Privacy Policy
Privacy Policy
Last Updated: 7 September 2026
Zuwara respects the privacy of its users and is committed to protecting and processing personal and health information in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia.
Zuwara is owned and operated by ALAQA Business Services Company, a Single-Person Limited Liability Company.
1. Data Controller
ALAQA Business Services Company is responsible for the processing of personal information collected through the Zuwara application, website, and Services, subject to the nature of each processing activity and applicable law.
2. Information We May Collect
Depending on the Service used, we may collect or process account and contact information such as name, mobile number, email address, and profile information.
We may collect identification or verification information where required for a particular Service or regulatory requirement.
We may process appointment, booking, and requested-Service information.
We may process health information including symptoms, medical history, clinical notes, reports, prescriptions, documents, images, or health-related files supplied by users or healthcare practitioners in connection with providing care.
We may process Service-related communications.
Transaction information may include payment amount, payment status, transaction date, and transaction reference. Complete payment-card information is not stored by Zuwara where it is processed directly by a payment service provider.
We may process technical information necessary to operate and protect the Service, including IP address, device type, operating system, application version, security logs, and error logs.
Location data may be processed where a Service requires the user's location and the necessary permission has been granted.
The application may request camera or microphone access for audio or video consultations or when users choose to upload documents or images.
3. Sources of Information
Information may be collected directly from users when they create an account, make a booking, or use the Service.
Information may also be obtained from healthcare practitioners or service providers while providing care.
Certain technical information may be processed automatically by the application or device for operational and security purposes.
We may also receive limited information from service providers used by the platform, including payment or technical service providers.
4. Purposes of Processing
Personal information may be processed to create and administer accounts, provide healthcare services, manage appointments and bookings, enable communication with providers, process payments, issue and maintain Service-related documents, provide customer and technical support, protect accounts and systems, prevent fraud and misuse, improve platform performance and reliability, and comply with legal and regulatory obligations.
Personal information will not be used for an incompatible purpose unless an appropriate lawful basis applies.
5. Health Data
Health information is sensitive personal data and is handled using safeguards appropriate to its nature.
Access is limited to persons and entities requiring the information to provide the relevant Service or satisfy a lawful requirement.
Zuwara does not sell health information or use health information for targeted advertising or direct marketing.
6. Device Permissions
The application may request the following permissions depending on the Service:
Camera: for video consultations or to upload an image or document selected by the user.
Microphone: for audio and video consultations.
Location: for Services requiring the user's location.
Notifications: for appointment, account, and Service notifications.
Users can manage device permissions through their operating-system settings. Disabling a permission may prevent the associated feature from operating.
Audio or video calls are not recorded unless recording functionality is used, the user is informed, and any consent required by law is obtained.
7. Sharing of Information
Zuwara does not sell or rent personal information.
The minimum necessary information may be shared with healthcare practitioners or service providers involved in providing care.
Information may also be shared as necessary with payment providers, hosting and infrastructure providers, security providers, communications and calling providers, notification providers, mapping and location providers, and other technical providers used to operate the platform.
Information may be disclosed to government, regulatory, judicial, or other competent authorities where required by applicable law.
Service providers are required to handle information in accordance with appropriate contractual and regulatory data-protection requirements.
8. International Data Transfers
Personal information is processed and transferred in accordance with applicable laws of the Kingdom of Saudi Arabia.
Where providing a Service requires transferring personal information outside Saudi Arabia, such transfers will only take place in accordance with applicable cross-border transfer requirements.
9. Information Security
Zuwara uses appropriate technical, administrative, and organizational safeguards designed to protect information from unauthorized access, use, alteration, disclosure, or destruction.
No electronic system can guarantee absolute security.
10. Data Retention
Information is retained for as long as necessary to fulfil the purposes for which it was collected and to meet applicable legal and regulatory requirements.
Because Zuwara provides healthcare-related services, certain health, financial, or transaction records may need to be retained after account deletion where required by law.
After the applicable retention period ends and no lawful basis remains for continued retention, information will be securely deleted, destroyed, or anonymized.
11. Account and Data Deletion
Users may request deletion of their account through the Delete Account feature available within the Zuwara application.
Zuwara also provides an external electronic method for submitting an account and data deletion request.
Following verification, the account and information that Zuwara is not legally required to retain will be deleted or anonymized.
Information required to be retained by law will be restricted to the applicable lawful purposes during the retention period.
12. Data Subject Rights
Subject to applicable legal requirements and exceptions, users may have rights to be informed about processing, access and obtain their information, request correction, completion or updating, request destruction where legally available, and withdraw consent where consent is the basis of processing.
Users may exercise these rights by contacting Zuwara.
13. Minors
Where a Service is provided to a minor, certain activities or consents may need to be handled through a parent or lawful representative in accordance with applicable requirements.
14. Cookies and Similar Technologies
The Zuwara website or application may use cookies or similar technologies for operation, security, storing preferences, and improving Service performance.
Information generated by such technologies is handled in accordance with the disclosed purpose and applicable requirements.
15. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in our Services, applicable laws, or data-processing practices.
The latest revision date will appear at the top of this Policy, and material changes will be communicated where required.
16. Privacy Contact
ALAQA Business Services Company – Zuwara
Unified Entity Number: 7028839533
Commercial Registration No.: 1010798723
Building No. 4964, Prince Ahmad Ibn Abdulaziz Street, Laban District, Secondary No. 6446, Postal Code 12935, Riyadh, Kingdom of Saudi Arabia.
Email: contac@zuwara.net
Support Phone: +966 55 543 4123