The S Clinic (“The S Clinic,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit https://www.the-s-clinic.com, create an account, contact us, request an appointment, subscribe to our newsletter, or use our website and related services.

The S Clinic provides medical, dermatological, cosmetic, and aesthetic services in Saudi Arabia. We recognize the importance of protecting patient confidentiality and sensitive information, particularly information relating to health and treatment.

This Privacy Policy covers personal information processed through our website and related digital interactions. Information collected during consultations or clinical treatment may also be subject to applicable healthcare confidentiality requirements and relevant clinic procedures.

We handle personal information in accordance with applicable laws and regulations, including Saudi Arabia’s Personal Data Protection Law (PDPL) and its implementing regulations, where applicable.

Depending on how you interact with us, we may collect the following categories of information:

• Identity information: Your name, username, and other identifying details you provide.
• Contact information: Your email address, telephone number, and preferred contact method.
• Account information: Registration details, account preferences, and authentication-related information.
• Appointment information: Your appointment requests, preferred services, scheduling details, and related communications.
• Health information: Medical history, reported symptoms, allergies, treatment information, clinical assessments, or photographs where necessary for consultations or healthcare services.
• Communications: Messages, inquiries, feedback, survey responses, and information submitted through our contact forms.
• Newsletter information: Your email address and subscription preferences.
• Technical information: IP address, browser type, device information, operating system, referring pages, pages visited, and access timestamps.
• Cookie information: Information collected through cookies and similar technologies, where enabled.

We aim to collect only information reasonably necessary for the relevant purpose. Please avoid submitting detailed medical records or unnecessary sensitive health information through general website forms.

We may collect personal information:

• Directly from you when you register for an account or complete a website form.
• When you contact us by email, telephone, or another communication channel.
• When you request an appointment or information about our services.
• When you subscribe to our newsletter or participate in a survey or promotion.
• During consultations or treatment, where information is required for clinical care.
• Automatically through server logs, cookies, and similar technologies where enabled.
• From an authorized representative or another lawful source where permitted by applicable law.

Where personal information is obtained from another source, we will handle it in accordance with applicable legal requirements.

We may use personal information to:

• Create and manage website accounts.
• Respond to inquiries and requests.
• Arrange, confirm, and manage appointments.
• Communicate information about our services and treatments.
• Support consultations and clinical care where applicable.
• Maintain appropriate patient, appointment, and administrative records.
• Send service-related notifications and account communications.
• Manage newsletter subscriptions and marketing communications where permitted.
• Operate, maintain, and improve our website and digital services.
• Monitor website performance and protect against misuse or security threats.
• Handle complaints and respond to privacy requests.
• Meet applicable legal, regulatory, and recordkeeping obligations.

We will not use personal information for purposes incompatible with the original collection purpose unless permitted by applicable law.

Health information is sensitive and requires appropriate protection.

Where necessary for consultations, treatment, or related healthcare services, The S Clinic may process medical history, reported health conditions, allergies, treatment details, clinical assessments, and other relevant health information.

We will handle such information confidentially and restrict access to authorized personnel and service providers who require it for legitimate purposes, subject to applicable law.

We will disclose health information only where authorized or otherwise permitted or required by applicable law, including where necessary for healthcare delivery, legitimate administrative functions, or regulatory obligations.

Please use clinic-approved channels when sharing detailed medical information. General website contact forms may not be suitable for transmitting sensitive medical records.

Where required by applicable law, we will identify and rely on an appropriate legal basis for processing personal information. Depending on the circumstances, this may include:

• Consent: Where consent is required for a particular processing activity.
• Legal obligations: Where processing is necessary to meet legal or regulatory requirements.
• Service delivery: Where processing is permitted and necessary to respond to your request or provide a requested service.
• Other lawful grounds: Where processing is permitted under the Saudi PDPL and its implementing regulations or other applicable laws.

Where consent is required, we will seek it through an appropriate method. You may withdraw consent where permitted, although withdrawal will not affect processing carried out lawfully before withdrawal and may affect our ability to provide certain services.

The applicable legal basis depends on the type of information and the purpose of processing.

Our website allows visitors to register for accounts and submit inquiries. We may use the information you provide to manage your account, respond to requests, and communicate with you.

If you request an appointment, we may use your contact details and relevant request information to coordinate scheduling and provide appointment-related communications.

Submitting an online request does not necessarily mean an appointment has been confirmed. Confirmation may be provided separately by the clinic.

You are responsible for providing accurate information and protecting your account credentials. Please notify us if you suspect unauthorized access to your account.

The S Clinic may offer newsletters containing clinic updates, educational content, treatment information, offers, and other relevant communications.

We will obtain consent or rely on another lawful basis where required by applicable law. You may unsubscribe through the instructions included in a marketing email, where available, or contact us to update your preferences.

