• Introduction

This Privacy Policy applies to the Data collected from users of the website https://cloudsolutions.com.sa/, made available by Cloud Solutions, a company established under the laws of the Kingdom of Saudi Arabia.

Policy Update

• We may at any time update the Privacy Policy by publishing the varied Privacy Policy on the Sites. If you are accessing your own account or a particular service, we may provide you with further notice that the Privacy Policy has been updated.
• This Privacy Policy was last updated on 16 February 2025.
• By using any of our services, including the Sites, Telehealth Services and Online Pharmacy, you expressly agree and consent to our use of your Data in accordance with this Privacy Policy, including the disclosures described herein and the potential transfer of your Data to another territory.

Compliance

• Our Sites and our online services are intended for users located in the Kingdom of Saudi Arabia (KSA). We comply with all applicable data protection laws in this jurisdiction, which includes the Saudi Arabia Personal Data Protection Law as amended (the KSA PDPL).

• information which is able to personally identify you and which may be provided by you at the time of voluntary registration for the services offered by us or gathered through your use of the Sites (including when you make enquiries through the Sites), this may include name, address, email address, date of birth, mobile number, marital status, family members or dependent, National ID card/number, username etc. In addition, this may include information about a deceased individual if it would lead to them or a member of their family be identified specifically;
• financial information (for example, credit card details, bank details);
• information related to your use of the Sites (for example, domain name, IP address and cookies, location data);
• information relating to your purchase of or access to a product or service (such as records of purchase, delivery details, payment receipts etc.);
• any feedback or comments provided by you online;
• information which we consider to be Sensitive Personal Information concerning, including or relating to your health and which may include information:

1. about your individual health, including your medical history;
2. about your physical attributes, such as weight, height, blood pressure etc.;
3. about any disabilities that you may have or have had;
4. about any healthcare services that are being provided, or have been provided, to you;
5. provided by you in connection with the donation, by you of any body part or any bodily substance, or derived from the testing or examination of any body part, or any bodily substance of you; and
6. about you which is collected before, or in the course of, and incidental to, the provision of any healthcare services

• information relating to your medical insurance coverage, should you choose to provide it for direct billing purposes;
• information relating to your employment and career (for example job title, employer's name and address, work experience, payment etc.); and
• any other information you independently choose to provide to us via the Sites from time to time (for example, if you complete an enquiry form, register for a promotion or participate in a support chat service).
• The Sites will record and track the use you make of the Site through the use of, amongst other things, cookies and other monitoring tools and devices. You can choose to turn off non-essential cookies in your browser and you can delete them from your hard drive. You do not need to have cookies turned on to use the Sites but you will need them to use and access some parts of the Sites and to access personalised or secure content on the Sites. We may use essential cookies which are strictly necessary without your consent and are automatically set. You will not be able to disable these unless you change your browser or device settings. Some webpages in the Sites may not function as intended if the essential cookies are turned off. The use of essential cookies will not prejudice your rights as a data subject and no Sensitive Personal Information will be processed.

• track traffic patterns to and from the Sites (and which may include retaining details of your IP address, operating system, browser, domain and other user information (e.g. your username));
• inform what advertising is being shown;
• ensuring that the content of the Sites is presented in the most effective manner for you and for the device which you are using to access the Sites;
• to review, develop, facilitate or improve our delivery of the Sites and the services available on the Sites;
• simplify the entry of your Data in certain online forms;
• enable you to enter the Sites and access and use certain services provided via the Sites;
• to contact you for follow-up purposes if a consultation session is ended due to a technical fault or for some unknown reason;
• to respond to any queries, requests, or comments that you have submitted;
• to review, develop and improve the services which we offer;
• to notify you about changes to the Sites or our services, where applicable;
• to protect the safety of members of the public and users of our services;
• for non-personally identifiable information only, with advertisers and other third-party providers for marketing purposes;
• with vendors, administrative service providers, technology providers, and carefully selected business associates for data validation, enhancement, information verification and suppression services;
• for any other purpose for which the user provides consent; and
• as necessary to comply with legal and regulatory obligations, including record keeping, and if necessary in the exercise or defence of legal claims.

