Privacy Policy

Introduction

This Privacy Policy explains how Taqrir Alraqamiya Company (“TAQRIR”) processes Personal Data when users access or use the TAQRIR EMS platform and related services.

TAQRIR processes Personal Data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable healthcare data protection standards.

Roles In Data Processing

Healthcare facilities act as the Data Controller of patient data.

TAQRIR acts as a Data Processor, processing Personal Data solely on behalf of the Controller to provide platform services.

Types Of Data Collected

Account Information

Name
Email Address
Professional Role
Organization or Facility Name

Operational Data

EMS Documentation
Workflow Records
Operational Reports

Sensitive Health Data

Patient Status Information
Clinical Observations
Medical Documentation entered by authorized users

Purpose Of Processing

Personal Data is processed only for:

Providing EMS documentation and reporting tools
Managing operational workflows
Platform administration and security
Supporting healthcare service delivery
Compliance with applicable healthcare regulations

TAQRIR does not use healthcare data for advertising or unrelated commercial purposes.

Legal Basis For Processing

Personal Data is processed based on:

Contractual necessity (to provide platform services)
Legal obligations under applicable regulations
Explicit consent where required
Legitimate interests related to security and operations

Each processing activity is mapped to an appropriate legal basis in accordance with PDPL requirements.

Data Storage And Residency

All Personal Data is hosted and stored within the Kingdom of Saudi Arabia using secure cloud infrastructure, including:

Google Cloud Platform (Dammam region)

Data is not transferred outside the Kingdom unless compliant with PDPL and subject to appropriate safeguards.

Data Sharing

Personal Data is shared only with authorized service providers necessary for platform operation, including:

Google Cloud (infrastructure hosting)
Anthropic Claude API (AI-assisted documentation processing)
Monitoring and security providers

All third parties are bound by contractual data protection obligations.

AI Processing Safeguards:

Patient identifiers are removed or irreversibly anonymized
Processing is limited to structured report text
No data is used for model training
No persistent storage at AI provider level
Data is processed on a request-response basis only

Data Retention

Personal Data is retained only as necessary for service provision.

Upon termination:

Data may be retained for up to 30 days for export
Data is deleted or anonymized within 90 days

unless retention is required by law.

Data Security

TAQRIR implements appropriate safeguards including:

Encryption in transit and at rest
Role-based access control
Identity authentication
Logging and monitoring
Vulnerability management
Incident response procedures

Data Subject Rights

Individuals may exercise the following rights under PDPL:

Right of access
Right to correction
Right to deletion
Right to data portability
Right to object to processing
Right to withdraw consent
Right to be informed

Requests will be handled within ten (10) business days.

Requests should be submitted through the relevant healthcare provider.

Complaints And Regulatory Authority

Data subjects may submit complaints to the Saudi Data and Artificial Intelligence Authority (SDAIA).

TAQRIR can be contacted to facilitate such requests.

Cookies And Tracking

The platform does not use cookies or tracking technologies for advertising purposes.

Any essential technical tracking is limited to system functionality and security.

Children And Minors

Where Personal Data of minors is processed within EMS operations, such processing is conducted strictly under the authority of healthcare providers and in compliance with applicable regulations.

Data Protection Officer And Contact

TAQRIR has designated a privacy contact for data protection matters.

For inquiries or complaints:

Taqrir Alraqamiya Company

Email: admin@taqrir.sa