Unsubscribing from marketing communications does not prevent essential communications concerning an account, appointment, or service you have requested.

Our website may use session cookies, persistent cookies, and similar technologies to:

• Support essential website functions.
• Maintain account sessions and remember preferences.
• Improve website functionality and usability.
• Understand website traffic and performance.
• Measure marketing effectiveness or support advertising, where enabled.

Session cookies generally expire when you close your browser, while persistent cookies may remain until they expire or are deleted.

You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

Where consent is required for analytics, advertising, or other non-essential tracking technologies, we will provide an appropriate consent mechanism.

When you visit our website, technical information may be recorded automatically for security, troubleshooting, website administration, and performance monitoring.

If analytics, advertising, or social media tracking services are enabled, third-party providers may collect information about website interactions through cookies, pixels, scripts, or similar technologies.

These providers may process information under their own privacy policies. Where required by law, we will provide appropriate disclosures and choices.

The specific analytics, advertising, and tracking services actually in use should be verified against the website's current configuration.

We may share personal information where necessary and lawful with:

• Authorized clinic personnel: To manage accounts, appointments, patient communications, and clinical or administrative activities.
• Website and hosting providers: To operate, maintain, and secure our website and systems.
• Communication providers: To deliver emails, account notifications, and newsletter communications.
• Healthcare service providers: Where necessary and legally permitted for healthcare delivery or related services.
• Professional advisers and auditors: Where information is reasonably necessary for legitimate professional, administrative, or legal purposes.
• Government and regulatory authorities: Where disclosure is required or permitted by applicable law.
• Business transaction parties: Where necessary in connection with a legitimate restructuring or transfer, subject to applicable legal safeguards.

We take reasonable steps to ensure that service providers processing personal information on our behalf are subject to appropriate confidentiality and data-protection obligations.

We do not sell personal information as part of our ordinary website operations.

Our website may contain links to external websites, social media platforms, booking services, or other third-party tools.

These services operate independently and may collect information under their own privacy policies. The S Clinic does not control independent third-party privacy practices.

Please review the relevant privacy notices before providing personal information through external websites or services. A link does not necessarily imply endorsement by The S Clinic.

Personal information may be processed or accessed outside Saudi Arabia depending on our hosting arrangements and the third-party services we use.

Any transfer of personal information outside the Kingdom will be handled in accordance with applicable Saudi data-protection requirements, including the PDPL and its implementing regulations. Appropriate transfer conditions and safeguards will be applied where required by law.

The website's actual hosting location and the locations used by relevant service providers should be verified before publication. We will not identify a specific hosting country unless it has been confirmed.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, disclosure, or misuse.

Access to sensitive information should be limited to authorized individuals who require it for legitimate duties. However, no website or electronic transmission method can be guaranteed to be completely secure.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal, healthcare, regulatory, and recordkeeping requirements.

When information is no longer required, we will take appropriate steps to delete, destroy, or anonymize it where permitted and required by applicable law.

Subject to applicable law and relevant exceptions, you may have the right to:

• Be informed about the collection and processing of your personal information.
• Request access to personal information held about you.
• Request correction or completion of inaccurate information.
• Request destruction of personal information where the applicable legal conditions are met.
• Withdraw consent where processing is based on consent and withdrawal is permitted.
• Exercise other rights available under the Saudi PDPL and its implementing regulations.

Certain information may need to be retained where required by law or applicable healthcare recordkeeping obligations.

To submit a request, please contact us using the details in Section 18. We may need to verify your identity before processing your request.

You may also have the right to raise a complaint with the competent authority in accordance with applicable law.

Our website and services may be accessed by individuals under the age of 18, depending on the service and applicable requirements.

Where a service involves a child, The S Clinic will handle the child's personal information in accordance with applicable Saudi law, including any requirements relating to parental or legal guardian authorization.

We do not intend to collect children's personal information through the website without an appropriate lawful basis and any required authorization.

If you believe a child's personal information has been collected inappropriately, please contact us so that we can review the matter and take appropriate action.

The S Clinic may update this Privacy Policy from time to time to reflect changes in our services, information-processing practices, technologies, or applicable legal requirements.

Updated versions will be published on this page with a revised “Last Updated” date. Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

We encourage you to review this page periodically to remain informed about how we handle personal information.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact The S Clinic:

Email: info@the-s-clinic.com
Phone: +966-567-788947
Address: 2815 Prince Muhammad Ibn Abdulaziz Street, 7967 Al Ariydh District, Madina 42314, Saudi Arabia.
Website: https://www.the-s-clinic.com/en

You may also use the website's contact form to submit an inquiry.

Please avoid including detailed medical records or unnecessary sensitive health information in general email or contact-form messages.