• where we have obtained your specific, or where necessary, explicit consent to such use. We will in each case inform you about the processing of your Data and your related rights prior to obtaining your consent;
• it is necessary for the performance of a previous agreement with you;
• it is necessary for our legitimate interest, providing the Data does not include Sensitive Personal Information. Using your Data helps us to operate, improve and minimise any disruption to our Sites. We also have a legitimate interest in sending you information on the products, services and offerings we believe will be of interest to; and
• it is necessary for compliance with our legal and regulatory obligations.

• We may use your Data (with the exception of Sensitive Personal Information) to contact you directly to provide you with information about services that you have requested from us or which we feel may interest you, provided we receive your explicit consent. You can opt out of receiving such communications at any time.

Where will we process your Data

• The Data you submit may be transferred, stored and hosted outside of the KSA, and may be transferred to countries which do not have data protection laws or to countries where your privacy and other fundamental rights will not be protected as extensively. These and all other transmissions will remain secure and under our control.
• If you are a KSA resident, when we transfer your Data to third parties based outside the KSA, we will do so in compliance with the requirements set out in the KSA PDPL and its Implementing Regulations and Data Transfer Regulation.
• We will strive to implement appropriate measures and safeguards for example the SDAIA Standard Contractual Clauses, to ensure that your Data remains protected and secure when it is transferred outside your home country, and you can exercise your rights effectively.

• access your Data held by us;
• request the deletion of Data;
• correct, complete or update your Data;
• obtain your Data in a legible and clear format; and
• withdraw consent at any time.

• If it would impact the confidentiality we owe to others;
• We are legally entitled to deal with the request in a different way; or
• If the request involves deletion of Data and its retention is required to comply with legal requirements.

• We may share anonymised Data or derivations of such data with third parties for research, statistical or epidemiological purposes in accordance with the law and/or regulations or courts of the competent jurisdiction. We will ensure that you cannot be identified from any such Data before sharing it.

• We are committed to protecting the Data you provide us. We have implemented security policies, rules and technical measures to protect the Data that we have under our control, in accordance with applicable data protection laws. The security measures are designed to prevent unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.
• In addition, we limit access to your Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Data on our instructions and they are subject to a duty of confidentiality.
• We have put in place procedures to deal with any suspected Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

• We will keep your Data only for as long as is necessary to respond to any queries or complaints, to improve the services that we offer to you, to comply with any legal obligations to which we may be subject, and to comply with medical good practice and regulatory requirements in relation to the retention of medical records.
• To determine the appropriate retention period for Data, we consider the amount, nature, and sensitivity of the Data, the potential risk of harm from unauthorised use or disclosure of your Data, the purposes for which we process your Data and whether we can achieve such purposes through other means, and the applicable legal requirements.
• When your Data is no longer required, we will ensure it is securely deleted or annoymised.
• If you are residing in the Kingdom of Saudi Arabia and order physical goods from us, such as through our online pharmacy, we will only retain the Data related to the transaction for as long as necessary, taking into account the nature of the transaction, unless we are required to retain the Data longer by law.

• Our Sites may provide links to third-party websites for your convenience. If you access those links, you will leave our Sites. We do not control those third party websites or their privacy practices, which may differ from ours. We do not endorse or make any representations about third-party websites. This Privacy Policy does not cover the personal data you choose to give to unrelated third parties. We encourage you to review the privacy policy of any company before submitting your Data. Some third-party companies may choose to share their personal data with us; that sharing is governed by that third-party company's privacy policy.

• ​If you have any questions or concerns in relation to our use of your Data or would like to exercise your rights under this Privacy Policy, you can contact us by email at: info@cloudsolutions.com.sa
• or by postal mail at:
• P. O. Box 91877
• Riyadh 11643 Kingdom of Saudi Arabia

• ​In the event that Cloud Solutions is acquired by or merged with a third-party entity, or all or substantially all of its assets are sold, assigned or transferred to a third party, or upon the occurrence of a change of control of Cloud Solutions or its bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application to Cloud Solutions of laws or equitable principles affecting creditors' rights generally, the information collected by Cloud Solutions from users may be transferred or assigned as part of such merger, acquisition, sale, change of control or other specified event, but to the extent permitted by applicable law, the obligations of this Privacy Policy shall remain binding on Cloud Solutions successors and assigns.