Information Collection and Use

This section covers the KCHJ website. The sections that follow it cover the King's Jeddah mobile app. Neither covers KCHJ activities that are "offline" or unrelated to the website and the app. KCHJ collects specific anonymous data regarding website usage. This information does not personally identify users, by itself or in combination with other information, and is gathered to improve the website's performance. The anonymous data collected by the KCHJ website may include:

• Browser type
• Time and duration of website visit

KCHJ may also ask you to provide personally identifiable information on the website, including:

• Your name
• Address
• Telephone number
• Email address

This information may be collected when you:

• Send feedback emails to KCHJ
• Register for KCHJ services
• Make purchases via the website

You have the option of whether or not to provide this personally identifiable information.

The King's Jeddah app

The King's Jeddah app for iPhone and Android lets you book appointments, read your results, check in when you arrive, settle a bill and see a doctor by video. To do that it asks for data from your phone. You choose what to grant, and you can withdraw any permission later in your phone's settings without losing the rest of the app.

Depending on which parts of the app you use, we may handle:

• Your name, national ID or Iqama number, date of birth, mobile number and email address, so we can match you to your hospital record.
• Your appointments, visits, prescriptions, laboratory and imaging results, vital signs and invoices, read from the hospital's medical records system when you open the screen that shows them.
• Your phone's location, if you turn on arrival alerts.
• Health and fitness readings from Apple Health or Google Health Connect, if you connect them.
• Photographs, video and sound, when you attach a photo to a support request, scan a code, or join a video consultation.
• Device and diagnostic data: app version, device model, operating system, crash reports and anonymous usage counts.

Location

The app can tell you when you have reached the hospital and offer to check you in for your appointment. For that it asks for access to your location, including background location on Android, so the alert still reaches you when the app is closed.

Your phone compares where it is against the hospital's fixed coordinates, and the only result of that comparison is whether you are inside the area. We built it so that:

• Your coordinates stay on your phone. The app does not store them and does not send them to KCHJ or to anyone else.
• The app takes a single reading when it needs one. It does not track your movements and does not build a history of where you have been.
• When you check in, the hospital receives the fact that you arrived for your appointment. It does not receive your position.
• Arrival alerts stay off until you switch them on, and you can switch them off again in the app or revoke the permission in your phone's settings.

The app also uses your location to show the hospital on a map and to help you find your way around the campus. That lookup stays on your phone as well.

Health and fitness data

If you connect Apple Health or Google Health Connect, the app can show your own readings next to the records from your hospital visits. You choose which categories to share, one category at a time.

Depending on what you allow, the app may read:

• Steps, activity and calories burned
• Heart rate and resting heart rate
• Blood pressure, blood glucose and oxygen saturation
• Weight, height and body temperature
• Respiratory rate and sleep

The app reads these to display them to you. Your readings stay inside Apple Health or Google Health Connect on your phone. We do not copy them to KCHJ servers, we do not pass them to any third party, and we do not use them for advertising. If you enter a blood pressure, weight or blood glucose reading in the app, it saves to your phone's health store and stays there.

You can withdraw any category at any time from inside the app, or revoke the permission altogether in Apple Health or Google Health Connect. Once you withdraw it, the app reads nothing further.

Camera, microphone and photographs

The app asks for your camera when you scan a check-in or parking code, attach a photograph to a support request, or join a video consultation. It asks for your microphone for video consultations and for voice input to Dr Kings.

A video consultation runs live between you and your clinician, and we do not record it. A photograph you attach to a support request reaches the KCHJ service desk and stays with that request. The app does not read your photo library on its own; it opens your phone's own picker and receives only the file you pick.

Your hospital records in the app

When you sign in, the app shows you information held in the hospital's medical records system: your appointments, visits, prescriptions, laboratory and imaging results, vital signs and invoices. The app displays that information. It does not keep a second copy of your medical record.

We sign you in with a one-time code sent to your registered mobile number. You can add fingerprint or face unlock on top of that, which your own phone checks on the device. If you invite a family member, or accept an invitation, each of you sees only the records of the profile being viewed.

We carry your information over an encrypted connection to servers located in the Kingdom of Saudi Arabia.

Analytics and crash reporting

The app sends crash reports and anonymous usage counts to Firebase, a Google service, so that we can find faults and fix them. These records tell us which screen failed, on which device model and app version. We do not attach your name, your national ID or anything from your medical record to them.

Use and Disclosure of Information

Except as otherwise stated below, KCHJ does not sell, trade, or rent your personally identifiable information collected on the site to others. The information collected by the KCHJ website is used to:

• Process orders
• Keep you informed about your order status
• Notify you of products or special offers that may be of interest to you
• For statistical purposes to improve the website

KCHJ will disclose your delivery information to third parties for order tracking purposes or to process your cheque or money order, as appropriate. For example, KCHJ must release your mailing address information to the delivery service to deliver products that you have ordered.

The data may be used to:

• Improve the functionality of the KCHJ website
• Perform statistical and data analysis
• Deliver your order
• Deliver promotional emails to you from KCHJ

All credit/debit card details and personally identifiable information will NOT be stored, sold, shared, rented, or leased to any third parties.

Cookies

Cookies are small bits of data cached in a user's browser. KCHJ utilizes cookies to determine whether or not you have visited the homepage previously. The cookie is used to track information such as:

• Number of users
• Frequency of use
• Other preferred sites

However, no other user information is collected.

KCHJ may use non-personal "aggregated data" to enhance the operation of our website or analyze your interest in other areas of our website.

Disclosure of Information

KCHJ may disclose your personally identifiable information under the following circumstances:

• With your permission, to publish content or feedback you provide
• In response to a subpoena, court order, or other such requests
• In response to a law enforcement agency's request or as otherwise required by law.

Security

KCHJ takes appropriate steps to ensure data privacy and security through appropriate hardware and software methodologies. However, KCHJ cannot guarantee the security of any information disclosed online.

Other Websites

The KCHJ website may contain links to other websites on the Internet owned and operated by third parties. KCHJ is not responsible for the privacy policies or practices of these third-party websites, and their information practices are not covered by this policy. These other sites may send their own cookies or clear GIFs to users, collect data, or solicit personally identifiable information. KCHJ cannot control this collection of information. You should contact these entities directly if you have any questions about their use of the information they collect.

Minors

The KCHJ website is not intended for children under eighteen (18) years of age. It does not knowingly collect or distribute personal information from or regarding minors under 18. Minors are not permitted to use the KCHJ website or services, and KCHJ requests that minors under 18 not submit any personal information to the website.

Corrections and Updates

If you need to update or correct your Personal Information, you may send updates and corrections to KCHJ by email at dpo@kch.sa.

Modifications of the Privacy Policy

KCHJ reserves the right to amend this Privacy Policy from time to time to meet the requirements and standards. Modifications will be effective on the day they are posted on the KCHJ website. The use of the KCHJ website shall comprise acceptance of any changes in this Privacy Policy, and hence customers are encouraged to visit this page periodically to stay informed of any updates.

Questions about this page: dpo@kch.sa or 920 066 668