Who we are and the law that governs this page

King's College Hospital London - Jeddah (KCHJ) is the data controller for the personal data we collect through this website, the patient portal, and the KCHJ mobile app. We are registered with the SDAIA National Data Governance Platform, and our processing follows the Personal Data Protection Law (Royal Decree M/19, as amended in March 2023) and the executive regulations issued by SDAIA.

Information Collection and Use

This section covers the KCHJ website. The sections that follow it cover the King's Jeddah mobile app. Neither covers KCHJ activities that are "offline" or unrelated to the website and the app. KCHJ collects specific anonymous data regarding website usage. This information does not personally identify users, by itself or in combination with other information, and is gathered to improve the website's performance. The anonymous data collected by the KCHJ website may include:

• Browser type
• Time and duration of website visit

KCHJ may also ask you to provide personally identifiable information on the website, including:

• Your name
• Address
• Telephone number
• Email address

This information may be collected when you:

• Send feedback emails to KCHJ
• Register for KCHJ services
• Make purchases via the website

You have the option of whether or not to provide this personally identifiable information.

The King's Jeddah app

The King's Jeddah app for iPhone and Android lets you book appointments, read your results, check in when you arrive, settle a bill and see a doctor by video. To do that it asks for data from your phone. You choose what to grant, and you can withdraw any permission later in your phone's settings without losing the rest of the app.

Depending on which parts of the app you use, we may handle:

• Your name, national ID or Iqama number, date of birth, mobile number and email address, so we can match you to your hospital record.
• Your appointments, visits, prescriptions, laboratory and imaging results, vital signs and invoices, read from the hospital's medical records system when you open the screen that shows them.
• Your phone's location, if you turn on arrival alerts.
• Health and fitness readings from Apple Health or Google Health Connect, if you connect them.
• Photographs, video and sound, when you attach a photo to a support request, scan a code, or join a video consultation.
• Device and diagnostic data: app version, device model, operating system, crash reports and anonymous usage counts.

Location

The app can tell you when you have reached the hospital and offer to check you in for your appointment. For that it asks for access to your location, including background location on Android, so the alert still reaches you when the app is closed.

Your phone compares where it is against the hospital's fixed coordinates, and the only result of that comparison is whether you are inside the area. We built it so that:

• Your coordinates stay on your phone. The app does not store them and does not send them to KCHJ or to anyone else.
• The app takes a single reading when it needs one. It does not track your movements and does not build a history of where you have been.
• When you check in, the hospital receives the fact that you arrived for your appointment. It does not receive your position.
• Arrival alerts stay off until you switch them on, and you can switch them off again in the app or revoke the permission in your phone's settings.

The app also uses your location to show the hospital on a map and to help you find your way around the campus. That lookup stays on your phone as well.

Health and fitness data

If you connect Apple Health or Google Health Connect, the app can show your own readings next to the records from your hospital visits. You choose which categories to share, one category at a time.

Depending on what you allow, the app may read:

• Steps, activity and calories burned
• Heart rate and resting heart rate
• Blood pressure, blood glucose and oxygen saturation
• Weight, height and body temperature
• Respiratory rate and sleep

The app reads these to display them to you. Your readings stay inside Apple Health or Google Health Connect on your phone. We do not copy them to KCHJ servers, we do not pass them to any third party, and we do not use them for advertising. If you enter a blood pressure, weight or blood glucose reading in the app, it saves to your phone's health store and stays there.

You can withdraw any category at any time from inside the app, or revoke the permission altogether in Apple Health or Google Health Connect. Once you withdraw it, the app reads nothing further.

Camera, microphone and photographs

The app asks for your camera when you scan a check-in or parking code, attach a photograph to a support request, or join a video consultation. It asks for your microphone for video consultations and for voice input to Dr Kings.

A video consultation runs live between you and your clinician, and we do not record it. A photograph you attach to a support request reaches the KCHJ service desk and stays with that request. The app does not read your photo library on its own; it opens your phone's own picker and receives only the file you pick.

Your hospital records in the app

When you sign in, the app shows you information held in the hospital's medical records system: your appointments, visits, prescriptions, laboratory and imaging results, vital signs and invoices. The app displays that information. It does not keep a second copy of your medical record.

We sign you in with a one-time code sent to your registered mobile number. You can add fingerprint or face unlock on top of that, which your own phone checks on the device. If you invite a family member, or accept an invitation, each of you sees only the records of the profile being viewed.

