Privacy Notice
IFSAHI Platform – WWW.IFSAHI.COM
1. Introduction
IFSAHI (“the Platform”, “we”, or “us”) is a Saudi digital platform specialized in the electronic completion and management of medical disclosure forms for authorized beneficiary entities, such as employers or companies, without providing any insurance or medical services.
IFSAHI is committed to protecting personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations.
This Privacy Notice explains how your personal data is collected, used, protected, and your legal rights as a data subject.
2. Definitions
- Personal Data: Any data that identifies or makes an individual identifiable.
- Sensitive Data: Includes health and medical data and any data classified as sensitive under the law.
- Consent: A clear, explicit, and voluntary approval given by the data subject.
- Data Controller: IFSAHI Platform as the entity determining purposes and means of processing.
3. Personal Data Collected
Depending on your use of the Platform, we may collect:
- Full name
- National ID / Iqama number
- Date of birth
- Gender
- Nationality
- Mobile number and email address
- Employment details
- Dependents’ data (if applicable)
- Electronic or handwritten signature
- Medical disclosure information entered in the form
Health data is provided directly by the data subject or their authorized representative.
4. Data Collection Methods
Data is collected through:
- Direct user input on the Platform
- Uploaded files (e.g., Excel)
- Authorized beneficiary entities
- Approved electronic channels
5. Purpose of Data Processing
Personal data is processed for:
- Managing and completing medical disclosures
- Documentation and signature verification
- Exporting disclosures to beneficiary entities
- Regulatory compliance
- Platform improvement and security
- Preventing misuse or unlawful activities
IFSAHI does not provide medical diagnoses, insurance evaluations, or acceptance decisions.
6. Data Sharing
Personal data may only be shared with:
- The beneficiary entity for which the disclosure was completed
- IT service providers (hosting, security, backups)
- Government authorities upon lawful request
Data is never sold or commercially exploited.
7. Data Processing Location
- Data is primarily processed within Saudi Arabia
- Cross-border processing may occur in compliance with applicable regulations
8. Data Retention
Data is retained only for the period necessary to fulfill legal and operational purposes, after which it is securely deleted.
9. Data Subject Rights
You have the right to:
- Know the purpose and legal basis of processing
- Access your personal data
- Obtain a copy of your data
- Request correction or update
- Request deletion when no longer required
- Withdraw consent
- Object to or restrict processing as permitted by law
10. Exercising Your Rights
You may contact us at:
privacy@ifsahi.com
We will respond within (30) days.
11. Updates
This Privacy Notice may be updated from time to time. Updates will be published on the Platform.
12. Consent
By using IFSAHI, you acknowledge that:
- You have read and understood this Privacy Notice
- You consent to the processing of your personal data as described
- You are responsible for the accuracy of the data you provide