

01Who we are

The Geneo Clinic website (geneoclinic.sa) is owned and operated by Virtual Medicine Holding Company, the owner and operator of the “Geneo Clinic” brand. It is the controller responsible for personal data collected through this website under the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.

02Data we collect

When you send an appointment request or any other form on the website, we collect only what you enter:

• Your name, and your mobile number or email address.
• The preferred service and specialist, and the preferred date and time.
• Your answers to any additional questions in the form, and the language of the page you used.
• Limited technical data to protect the website from abuse, such as your IP address after it is converted into an irreversible encrypted code.

We do not ask for medical reports, test results or genetic data through the website, and we ask you not to send them in the forms. The team will request them through dedicated channels when needed.

03How we use your data

• To contact you about your request and confirm or change the appointment.
• To show the status of your request on the “Track requests” page when you enter your reference number.
• To improve our services using general statistics that do not identify you.
• To protect the website and prevent spam or abusive requests.

We never sell your data, and we do not use it for marketing without your separate consent. We process the data based on the consent you give when sending the form, and you may withdraw it at any time.

04Who can access your data

• Only authorized clinic staff, each according to their role (reception and administration), with a log recording every action on requests.
• The hosting provider that stores the website and its database, acting as a processor bound to protect it.
• We do not share your data with anyone else unless required by a competent authority under the law.

05Contact through WhatsApp

If you choose to send or follow up on your request through WhatsApp, your message passes through the WhatsApp service and is subject to its privacy policy, in addition to this policy once it reaches the clinic.

06How long we keep data

We keep your request while it is open. Completed or cancelled requests are deleted automatically some time after they close, currently 180 days, unless the law requires us to keep them longer.

07How we protect your data

• An encrypted (HTTPS) connection between your device and the website.
• Staff accounts with limited permissions, encrypted passwords, and automatic locking after failed attempts.
• The “Track requests” page never shows your name or number, and limits attempts to prevent guessing.

08Cookies

We do not use advertising or ad-tracking tools. We count page visits anonymously on our own server without cookies and without storing IP addresses: a visitor is recognised by a temporary key deleted at the end of the day, visit times are kept to the hour only, and none of this is linked to appointment requests. The only cookie is the session cookie used when the clinic team signs in to the dashboard. If a page includes a YouTube video, it is shown in privacy-enhanced mode.

09Your rights

Under the Personal Data Protection Law you have the right to:

• Know how your data is collected and used.
• Access your data and obtain a copy of it.
• Request correction or updating of your data.
• Request destruction of your data when it is no longer needed.
• Withdraw your consent to the processing of your data.

To exercise any of these rights, email us at info@geneoclinic.sa with the subject “Privacy request”, including your request reference number if you have one. We respond within the period set by law. You may also file a complaint with the Saudi Data and AI Authority (SDAIA).

10Data protection officer

Data protection is the responsibility of the Data Security Manager at Virtual Medicine Holding Company, who can be reached at info@geneoclinic.sa.

11Minors

Requests for anyone under eighteen should be submitted by a parent or legal guardian.

12Changes to this policy

We may update this policy when our services or the law change, and we publish any update on this page with its date.