We carry your information over an encrypted connection to servers located in the Kingdom of Saudi Arabia.

Analytics and crash reporting

The app sends crash reports and anonymous usage counts to Firebase, a Google service, so that we can find faults and fix them. These records tell us which screen failed, on which device model and app version. We do not attach your name, your national ID or anything from your medical record to them.

Why we use it, and on what legal basis

For each purpose below we record the legal basis under PDPL. You may withdraw any consent-based purpose at any time without affecting purposes we are obliged to keep.

Your health data

The Personal Data Protection Law treats health data as sensitive personal data, and we handle it on that footing. Your clinical record, appointments, prescriptions, laboratory and imaging results are encrypted in storage and in transit, held inside the Kingdom, and opened only by the clinicians and staff involved in your care. We do not rely on legitimate interest to process health data and we never use it for marketing. Research use requires either your consent or de-identification that leaves no route back to you.

Where we store your data

All patient records, medical data and personal information we collect through kch.sa, the patient portal and the King's Jeddah app are held in certified data centres inside the Kingdom of Saudi Arabia. We do not transfer personal or health data outside the Kingdom unless SDAIA permits the transfer and the safeguards the law requires are in place.

Use and Disclosure of Information

Except as otherwise stated below, KCHJ does not sell, trade, or rent your personally identifiable information collected on the site to others. The information collected by the KCHJ website is used to:

• Process orders
• Keep you informed about your order status
• Notify you of products or special offers that may be of interest to you
• For statistical purposes to improve the website

KCHJ will disclose your delivery information to third parties for order tracking purposes or to process your cheque or money order, as appropriate. For example, KCHJ must release your mailing address information to the delivery service to deliver products that you have ordered.

The data may be used to:

• Improve the functionality of the KCHJ website
• Perform statistical and data analysis
• Deliver your order
• Deliver promotional emails to you from KCHJ

All credit/debit card details and personally identifiable information will NOT be stored, sold, shared, rented, or leased to any third parties.

Cookies

We ask before setting any cookie that is not strictly necessary. On your first visit a banner lets you accept all, reject all, or choose category by category, and nothing outside the strictly necessary group loads until you decide. You can change your answer whenever you like through Manage cookies in the footer.

• Strictly necessary: sign-in, security and keeping the site available. These cannot be switched off.
• Analytics: how many people visit and which pages they read, so we can improve them.
• Functional: remembers your language and the preferences you set.
• Targeting: measures how our campaigns perform.

Disclosure of Information

KCHJ may disclose your personally identifiable information under the following circumstances:

• With your permission, to publish content or feedback you provide
• In response to a subpoena, court order, or other such requests
• In response to a law enforcement agency's request or as otherwise required by law.

Security and breach response

We protect your data with AES-256 encryption at rest, TLS 1.3 in transit, role-based access on a least-privilege model, and immutable audit logging. If we detect a personal-data breach, we notify SDAIA within 72 hours and affected patients without undue delay.

Your rights under PDPL

PDPL gives you a clear set of rights over your personal data. You can exercise any of them by emailing the Data Protection Officer at dpo@kch.sa. We acknowledge requests within two business days and aim to respond within ten business days.

• The right to be informed: to know what we hold about you, why we hold it, and who we share it with.
• The right of access: to obtain a copy of your personal data.
• The right to rectification: to have anything inaccurate or incomplete corrected.
• The right to erasure: to have data destroyed once we no longer have a lawful reason to keep it.
• The right to portability: to receive your data in a readable format, or have it passed to another controller.
• The right to withdraw consent: at any time, for anything we do on the basis of consent.

Withdrawing consent does not stop processing we are legally required to continue, such as keeping your medical record for the period Saudi health regulations set.

Other Websites

The KCHJ website may contain links to other websites on the Internet owned and operated by third parties. KCHJ is not responsible for the privacy policies or practices of these third-party websites, and their information practices are not covered by this policy. These other sites may send their own cookies or clear GIFs to users, collect data, or solicit personally identifiable information. KCHJ cannot control this collection of information. You should contact these entities directly if you have any questions about their use of the information they collect.

Minors

The KCHJ website is not intended for children under eighteen (18) years of age. It does not knowingly collect or distribute personal information from or regarding minors under 18. Minors are not permitted to use the KCHJ website or services, and KCHJ requests that minors under 18 not submit any personal information to the website.

Changes to this policy

When we make a material change we ask you to read and accept the updated version inside the portal before the change applies to you.

Questions about this page: dpo@kch.sa or 920 066 668