Daleelk · Legal

Privacy Policy

This policy explains what professional information Daleelk collects from doctors, why we collect it, what becomes public, and the rights you have over your data under the Saudi Personal Data Protection Law (PDPL).

Last updated: 23 September 2026

This wording is an initial draft published for legal review, and is not legal advice.

Who we are

Daleelk is a professional doctor profile platform based in Jeddah, Saudi Arabia. Doctors enter their own professional information, review it, and approve it before any public profile page is published.

What we collect

We collect only what is needed to build your professional profile and to keep your account secure:

  • Your name in Arabic and English, gender and photograph.
  • Specialty, sub-specialties, years of experience, board or qualification type, cases treated, procedures performed and languages spoken.
  • Practice locations: clinic or hospital name, city, district, location link and logo where available.
  • Your SCFHS licence number and any verification document you upload. These are kept private.
  • Account data: email address, contact phone number, password (stored only as a cryptographic hash), sign-in attempts and security events.
  • Basic usage counts, such as how many times your profile page was opened.

Why we collect it and our legal basis

Our legal basis is your consent, which you give at registration and can withdraw at any time. We use the information to generate your bilingual profile page, to draft a professional introduction from your own answers, to verify your licence, to contact you about your profile, and to build a structured, doctor-approved database that supports Daleelk's doctor discovery and recommendation features.

We do not use your information for automated decisions that affect your rights, and we do not process it for purposes you have not agreed to.

What is public and what stays private

Public, and only after you approve your profile: your name, specialty and sub-specialties, approved introduction, years of experience, qualifications, cases, procedures, languages, photograph, and your clinic or hospital cards with their location links.

Never public: your licence number and verification documents, your email address and personal phone number, your password, your consent records, internal review notes and security logs. The public website reads from a restricted view that does not contain these fields at all.

Who we share with

We do not sell your data, and we do not share it for anyone else's marketing. We share it only with the service providers that run the platform on our behalf – cloud hosting and database, file storage, email delivery, and the language model that drafts and translates your introduction – and only to the extent needed to provide that service. We may also disclose information where a Saudi law, court order or competent authority requires it.

Where your data is hosted and processed

Your profile database and your files (photographs, clinic logos and licence documents) are hosted in the Republic of Singapore, in a managed cloud region operated by our hosting provider. Email delivery and the language model that drafts and translates your introduction are operated by providers in the United States. No other country processes your data.

Because these transfers take place outside the Kingdom, we rely on the transfer conditions permitted by the PDPL and its Implementing Regulations, and the safeguard we use is a written data processing agreement with each provider containing standard contractual clauses that impose protection at least equivalent to the PDPL, together with a transfer risk assessment. You can request a summary of these safeguards from our privacy contact below.

How long we keep it

We keep your profile information for as long as your account is active. We ask you to confirm or update it every 12 months. If you delete your account or withdraw consent, we remove your public profile immediately and delete your personal data within 30 days, except records we must keep for a legal or accounting reason, and security and consent logs which we keep for up to 24 months.

Your rights

Under the PDPL you have the right to:

  • Know how your data is used and access a copy of it.
  • Correct or update anything inaccurate or incomplete.
  • Request deletion of your data and your account.
  • Withdraw your consent at any time, which stops further processing.
  • Download your collected information in a readable format.
  • Complain to the competent authority in the Kingdom if you are not satisfied with our response.

Contacting us about privacy

Write to privacy@daleelkcare.com for any privacy question or to exercise any right above. We aim to respond within 30 days.